="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3abf5375c3866c0afd7148bb0dbf63d6a303e9125d9ad676bffcd27b2c53e52bcf1a1ce477ea55f678c2ed40464e3474c6156a7f6eaca23d80e426209b43d6d6818277a8e2f463ee217205a30440776e59857fc14fc2572251bbb80eaee7edc46e42abe63c1ba32adb2fdb60513e80fde", 0xde}], 0x1, &(0x7f00000005c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x80000001}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x33, 0x0, '\x00', [@pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0xffff}}, @hopopts={{0x50, 0x29, 0x36, {0xff, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0xef}, @calipso={0x7, 0x28, {0x3, 0x8, 0x8, 0x4, [0xfffffffffffffeff, 0x6, 0x8, 0x1]}}, @ra={0x5, 0x2, 0x6}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @rthdr={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x2, 0x1f, 0x0, [@remote]}}}], 0x138}, 0x4000) 08:39:13 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x58, 0x1, 0x1, 0x3, 0x600, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0xffffffffffffff90, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) 08:39:13 executing program 4: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = msgget$private(0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x208001, 0x20) clock_adjtime(0x0, &(0x7f0000000100)={0x8733, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, 0x0, 0x4009000) connect$inet6(r1, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r3 = socket$packet(0x11, 0x3, 0x300) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xfffb) clock_gettime(0x0, &(0x7f00000003c0)) msgsnd(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000000000004b91cd68f8f7fc30b3c04bee4a2f972997943ae581e56e1c5d8949667e4123d253318f5b0b8ac09e686df56104159829864bd1bdf67dba38bbd80c571d194a1e0f23124fddb5035dc4127e45ac3b9d861c39dd5be449dd8fbed4b0814aba7ad240ebd2f8b40e203dff5b4ea60a6edfdc2ea66629b1a4600cf63d6f8d25090000003cfc284431eb15cc7fc2715b005589666fc091ceed48dbfd"], 0xa1, 0x800) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001c40), 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x44}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x12'}, @nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@remote}]}]}, 0x34}}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r4) sendmmsg$inet6(r1, &(0x7f0000004d00), 0x2f, 0x0) 08:39:13 executing program 3: r0 = gettid() ptrace(0xffffffffffffffff, r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x4, 0x12418, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x13, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace$cont(0x18, 0x0, 0x4, 0x4) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000003, 0x1f012, r2, 0x0) r3 = openat(0xffffffffffffffff, 0x0, 0x36400, 0xe375d1901a7fcc3b) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) fcntl$getown(r3, 0x9) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_setup(0x6f45, &(0x7f0000000140)={0x0, 0x96bc, 0x10, 0x0, 0x45}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r4}}, 0x7ff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000080)=ANY=[@ANYBLOB="01000086f0000000180000003f63d5b9d08f0e1eb7b4078f9a5c5a9dd500cdcce58d84d385f5b54ff4a2665c8449ab8f2b45b0cfbcdd0265070000000c79217a68f677aa63", @ANYRES32, @ANYBLOB="02000000000000002e2f66696c6531bc9d886ebd6fb82f4931303e03552f05009946c81a8af4869a0c84b823197f5017669d83f214bdbd9f1bf097a77cdee53cd0fd7c2db53700004e3aa66241e91ff727e99486c2ab6bfe437e7051b77ffbc984debe64e0234f929ed4a6899dda0d"]) readv(0xffffffffffffffff, &(0x7f0000001600), 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r1, 0x0) clock_gettime(0x0, &(0x7f0000000b40)) [ 1503.941082] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1503.942518] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1503.993408] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 1503.994963] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 1503.995898] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 1503.996883] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 40 00 [ 1503.997939] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 1504.000237] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.001075] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1504.002570] Buffer I/O error on dev sr0, logical block 0, async page read [ 1504.004029] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.005429] blk_update_request: I/O error, dev sr0, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1504.006836] Buffer I/O error on dev sr0, logical block 1, async page read [ 1504.009116] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.009971] blk_update_request: I/O error, dev sr0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1504.011353] Buffer I/O error on dev sr0, logical block 2, async page read [ 1504.012745] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.013553] blk_update_request: I/O error, dev sr0, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1504.014924] Buffer I/O error on dev sr0, logical block 3, async page read [ 1504.016304] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.017224] blk_update_request: I/O error, dev sr0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1504.018940] Buffer I/O error on dev sr0, logical block 4, async page read [ 1504.020384] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.021213] blk_update_request: I/O error, dev sr0, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1504.022633] Buffer I/O error on dev sr0, logical block 5, async page read [ 1504.028693] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.030173] blk_update_request: I/O error, dev sr0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1504.031601] Buffer I/O error on dev sr0, logical block 6, async page read [ 1504.033197] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.034237] blk_update_request: I/O error, dev sr0, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1504.035914] Buffer I/O error on dev sr0, logical block 7, async page read [ 1504.037467] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.038291] blk_update_request: I/O error, dev sr0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1504.040058] Buffer I/O error on dev sr0, logical block 0, async page read [ 1504.041621] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.042452] Buffer I/O error on dev sr0, logical block 1, async page read [ 1504.050595] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.052020] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.053079] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.054317] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.055430] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.056700] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.057677] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.058639] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.059541] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.060410] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.061360] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.062467] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.064959] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.070971] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.072064] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.073018] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.075051] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.075955] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.076849] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.077728] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.078920] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.080016] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.081221] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.082625] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.083812] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.085010] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.086224] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.087340] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.088462] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.089563] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.090727] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.091731] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.092610] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.093651] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.094714] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.095885] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.096713] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.097629] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.099044] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.100337] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.101581] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.103126] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.104286] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.105432] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.110178] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.111612] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.112902] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.116110] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.119393] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.120537] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.121432] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.122422] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.123524] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.125324] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.128994] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.130169] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.131061] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.132024] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.133035] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.133921] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.134821] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.135707] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.136818] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.137701] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.138633] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.139574] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.140494] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.141410] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.142507] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.143455] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.144490] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.145431] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.146419] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.147384] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.148322] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.149252] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.150169] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.151098] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.152168] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.153429] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.154383] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.155279] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.156191] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.157086] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.158171] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.159053] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.160330] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.161479] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.162653] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.164162] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.166811] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.168318] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.169360] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.171221] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.172148] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.173025] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.174082] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.175227] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.176192] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.177271] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.178221] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.179171] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.180194] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.181960] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.182928] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.183763] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.184734] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.185627] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.186979] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.187825] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.189027] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.190027] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.190904] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.191874] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.192717] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.193658] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.194595] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.195442] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.196596] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.198971] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.200148] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.201273] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.202375] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.203504] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.204905] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.206062] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.207170] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.208212] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.209126] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.210064] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.210982] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.213378] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.214306] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.215230] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.216614] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.217758] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.219251] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.220418] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.221658] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.223093] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.224147] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.225258] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.226357] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.227343] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.228258] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.229163] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.230068] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.231011] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.231873] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.232892] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.234097] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.235701] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.236955] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.237963] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.239240] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.240088] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.240961] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.241836] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.242789] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.243609] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.244595] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.245461] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.246338] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.247194] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.248064] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.248869] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.249662] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.250491] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.251541] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.252348] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.253193] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.254101] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.300561] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 1504.301934] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 1504.302950] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 1504.303913] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 01 00 00 01 00 [ 1504.305294] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.306876] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.307708] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.308728] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.309603] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.311206] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.312077] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.313089] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.314786] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.315715] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.316612] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.317464] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.318493] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.319531] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.320538] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.321524] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.322522] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.323478] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.324693] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.325616] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.326693] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.327549] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.328424] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.329451] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.330419] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.331353] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.332551] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.333444] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.334529] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.335417] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.336384] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.337277] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.338385] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.339408] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.340638] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.342499] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.343604] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.344502] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.345604] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.346825] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.347765] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.349329] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.350265] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.351487] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.352323] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.353473] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.354344] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.355277] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.356305] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.357315] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.358280] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.359263] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.360267] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.361368] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.362419] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.363434] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.364513] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.365865] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.366687] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.367809] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.368595] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.369495] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.370456] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.371496] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.372663] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.374025] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.375178] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.376213] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.377347] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.378458] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.379530] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.380574] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.381593] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.382643] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.383925] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.384920] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.385875] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.386754] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.387706] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.388677] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.389869] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.391025] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.392078] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.393625] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.394715] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.395806] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.397119] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.398192] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.399320] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.400357] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.401584] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.402573] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.403650] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.404549] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.405470] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.406404] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.407517] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.408509] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.409526] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.410518] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.411663] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.412590] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.413653] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.415097] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.416706] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.417834] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.419010] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.419995] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.421097] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.422123] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.426086] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.427171] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.428154] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.429407] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.430558] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.431489] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.432405] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.433295] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.434256] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.435110] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.436090] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.437087] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.438128] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.439204] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.440133] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.441118] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.442041] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.442888] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.444202] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.445197] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.446259] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.447186] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.448520] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.449615] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.450729] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.452048] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.453045] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.454382] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.455231] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.456225] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.457121] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.458111] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.459006] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.459876] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.461060] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.462328] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.463354] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.464594] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.465601] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.466815] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.468065] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.469102] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.470257] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.471223] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.472190] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.473186] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.474270] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.475324] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.476421] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.477537] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.478537] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.479520] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.480544] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.481442] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.482376] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.483435] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.484359] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.485256] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.486395] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.487306] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.488188] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.489092] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.489997] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.491146] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.491987] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.492856] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.494082] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.495181] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.496231] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.497608] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.498658] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.499671] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.500726] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.501991] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.503159] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.504199] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.505263] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.506321] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.507297] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.508307] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.510180] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.511489] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.512428] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.513519] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.514443] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.515346] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.516240] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.517309] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.518199] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.520598] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.521656] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.522566] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.523398] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.524445] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.526184] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.527024] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.527833] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.528680] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.529718] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.530742] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.531538] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.532569] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.533439] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.534330] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.535199] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.536079] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.536958] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.537733] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.538620] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.539491] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.540466] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.541379] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.542323] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.543161] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.544357] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.545461] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.546680] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.548270] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.549406] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.550622] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.551820] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.553208] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.554281] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.555180] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.556077] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.556959] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.557880] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.558761] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.559672] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.560622] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.561607] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.562733] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.563589] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.564587] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.565403] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.566256] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.567052] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.567881] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.568825] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.569588] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.570443] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.571255] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.572288] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.573128] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.574231] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.575252] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.576121] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.576985] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.577895] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.578746] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.580001] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.580869] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.581877] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.582712] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.583575] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.584457] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.585327] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.586217] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.587076] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.587965] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.588922] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.590215] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.591068] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.591982] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.592842] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.593666] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.594495] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.595458] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.596610] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.598189] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.599592] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.600812] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.602142] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.603395] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.604632] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.606157] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.607376] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.608364] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.609330] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.610330] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.611570] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.612566] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.613470] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.614462] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.615433] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.616355] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.617299] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.618224] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.619111] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.619934] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.620721] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.623052] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.624039] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.625071] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.625883] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.626971] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.627930] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.628693] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.629548] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.630433] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.631414] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.632336] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.633253] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.634377] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.635260] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.636135] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.637055] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.637893] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.639267] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.640211] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.641336] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.642616] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.644099] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.645298] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.646518] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.648081] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.650234] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.651621] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.652753] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.654126] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.655289] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.656458] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.657795] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.659131] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.660074] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.661035] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.661960] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.662859] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.663766] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.664719] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.665685] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.666632] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.667722] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.668667] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.669626] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.670588] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.671583] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.672501] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.673619] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.674587] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.675648] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.676605] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.677622] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.678627] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.679657] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.680665] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.681715] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.682727] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.683804] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.684884] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.685886] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.686751] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.687816] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.688936] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.689817] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.690669] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.691728] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.692605] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.693492] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.694480] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.695432] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.696273] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.697123] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.698164] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.699198] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.700394] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.701668] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.703095] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.704200] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.705525] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.706699] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.708091] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.709254] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.710557] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.712231] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.713523] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.715120] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.717137] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.719098] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.720499] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.721685] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1504.723104] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 08:39:30 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000003) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) clone3(&(0x7f0000000740)={0x404d2340, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500), {0x34}, &(0x7f0000000540)=""/201, 0xc9, 0x0, &(0x7f0000001800)=[0x0, 0xffffffffffffffff, 0x0, 0x0], 0x4}, 0x58) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2, 0x55) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00', 0x0}) syz_emit_ethernet(0x7e, &(0x7f0000000040)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x3, 0x4, 0x0, @broadcast, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @broadcast, {[@timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@remote}, {@empty}, {@broadcast}]}, @rr={0x7, 0x1b, 0x0, [@broadcast, @empty, @rand_addr, @remote, @rand_addr, @broadcast]}]}}}}}}}, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) io_uring_enter(r2, 0x2b9d, 0xc5a9, 0x2, &(0x7f0000000640)={[0xacb]}, 0x8) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000440)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, r0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=@alg, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000000340)=""/86, 0x56}, {&(0x7f0000000180)=""/22, 0x16}], 0x3, &(0x7f0000001e00)=""/4096, 0x1000}, 0x0, 0x1, 0x0, {0x1}}, 0x2) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={0x20, 0x0, 0x1, 0x0, 0x0, {0x4}, [@ETHTOOL_A_EEE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f0000000100)={'ip6_vti0\x00', r3, 0x2f, 0xc3, 0x3f, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x37}, @remote, 0x8, 0x40, 0x80000003, 0x4}}) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f00000000c0)=@v2={0x2000000, [{0x40, 0x20000}, {0x8000000, 0x3}]}, 0x14, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000200)={0x0, 0x4, 0x8001, 0x2}) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 08:39:30 executing program 7: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x80464c453f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x10, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3ab", 0x6f}], 0x1, &(0x7f00000005c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x80000001}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x33, 0x0, '\x00', [@pad1]}}}, @tclass={{0x14}}, @hoplimit={{0x14}}], 0x90}, 0x4000) [ 1520.126975] hpet: Lost 4 RTC interrupts 08:39:30 executing program 0: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x17, "77004a6efdff00002d1ceb7300"}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000280), 0x8) io_submit(0x0, 0x1, &(0x7f00000006c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000040)={'team_slave_1\x00'}) 08:39:30 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x58, 0x1, 0x1, 0x3, 0x700, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0xffffffffffffff90, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) 08:39:30 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) pread64(r0, &(0x7f0000000180)=""/199, 0xc7, 0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4008040) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fcntl$setstatus(r2, 0x4, 0xf0ac3d2370543000) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x5}, 0x1c705, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x4052, r4, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000140)={0x2, 0x3, 0x0, 0x3}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000001d00020000000000000010000400020008001200", @ANYRES32=r5, @ANYBLOB="8e2afb567c5049dab9732cf28484b893fcfd880ab5baea589e57661b1636f8952dae03129ab89e4e7a135718433900cf3d4ff0ae317eeacc91e3da5a28218297aff7a03d9c33fea62687074915caa746f95b6bb5d48248caaff63665c7"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0xa, 0x4e21, 0x81, @private0, 0xdf}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3abf5375c3866c0afd7148bb0dbf63d6a303e9125d9ad676bffcd27b2c53e52bcf1a1ce477ea55f678c2ed40464e3474c6156a7f6eaca23d80e426209b43d6d6818277a8e2f463ee217205a30440776e59857fc14fc2572251bbb80eaee7edc46e42abe63c1ba32adb2fdb60513e80fde", 0xde}], 0x1, &(0x7f00000005c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x80000001}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x33, 0x0, '\x00', [@pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0xffff}}, @hopopts={{0x50, 0x29, 0x36, {0xff, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0xef}, @calipso={0x7, 0x28, {0x3, 0x8, 0x8, 0x4, [0xfffffffffffffeff, 0x6, 0x8, 0x1]}}, @ra={0x5, 0x2, 0x6}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @rthdr={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x2, 0x1f, 0x0, [@remote]}}}], 0x138}, 0x4000) 08:39:30 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x20042, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x10010, r0, 0x39) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200080, 0x23456}, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f0000000340)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 11) 08:39:30 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=@hopopts={0x0, 0x5, '\x00', [@enc_lim={0x4, 0x1, 0x6}, @padn, @generic={0x3f, 0x27, "bfbaee49142b9384acc194db5e0212fa866035729354d71dcc1fec512f7773e70fb2d4781cc61c"}]}, 0x38) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5e6a174b7b2b317b4044a94da343d08000000000000000665864272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8e79434f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r2, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendto(r1, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048fff0f0000001c000000000000000000000008000000", @ANYRES32], 0x38}}], 0x1, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x64, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x2}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x8}, @ETHTOOL_A_LINKINFO_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x801}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000200)=0x1f) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 08:39:30 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x1a1c01, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000001540)=ANY=[@ANYBLOB="e0000002ac141429000000000600000000000000000000ef5c4b9bbcff704b3bcc13c54a35007f000001e00000010a010101"], 0x28) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000100)={0x0, {{0x2, 0x0, @multicast2}}}, 0xc9) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000500)={0x0, 0x4}) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x16020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x181080, 0x2) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000240)=0xb5, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f00000003c0)={0x84, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) r3 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r6, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[], 0x30}, 0x0, 0x20000040}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, 0x1d}, 0x80000001) signalfd(0xffffffffffffffff, &(0x7f0000001500), 0x8) r7 = socket$inet(0x2, 0x1, 0x0) dup3(r7, r6, 0x0) io_uring_enter(r3, 0x3491, 0x0, 0x0, 0x0, 0x0) [ 1520.141554] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1520.142739] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1520.166111] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1520.167209] FAULT_INJECTION: forcing a failure. [ 1520.167209] name failslab, interval 1, probability 0, space 0, times 0 [ 1520.168914] CPU: 1 PID: 9991 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 1520.169845] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1520.170984] Call Trace: [ 1520.171352] dump_stack+0x107/0x167 [ 1520.171840] should_fail.cold+0x5/0xa [ 1520.172370] ? create_object.isra.0+0x3a/0xa20 [ 1520.173084] should_failslab+0x5/0x20 [ 1520.173723] kmem_cache_alloc+0x5b/0x310 [ 1520.174292] create_object.isra.0+0x3a/0xa20 [ 1520.174880] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1520.175568] kmem_cache_alloc+0x159/0x310 [ 1520.176134] getname_flags.part.0+0x50/0x4f0 [ 1520.176740] getname+0x8e/0xd0 [ 1520.177182] __io_openat_prep+0x228/0x4c0 [ 1520.177755] io_submit_sqes+0xacc/0x8610 [ 1520.178347] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1520.179010] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1520.179662] ? find_held_lock+0x2c/0x110 [ 1520.180243] ? io_submit_sqes+0x8610/0x8610 [ 1520.180808] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1520.181420] ? wait_for_completion_io+0x270/0x270 [ 1520.182035] ? rcu_read_lock_any_held+0x75/0xa0 [ 1520.182782] ? vfs_write+0x354/0xb10 [ 1520.183288] ? fput_many+0x2f/0x1a0 [ 1520.183776] ? ksys_write+0x1a9/0x260 [ 1520.184238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1520.184316] ? __ia32_sys_read+0xb0/0xb0 [ 1520.185341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1520.185817] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1520.185833] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1520.185848] do_syscall_64+0x33/0x40 [ 1520.185863] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1520.185873] RIP: 0033:0x7faee6584b19 [ 1520.185889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1520.185895] RSP: 002b:00007faee3afa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1520.185910] RAX: ffffffffffffffda RBX: 00007faee6697f60 RCX: 00007faee6584b19 [ 1520.185917] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1520.185925] RBP: 00007faee3afa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1520.185932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1520.185940] R13: 00007fff102f569f R14: 00007faee3afa300 R15: 0000000000022000 08:39:30 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x58, 0x1, 0x1, 0x3, 0x900, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0xffffffffffffff90, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) 08:39:30 executing program 7: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x80464c453f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x10, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3ab", 0x6f}], 0x1, &(0x7f00000005c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x80000001}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @tclass={{0x14}}, @hoplimit={{0x14}}], 0x70}, 0x4000) 08:39:30 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f00000021c0)=[{{&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000040)="01bf", 0x2}], 0x1}}, {{&(0x7f0000000500)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_retopts={{0x10, 0x0, 0x34}}], 0x10}}], 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, @in_args={0x2}}, './file0\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xe, 0x100010, r1, 0x0) [ 1520.290269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 08:39:30 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) pread64(r0, &(0x7f0000000180)=""/199, 0xc7, 0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4008040) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fcntl$setstatus(r2, 0x4, 0xf0ac3d2370543000) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x5}, 0x1c705, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x4052, r4, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000140)={0x2, 0x3, 0xffff}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000001d00020000000000000010000400020008001200", @ANYRES32=r5, @ANYBLOB="8e2afb567c5049dab9732cf28484b893fcfd880ab5baea589e57661b1636f8952dae03129ab89e4e7a135718433900cf3d4ff0ae317eeacc91e3da5a28218297aff7a03d9c33fea62687074915caa746f95b6bb5d48248caaff63665c7"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0xa, 0x4e21, 0x81, @private0, 0xdf}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3abf5375c3866c0afd7148bb0dbf63d6a303e9125d9ad676bffcd27b2c53e52bcf1a1ce477ea55f678c2ed40464e3474c6156a7f6eaca23d80e426209b43d6d6818277a8e2f463ee217205a30440776e59857fc14fc2572251bbb80eaee7edc46e42abe63c1ba32adb2fdb60513e80fde", 0xde}], 0x1, &(0x7f00000005c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x80000001}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x33, 0x0, '\x00', [@pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0xffff}}, @hopopts={{0x50, 0x29, 0x36, {0xff, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0xef}, @calipso={0x7, 0x28, {0x3, 0x8, 0x8, 0x4, [0xfffffffffffffeff, 0x6, 0x8, 0x1]}}, @ra={0x5, 0x2, 0x6}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @rthdr={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x2, 0x1f, 0x0, [@remote]}}}], 0x138}, 0x4000) [ 1520.313457] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1520.314886] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1520.332187] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 08:39:30 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x1}, 0x1000, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setstatus(r2, 0x4, 0xc00) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) open_by_handle_at(r1, &(0x7f0000000240)=ANY=[@ANYRESDEC, @ANYRES16, @ANYRESOCT=r1, @ANYRESOCT=r0], 0x80000) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8914, &(0x7f0000000140)={'lo\x00'}) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r4, &(0x7f0000000040)={0x11, 0x3, r6}, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00'}) sendmsg$inet6(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0x1}], 0x1}, 0x30004001) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ipvlan1\x00'}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) bind$packet(r4, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x1, 0xff, 0x6, @broadcast}, 0x14) 08:39:45 executing program 3: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000280), 0x8) io_submit(0x0, 0x1, &(0x7f00000006c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x2) perf_event_open(&(0x7f0000001d80)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 08:39:45 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000280), 0x8) io_submit(0x0, 0x1, &(0x7f00000006c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) r1 = syz_open_pts(r0, 0x14b083) dup2(0xffffffffffffffff, r1) syz_emit_ethernet(0xfc0, &(0x7f0000000000)={@remote, @link_local, @val, {@llc_tr={0x11, {@snap={0x0, 0x0, "ba", "788a33", 0x0, "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"}}}}}, 0x0) 08:39:45 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x20042, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x10010, r0, 0x39) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200080, 0x23456}, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f0000000340)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 12) 08:39:45 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x58, 0x1, 0x1, 0x3, 0xa00, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0xffffffffffffff90, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) 08:39:45 executing program 2: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=@hopopts={0x0, 0x5, '\x00', [@enc_lim={0x4, 0x1, 0x6}, @padn, @generic={0x3f, 0x27, "bfbaee49142b9384acc194db5e0212fa866035729354d71dcc1fec512f7773e70fb2d4781cc61c"}]}, 0x38) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000003080)={0x0, "1aaaa8aae701d5ca00"}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="080500988400014637b5e6a174b7b2b317b4044a94da343d08000000000000000665864272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab5f84f5242824efb291f523ece2d8e79434f9fe77da5ead57c5f16fed9a43db7e4116e6031e00"/146, @ANYRES16=r2, @ANYRES16], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x8040) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendto(r1, &(0x7f0000000540)="88be5d6641087089c4730608e3169c2f5aa0a80e6f6252bb9cdd8dd6058d6ac9a57161cbadc88ab3a50042c96bf5d7f90ce98b23e578baa86c69cf49bb138c81b9c08068197c225d338f2bac53ca583b1a4afdfce5a0922d01207ae033d6863bef66e6d753bb7383ab33da64d91fe9477e", 0x71, 0x8000, &(0x7f00000005c0)=@ll={0x11, 0x3, 0x0, 0x1, 0x3f, 0x6, @local}, 0x80) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048fff0f0000001c000000000000000000000008000000", @ANYRES32], 0x38}}], 0x1, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)={0x64, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x2}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x8}, @ETHTOOL_A_LINKINFO_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x801}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000200)=0x1f) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1535.712985] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 08:39:45 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) pread64(r0, &(0x7f0000000180)=""/199, 0xc7, 0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4008040) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fcntl$setstatus(r2, 0x4, 0xf0ac3d2370543000) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x5}, 0x1c705, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x4052, r4, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000140)={0x2, 0x3, 0xffff}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000001d00020000000000000010000400020008001200", @ANYRES32=r5, @ANYBLOB="8e2afb567c5049dab9732cf28484b893fcfd880ab5baea589e57661b1636f8952dae03129ab89e4e7a135718433900cf3d4ff0ae317eeacc91e3da5a28218297aff7a03d9c33fea62687074915caa746f95b6bb5d48248caaff63665c7"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0xa, 0x4e21, 0x81, @private0, 0xdf}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3abf5375c3866c0afd7148bb0dbf63d6a303e9125d9ad676bffcd27b2c53e52bcf1a1ce477ea55f678c2ed40464e3474c6156a7f6eaca23d80e426209b43d6d6818277a8e2f463ee217205a30440776e59857fc14fc2572251bbb80eaee7edc46e42abe63c1ba32adb2fdb60513e80fde", 0xde}], 0x1, &(0x7f00000005c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x80000001}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x33, 0x0, '\x00', [@pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0xffff}}, @hopopts={{0x50, 0x29, 0x36, {0xff, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0xef}, @calipso={0x7, 0x28, {0x3, 0x8, 0x8, 0x4, [0xfffffffffffffeff, 0x6, 0x8, 0x1]}}, @ra={0x5, 0x2, 0x6}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @rthdr={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x2, 0x1f, 0x0, [@remote]}}}], 0x138}, 0x4000) [ 1535.714479] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 08:39:45 executing program 7: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x80464c453f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x10, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3ab", 0x6f}], 0x1, &(0x7f00000005c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x80000001}}, @tclass={{0x14}}, @hoplimit={{0x14}}], 0x48}, 0x4000) [ 1535.722487] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 08:39:45 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0xbe76f, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_config_ext={0x0, 0x80}, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x2, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=fscache,noextend,dfltuid=', @ANYRESHEX, @ANYBLOB="2c686173682c646f66745f61707072616973652c6f626a5f747970653d24842c732a25746578743d73797361646d5f752c646566636f6e746578743d73746166665f753b7375626a5f277970653d2c6d6561737572652c666f776edb9a112859496d879f3204729f0000000000000000", @ANYRESDEC=0xee00, @ANYBLOB=',\x00']) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000380)=ANY=[]) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, &(0x7f0000000000)=""/128) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) statx(0xffffffffffffffff, &(0x7f0000000380)='./file0\x00', 0x1000, 0x7ff, &(0x7f0000000280)) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101140, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0xfff}}, './file0\x00'}) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xe2, 0xff, 0x1, 0x92, 0x0, 0x8, 0x2e032, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2, @perf_config_ext={0x7fff, 0x1a}, 0x40208, 0x9, 0x3, 0x1, 0x2, 0x5, 0x0, 0x0, 0x7, 0x0, 0xa7}, 0xffffffffffffffff, 0x6, r3, 0x2) r4 = getpgrp(0xffffffffffffffff) r5 = openat(r3, &(0x7f0000000640)='./file0\x00', 0x600800, 0x1) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x7f, 0x2, 0x3f, 0x2, 0x0, 0x5, 0x48010, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000580), 0x3}, 0x8101, 0x7, 0x5, 0x2, 0x1, 0x4, 0x4, 0x0, 0x3e, 0x0, 0xdff6}, r4, 0x4, r5, 0x0) sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="b3", 0x1}], 0x1}, 0x10044001) recvmmsg(r1, &(0x7f0000000000), 0x5ac, 0x0, 0x0) [ 1535.742745] FAULT_INJECTION: forcing a failure. [ 1535.742745] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1535.744433] CPU: 0 PID: 10031 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 1535.745640] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1535.746922] Call Trace: [ 1535.747306] dump_stack+0x107/0x167 [ 1535.747788] should_fail.cold+0x5/0xa [ 1535.748300] strncpy_from_user+0x34/0x470 [ 1535.748856] getname_flags.part.0+0x95/0x4f0 [ 1535.749469] getname+0x8e/0xd0 [ 1535.749962] __io_openat_prep+0x228/0x4c0 [ 1535.750788] io_submit_sqes+0xacc/0x8610 [ 1535.751394] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1535.752156] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1535.752798] ? find_held_lock+0x2c/0x110 [ 1535.753423] ? io_submit_sqes+0x8610/0x8610 [ 1535.754058] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1535.754770] ? wait_for_completion_io+0x270/0x270 [ 1535.755462] ? rcu_read_lock_any_held+0x75/0xa0 [ 1535.756151] ? vfs_write+0x354/0xb10 [ 1535.756693] ? fput_many+0x2f/0x1a0 [ 1535.757211] ? ksys_write+0x1a9/0x260 [ 1535.757750] ? __ia32_sys_read+0xb0/0xb0 [ 1535.758348] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1535.759131] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1535.759857] do_syscall_64+0x33/0x40 [ 1535.760385] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1535.761120] RIP: 0033:0x7faee6584b19 [ 1535.761633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1535.764217] RSP: 002b:00007faee3afa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1535.765298] RAX: ffffffffffffffda RBX: 00007faee6697f60 RCX: 00007faee6584b19 [ 1535.766362] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1535.767382] RBP: 00007faee3afa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1535.768382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1535.769385] R13: 00007fff102f569f R14: 00007faee3afa300 R15: 0000000000022000 [ 1535.770615] hpet: Lost 1 RTC interrupts 08:39:45 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x20042, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000001180)="f2c0b00a0a73e255b2c6", 0xa}], 0x1, 0xff7, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x10010, r0, 0x39) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x303c, &(0x7f0000000300)={0x0, 0x4987, 0x4, 0x3, 0x230, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, {0x1000}, 0x1, {0x0, r1}}, 0x3) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x0) connect$inet6(r2, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) getsockopt(r2, 0x5, 0x5, &(0x7f0000000040), &(0x7f00000000c0)) r3 = creat(&(0x7f0000000400)='./file0\x00', 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) finit_module(r4, &(0x7f0000000040)='\x00', 0x2) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) statx(r3, &(0x7f0000000000)='./file1\x00', 0x400, 0x40, &(0x7f0000000140)) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000080)=0x29eb, 0x4) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100), 0x2}, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r2, &(0x7f0000004d00), 0x2f, 0x0) [ 1535.813432] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1535.814681] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1535.815893] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 08:39:45 executing program 7: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x80464c453f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x10, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3ab", 0x6f}], 0x1, &(0x7f00000005c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x80000001}}, @tclass={{0x14}}, @hoplimit={{0x14}}], 0x48}, 0x4000) 08:39:45 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x58, 0x1, 0x1, 0x3, 0xb00, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0xffffffffffffff90, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) 08:39:45 executing program 3: syz_mount_image$tmpfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001500)={[], [{@uid_eq}, {@uid_eq={'uid', 0x3d, 0xee01}}]}) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x810000, 0x0) 08:39:45 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) pread64(r0, &(0x7f0000000180)=""/199, 0xc7, 0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4008040) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fcntl$setstatus(r2, 0x4, 0xf0ac3d2370543000) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x5}, 0x1c705, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x4052, r4, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000140)={0x2, 0x3, 0xffff}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000001d00020000000000000010000400020008001200", @ANYRES32=r5, @ANYBLOB="8e2afb567c5049dab9732cf28484b893fcfd880ab5baea589e57661b1636f8952dae03129ab89e4e7a135718433900cf3d4ff0ae317eeacc91e3da5a28218297aff7a03d9c33fea62687074915caa746f95b6bb5d48248caaff63665c7"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0xa, 0x4e21, 0x81, @private0, 0xdf}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3abf5375c3866c0afd7148bb0dbf63d6a303e9125d9ad676bffcd27b2c53e52bcf1a1ce477ea55f678c2ed40464e3474c6156a7f6eaca23d80e426209b43d6d6818277a8e2f463ee217205a30440776e59857fc14fc2572251bbb80eaee7edc46e42abe63c1ba32adb2fdb60513e80fde", 0xde}], 0x1, &(0x7f00000005c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x80000001}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x33, 0x0, '\x00', [@pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0xffff}}, @hopopts={{0x50, 0x29, 0x36, {0xff, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0xef}, @calipso={0x7, 0x28, {0x3, 0x8, 0x8, 0x4, [0xfffffffffffffeff, 0x6, 0x8, 0x1]}}, @ra={0x5, 0x2, 0x6}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @rthdr={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x2, 0x1f, 0x0, [@remote]}}}], 0x138}, 0x4000) 08:39:45 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) pread64(r0, &(0x7f0000000180)=""/199, 0xc7, 0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4008040) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fcntl$setstatus(r2, 0x4, 0xf0ac3d2370543000) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x5}, 0x1c705, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x4052, r4, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000140)={0x2, 0x3, 0xffff}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000001d00020000000000000010000400020008001200", @ANYRES32=r5, @ANYBLOB="8e2afb567c5049dab9732cf28484b893fcfd880ab5baea589e57661b1636f8952dae03129ab89e4e7a135718433900cf3d4ff0ae317eeacc91e3da5a28218297aff7a03d9c33fea62687074915caa746f95b6bb5d48248caaff63665c7"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0xa, 0x4e21, 0x81, @private0, 0xdf}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3abf5375c3866c0afd7148bb0dbf63d6a303e9125d9ad676bffcd27b2c53e52bcf1a1ce477ea55f678c2ed40464e3474c6156a7f6eaca23d80e426209b43d6d6818277a8e2f463ee217205a30440776e59857fc14fc2572251bbb80eaee7edc46e42abe63c1ba32adb2fdb60513e80fde", 0xde}], 0x1, &(0x7f00000005c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x80000001}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x33, 0x0, '\x00', [@pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0xffff}}, @hopopts={{0x50, 0x29, 0x36, {0xff, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0xef}, @calipso={0x7, 0x28, {0x3, 0x8, 0x8, 0x4, [0xfffffffffffffeff, 0x6, 0x8, 0x1]}}, @ra={0x5, 0x2, 0x6}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @rthdr={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x2, 0x1f, 0x0, [@remote]}}}], 0x138}, 0x4000) [ 1535.892104] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1535.893466] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1535.897923] tmpfs: Bad value for 'uid' [ 1535.915960] tmpfs: Bad value for 'uid' 08:39:45 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x20042, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x10010, r0, 0x39) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200080, 0x23456}, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f0000000340)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 13) 08:39:45 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x58, 0x1, 0x1, 0x3, 0xd63, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0xffffffffffffff90, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) [ 1535.986972] hpet: Lost 2 RTC interrupts [ 1535.995473] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1535.996817] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 08:39:45 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) pread64(r0, &(0x7f0000000180)=""/199, 0xc7, 0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4008040) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fcntl$setstatus(r2, 0x4, 0xf0ac3d2370543000) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x5}, 0x1c705, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x4052, r4, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000140)={0x2, 0x3, 0xffff, 0x3}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000001d00020000000000000010000400020008001200", @ANYRES32=r5, @ANYBLOB="8e2afb567c5049dab9732cf28484b893fcfd880ab5baea589e57661b1636f8952dae03129ab89e4e7a135718433900cf3d4ff0ae317eeacc91e3da5a28218297aff7a03d9c33fea62687074915caa746f95b6bb5d48248caaff63665c7"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0xa, 0x4e21, 0x81, @private0, 0xdf}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3abf5375c3866c0afd7148bb0dbf63d6a303e9125d9ad676bffcd27b2c53e52bcf1a1ce477ea55f678c2ed40464e3474c6156a7f6eaca23d80e426209b43d6d6818277a8e2f463ee217205a30440776e59857fc14fc2572251bbb80eaee7edc46e42abe63c1ba32adb2fdb60513e80fde", 0xde}], 0x1, &(0x7f00000005c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x80000001}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x33, 0x0, '\x00', [@pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0xffff}}, @hopopts={{0x50, 0x29, 0x36, {0xff, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0xef}, @calipso={0x7, 0x28, {0x3, 0x8, 0x8, 0x4, [0xfffffffffffffeff, 0x6, 0x8, 0x1]}}, @ra={0x5, 0x2, 0x6}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @rthdr={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x2, 0x1f, 0x0, [@remote]}}}], 0x138}, 0x4000) [ 1536.036475] FAULT_INJECTION: forcing a failure. [ 1536.036475] name failslab, interval 1, probability 0, space 0, times 0 [ 1536.038244] CPU: 1 PID: 10058 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 1536.039211] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1536.040328] Call Trace: [ 1536.040692] dump_stack+0x107/0x167 [ 1536.041179] should_fail.cold+0x5/0xa [ 1536.041682] ? __alloc_file+0x21/0x320 [ 1536.042204] should_failslab+0x5/0x20 [ 1536.042752] kmem_cache_alloc+0x5b/0x310 [ 1536.043313] ? SOFTIRQ_verbose+0x10/0x10 [ 1536.043865] __alloc_file+0x21/0x320 [ 1536.044376] alloc_empty_file+0x6d/0x170 [ 1536.044937] path_openat+0xe6/0x2770 [ 1536.045457] ? __lock_acquire+0x1657/0x5b00 [ 1536.046057] ? path_lookupat+0x860/0x860 [ 1536.046625] ? perf_trace_lock+0xac/0x490 [ 1536.047165] ? SOFTIRQ_verbose+0x10/0x10 [ 1536.047691] ? __lockdep_reset_lock+0x180/0x180 [ 1536.048293] do_filp_open+0x190/0x3e0 [ 1536.048920] ? may_open_dev+0xf0/0xf0 [ 1536.049412] ? alloc_fd+0x2e7/0x670 [ 1536.049881] ? lock_downgrade+0x6d0/0x6d0 [ 1536.050440] ? do_raw_spin_lock+0x121/0x260 [ 1536.051005] ? rwlock_bug.part.0+0x90/0x90 [ 1536.051576] ? lock_chain_count+0x20/0x20 [ 1536.052141] ? stack_trace_save+0x8c/0xc0 [ 1536.052672] ? _raw_spin_unlock+0x1a/0x30 [ 1536.053198] ? alloc_fd+0x2e7/0x670 [ 1536.053679] io_openat2+0x24d/0xb80 [ 1536.054167] ? io_send+0x780/0x780 [ 1536.054678] ? perf_trace_lock+0xac/0x490 [ 1536.055264] ? SOFTIRQ_verbose+0x10/0x10 [ 1536.055957] io_issue_sqe+0x2cd/0x77b0 [ 1536.056493] ? lock_acquire+0x197/0x470 [ 1536.057039] ? find_held_lock+0x2c/0x110 [ 1536.057604] ? __virt_addr_valid+0x346/0x5d0 [ 1536.058205] ? io_connect+0x610/0x610 [ 1536.058758] ? __might_fault+0xd3/0x180 [ 1536.059345] ? lock_downgrade+0x6d0/0x6d0 [ 1536.059927] ? __virt_addr_valid+0x170/0x5d0 [ 1536.060528] ? __check_object_size+0x319/0x440 [ 1536.061168] __io_queue_sqe+0x90/0x9d0 [ 1536.061810] ? io_issue_sqe+0x77b0/0x77b0 [ 1536.062420] ? getname+0x96/0xd0 [ 1536.062890] io_submit_sqes+0x44aa/0x8610 [ 1536.063486] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1536.064408] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1536.065078] ? find_held_lock+0x2c/0x110 [ 1536.065630] ? io_submit_sqes+0x8610/0x8610 [ 1536.066296] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1536.066976] ? wait_for_completion_io+0x270/0x270 [ 1536.067669] ? rcu_read_lock_any_held+0x75/0xa0 [ 1536.068326] ? vfs_write+0x354/0xb10 [ 1536.068867] ? fput_many+0x2f/0x1a0 [ 1536.069407] ? ksys_write+0x1a9/0x260 [ 1536.069945] ? __ia32_sys_read+0xb0/0xb0 [ 1536.070582] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1536.071332] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1536.072076] do_syscall_64+0x33/0x40 [ 1536.072593] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1536.073315] RIP: 0033:0x7faee6584b19 [ 1536.073845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1536.076433] RSP: 002b:00007faee3afa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1536.077499] RAX: ffffffffffffffda RBX: 00007faee6697f60 RCX: 00007faee6584b19 [ 1536.078542] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1536.079549] RBP: 00007faee3afa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1536.080654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1536.081686] R13: 00007fff102f569f R14: 00007faee3afa300 R15: 0000000000022000 08:39:46 executing program 3: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="040029bd7000fedbdf252b0000000c0005000202aaaaaaaaaaaa0c0005000201aaaaaaaaaaaa0c0005000201aaaaaaaaaaaa08000200", @ANYRES32=0x0, @ANYBLOB="0c000100010000000000aaaa"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4800) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x6, 0x0, @fd, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000090}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, 0x0, 0x409, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x28, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a421137}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6ebe}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7add421f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcf86}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x4000) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r2, 0xd8499488957a772f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r2, 0xb10, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000894}, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r4}, 0x8000001) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x77359400}}, 0xffff9fec) io_uring_enter(0xffffffffffffffff, 0x76d3, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd_index=0x4, 0x8000, {}, 0x1, 0x4}, 0x1) 08:39:46 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x58, 0x1, 0x1, 0x3, 0xd64, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0xffffffffffffff90, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) 08:39:46 executing program 3: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="024344303031", 0x6, 0x8000}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="b5f449394f721d1bafc150ff6100"/25]) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x7, 0x3, &(0x7f0000000340)=[{&(0x7f0000000140), 0x0, 0x1}, {&(0x7f0000000180)="37e5eea9bfcb2d3a51cf5688e7443cfe86c2852977765bd5e1b91513b868d5119c013dcb44f48f959140a5f58798bea8407200b8cdb38419617b507e974b4b8b25e5a8d5a9848531228f3930a59a53b70787b75cb0f8039da8", 0x59, 0x6}, {&(0x7f0000000240)="fa836a32b81a96fb776fc6024f415dffbd378c58eb3e82aa6ad45507cadd70336dabb73b818da412e5ad4d2d648d6b4a735c1dc9972704ea2b04c19f001d5765e0979dd0ac7ae1bce599b94482c8c00a54c0579e7dac007fa2f6c64ef72658a56f3d247299bd62ab9ccb6162ec233b2c98510c02c64a4785973511830c614b3694176c71fb13a86c31b0dae330eb2122a1beb89f318bfe6b2639792fd08d58dbd2cf6ff5818a9d785102331611c9c6fda03e6a181661b968e16974eecd1fcc312e91eda7cddec6e4ad44d8074b8a13e88b341db6", 0xd4, 0x9}], 0x840001, &(0x7f00000003c0)={[{@utf8}, {@numtail}, {@shortname_mixed}, {@shortname_win95}], [{@smackfsfloor={'smackfsfloor', 0x3d, ']'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@smackfshat}, {@subj_role={'subj_role', 0x3d, 'iso9660\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, '.'}}]}) 08:39:46 executing program 4: openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xa) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x24, 0x1a, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x10, 0x0, 0x0, @ipv4=@multicast1}]}, 0x24}}, 0x0) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000200), r0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x78, r1, 0x100, 0x70bd27, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0xd343, 0x82, 0x6, 0x58]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xc0}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x0, 0x36e5fde6, 0x2, 0x6]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x4}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x1, 0xf80, 0x0, 0x6]}]}, 0x78}, 0x1, 0x0, 0x0, 0x8090}, 0x8000) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x200000, 0x0) syz_io_uring_setup(0x205e8b, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000004c0), 0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f00000004c0)={{}, "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"}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="0015ed31c244322895d38dda0450ad144078f914467f02805e8fe4ec85d60f9d55db409c82464fb0dff7fbf6364b917ac718cef63d406413e554ab60975ddebaa5ab8b024a273c3cb674df505a79df7f8f4ad1fdfbc6aebed2ca3916ae11cfd10503a0b4d1021ce66136d33a3adac116b3c34ba515eedd4cf89a7883c194c4718c04677f607d"]) [ 1536.131133] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1536.132345] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1536.150047] loop3: detected capacity change from 0 to 65536 08:39:46 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x58, 0x1, 0x1, 0x3, 0xf00, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0xffffffffffffff90, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) 08:39:46 executing program 7: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x80464c453f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x10, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3ab", 0x6f}], 0x1, &(0x7f00000005c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x80000001}}, @tclass={{0x14}}, @hoplimit={{0x14}}], 0x48}, 0x4000) [ 1536.203619] loop3: detected capacity change from 0 to 65536 [ 1536.220977] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 08:39:46 executing program 7: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x80464c453f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x10, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3ab", 0x6f}], 0x1, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @tclass={{0x14}}, @hoplimit={{0x14}}], 0x58}, 0x4000) 08:39:46 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) pread64(r0, &(0x7f0000000180)=""/199, 0xc7, 0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4008040) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fcntl$setstatus(r2, 0x4, 0xf0ac3d2370543000) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x5}, 0x1c705, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x4052, r4, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000140)={0x2, 0x3, 0xffff, 0x3}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000001d00020000000000000010000400020008001200", @ANYRES32=r5, @ANYBLOB="8e2afb567c5049dab9732cf28484b893fcfd880ab5baea589e57661b1636f8952dae03129ab89e4e7a135718433900cf3d4ff0ae317eeacc91e3da5a28218297aff7a03d9c33fea62687074915caa746f95b6bb5d48248caaff63665c7"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0xa, 0x4e21, 0x81, @private0, 0xdf}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3abf5375c3866c0afd7148bb0dbf63d6a303e9125d9ad676bffcd27b2c53e52bcf1a1ce477ea55f678c2ed40464e3474c6156a7f6eaca23d80e426209b43d6d6818277a8e2f463ee217205a30440776e59857fc14fc2572251bbb80eaee7edc46e42abe63c1ba32adb2fdb60513e80fde", 0xde}], 0x1, &(0x7f00000005c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x80000001}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x33, 0x0, '\x00', [@pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0xffff}}, @hopopts={{0x50, 0x29, 0x36, {0xff, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0xef}, @calipso={0x7, 0x28, {0x3, 0x8, 0x8, 0x4, [0xfffffffffffffeff, 0x6, 0x8, 0x1]}}, @ra={0x5, 0x2, 0x6}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @rthdr={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x2, 0x1f, 0x0, [@remote]}}}], 0x138}, 0x4000) 08:39:46 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) pread64(r0, &(0x7f0000000180)=""/199, 0xc7, 0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4008040) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fcntl$setstatus(r2, 0x4, 0xf0ac3d2370543000) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x5}, 0x1c705, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x4052, r4, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000140)={0x2, 0x3, 0xffff, 0x3}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000001d00020000000000000010000400020008001200", @ANYRES32=r5, @ANYBLOB="8e2afb567c5049dab9732cf28484b893fcfd880ab5baea589e57661b1636f8952dae03129ab89e4e7a135718433900cf3d4ff0ae317eeacc91e3da5a28218297aff7a03d9c33fea62687074915caa746f95b6bb5d48248caaff63665c7"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0xa, 0x4e21, 0x81, @private0, 0xdf}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3abf5375c3866c0afd7148bb0dbf63d6a303e9125d9ad676bffcd27b2c53e52bcf1a1ce477ea55f678c2ed40464e3474c6156a7f6eaca23d80e426209b43d6d6818277a8e2f463ee217205a30440776e59857fc14fc2572251bbb80eaee7edc46e42abe63c1ba32adb2fdb60513e80fde", 0xde}], 0x1, &(0x7f00000005c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x80000001}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x33, 0x0, '\x00', [@pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0xffff}}, @hopopts={{0x50, 0x29, 0x36, {0xff, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0xef}, @calipso={0x7, 0x28, {0x3, 0x8, 0x8, 0x4, [0xfffffffffffffeff, 0x6, 0x8, 0x1]}}, @ra={0x5, 0x2, 0x6}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @rthdr={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x2, 0x1f, 0x0, [@remote]}}}], 0x138}, 0x4000) 08:39:46 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x58, 0x1, 0x1, 0x3, 0x1100, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0xffffffffffffff90, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) [ 1536.713749] FAULT_INJECTION: forcing a failure. [ 1536.713749] name failslab, interval 1, probability 0, space 0, times 0 [ 1536.715468] CPU: 1 PID: 10095 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 1536.716496] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1536.717679] Call Trace: [ 1536.718062] dump_stack+0x107/0x167 [ 1536.718596] should_fail.cold+0x5/0xa [ 1536.719157] ? create_object.isra.0+0x3a/0xa20 [ 1536.719817] should_failslab+0x5/0x20 [ 1536.720403] kmem_cache_alloc+0x5b/0x310 [ 1536.721036] create_object.isra.0+0x3a/0xa20 [ 1536.721640] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1536.722378] kmem_cache_alloc+0x159/0x310 [ 1536.722951] ? SOFTIRQ_verbose+0x10/0x10 [ 1536.723538] __alloc_file+0x21/0x320 [ 1536.724049] alloc_empty_file+0x6d/0x170 [ 1536.724641] path_openat+0xe6/0x2770 [ 1536.725163] ? __lock_acquire+0x1657/0x5b00 [ 1536.725776] ? path_lookupat+0x860/0x860 [ 1536.726361] ? perf_trace_lock+0xac/0x490 [ 1536.726942] ? SOFTIRQ_verbose+0x10/0x10 [ 1536.727509] ? __lockdep_reset_lock+0x180/0x180 [ 1536.728152] do_filp_open+0x190/0x3e0 [ 1536.728674] ? may_open_dev+0xf0/0xf0 [ 1536.729197] ? alloc_fd+0x2e7/0x670 [ 1536.729701] ? lock_downgrade+0x6d0/0x6d0 [ 1536.730275] ? do_raw_spin_lock+0x121/0x260 [ 1536.730904] ? rwlock_bug.part.0+0x90/0x90 [ 1536.731476] ? lock_chain_count+0x20/0x20 [ 1536.732046] ? stack_trace_save+0x8c/0xc0 [ 1536.732629] ? _raw_spin_unlock+0x1a/0x30 [ 1536.733166] ? alloc_fd+0x2e7/0x670 [ 1536.733648] io_openat2+0x24d/0xb80 [ 1536.734126] ? io_send+0x780/0x780 [ 1536.734650] ? perf_trace_lock+0xac/0x490 [ 1536.735225] ? SOFTIRQ_verbose+0x10/0x10 [ 1536.735836] io_issue_sqe+0x2cd/0x77b0 [ 1536.736480] ? lock_acquire+0x197/0x470 [ 1536.737027] ? find_held_lock+0x2c/0x110 [ 1536.737611] ? __virt_addr_valid+0x346/0x5d0 [ 1536.738236] ? io_connect+0x610/0x610 [ 1536.738809] ? __might_fault+0xd3/0x180 [ 1536.739372] ? lock_downgrade+0x6d0/0x6d0 [ 1536.740067] ? __virt_addr_valid+0x170/0x5d0 [ 1536.740694] ? __check_object_size+0x319/0x440 [ 1536.741353] __io_queue_sqe+0x90/0x9d0 [ 1536.741913] ? io_issue_sqe+0x77b0/0x77b0 [ 1536.742569] ? getname+0x96/0xd0 [ 1536.743048] io_submit_sqes+0x44aa/0x8610 [ 1536.743727] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1536.744428] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1536.745108] ? find_held_lock+0x2c/0x110 [ 1536.745735] ? io_submit_sqes+0x8610/0x8610 [ 1536.746365] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1536.747080] ? wait_for_completion_io+0x270/0x270 [ 1536.747764] ? rcu_read_lock_any_held+0x75/0xa0 [ 1536.748415] ? vfs_write+0x354/0xb10 [ 1536.748929] ? fput_many+0x2f/0x1a0 [ 1536.749430] ? ksys_write+0x1a9/0x260 [ 1536.749987] ? __ia32_sys_read+0xb0/0xb0 [ 1536.750602] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1536.751350] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1536.752205] do_syscall_64+0x33/0x40 [ 1536.752731] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1536.753465] RIP: 0033:0x7faee6584b19 [ 1536.753992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1536.756588] RSP: 002b:00007faee3afa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1536.757718] RAX: ffffffffffffffda RBX: 00007faee6697f60 RCX: 00007faee6584b19 [ 1536.758751] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1536.759782] RBP: 00007faee3afa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1536.760819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1536.761849] R13: 00007fff102f569f R14: 00007faee3afa300 R15: 0000000000022000 08:39:46 executing program 3: write$tcp_mem(0xffffffffffffffff, &(0x7f0000000000)={0x6, 0x20, 0x92, 0x20, 0xfd0a}, 0x48) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x8c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x8c}, 0x1, 0x0, 0x0, 0x80}, 0x1) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x18, 0x1b, 0x1, 0x0, 0x0, {0x2}, [@nested={0x4, 0x2}]}, 0x18}}, 0x0) 08:39:46 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x20042, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x10010, r0, 0x39) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200080, 0x23456}, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f0000000340)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 14) 08:40:02 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) pread64(r0, &(0x7f0000000180)=""/199, 0xc7, 0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4008040) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fcntl$setstatus(r2, 0x4, 0xf0ac3d2370543000) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x5}, 0x1c705, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x4052, r4, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000140)={0x2, 0x3, 0xffff}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000001d00020000000000000010000400020008001200", @ANYRES32=r5, @ANYBLOB="8e2afb567c5049dab9732cf28484b893fcfd880ab5baea589e57661b1636f8952dae03129ab89e4e7a135718433900cf3d4ff0ae317eeacc91e3da5a28218297aff7a03d9c33fea62687074915caa746f95b6bb5d48248caaff63665c7"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0xa, 0x4e21, 0x81, @private0, 0xdf}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3abf5375c3866c0afd7148bb0dbf63d6a303e9125d9ad676bffcd27b2c53e52bcf1a1ce477ea55f678c2ed40464e3474c6156a7f6eaca23d80e426209b43d6d6818277a8e2f463ee217205a30440776e59857fc14fc2572251bbb80eaee7edc46e42abe63c1ba32adb2fdb60513e80fde", 0xde}], 0x1, &(0x7f00000005c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x80000001}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x33, 0x0, '\x00', [@pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0xffff}}, @hopopts={{0x50, 0x29, 0x36, {0xff, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0xef}, @calipso={0x7, 0x28, {0x3, 0x8, 0x8, 0x4, [0xfffffffffffffeff, 0x6, 0x8, 0x1]}}, @ra={0x5, 0x2, 0x6}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @rthdr={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x2, 0x1f, 0x0, [@remote]}}}], 0x138}, 0x4000) 08:40:02 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) fallocate(r0, 0x4d, 0x3, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105142, 0x0) fallocate(r3, 0x10, 0x2103, 0xfdef) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) 08:40:02 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x20042, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x10010, r0, 0x39) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200080, 0x23456}, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f0000000340)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 15) 08:40:02 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/rt_cache\x00') preadv(r0, 0x0, 0x0, 0x63, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x5) syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)=0x0) r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000007c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="f7ffffff4cc3e06d0008ffa8258c088edb0694f54e6ec571509ce8f7ea8b46a7794dd8491ad66ffed27c3779a60a3901e91fc94fdf7f9710a72e8feb1129a7e0339a1bcf52f388ad99f823be633357d6d6d85566be263d3d6b3fda2a46cca20108bc1629ae26c45c2adca498257fb8092b35e576bff13eda36146456ac0b55727f6817d4aafc43d3caecb634ad3de13e701d4ab143ca3b1cdfb961cc5b8cc100000000000000"]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000006c0)=ANY=[@ANYBLOB="010000009bd77e7d3db3c295", @ANYRES32, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="b92b66696c652fe1451d4e7b754bc7f05f0ff404807bf64d176a29993195992c14f39ee8328796f81d1886f6cb48f1ed71a941835b5840190114030000000000000000fcd38d0a302906ffc32f46cf3af18994531a341440560ab5b9e8f25260ef7b4e28db855ed9e895bd4b2fbdedef955a9ddf4161dc9347ef97623a3ebf9ca8933a81653dd955d769a92740fbed0519a0fe8fb2bd1f20fa5a24997c0cf4682cd464c3bcd44c267b10cfd7565652376257be8c2ef9d94e9ad1d44011543b4d0e2c77577a1157a58a7edab4a0981d3549776f000000dfcc0800"/228]) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x3000000a}) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x169c5502b702c859, 0x28, 0x2}, 0x18) fsetxattr$security_selinux(r6, &(0x7f00000002c0), &(0x7f0000000340)='system_u:object_r:fixed_disk_device_t:s0\x00', 0x29, 0x2) syz_io_uring_submit(0x0, r1, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb62) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = dup(r7) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(r8, &(0x7f0000000200)=[{&(0x7f0000000040)=""/29, 0x1d}], 0x1, 0xffff57e9, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000380)={0x3e1d, 0x8, 0x1, 0x7, 0xffff}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000005c0)={{{@in=@private, @in=@initdev}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000440)=0xe8) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 08:40:02 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) pread64(r0, &(0x7f0000000180)=""/199, 0xc7, 0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4008040) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fcntl$setstatus(r2, 0x4, 0xf0ac3d2370543000) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x5}, 0x1c705, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x4052, r4, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000140)={0x2, 0x3, 0xffff, 0x3}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000001d00020000000000000010000400020008001200", @ANYRES32=r5, @ANYBLOB="8e2afb567c5049dab9732cf28484b893fcfd880ab5baea589e57661b1636f8952dae03129ab89e4e7a135718433900cf3d4ff0ae317eeacc91e3da5a28218297aff7a03d9c33fea62687074915caa746f95b6bb5d48248caaff63665c7"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0xa, 0x4e21, 0x81, @private0, 0xdf}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3abf5375c3866c0afd7148bb0dbf63d6a303e9125d9ad676bffcd27b2c53e52bcf1a1ce477ea55f678c2ed40464e3474c6156a7f6eaca23d80e426209b43d6d6818277a8e2f463ee217205a30440776e59857fc14fc2572251bbb80eaee7edc46e42abe63c1ba32adb2fdb60513e80fde", 0xde}], 0x1, &(0x7f00000005c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x80000001}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x33, 0x0, '\x00', [@pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0xffff}}, @hopopts={{0x50, 0x29, 0x36, {0xff, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0xef}, @calipso={0x7, 0x28, {0x3, 0x8, 0x8, 0x4, [0xfffffffffffffeff, 0x6, 0x8, 0x1]}}, @ra={0x5, 0x2, 0x6}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @rthdr={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x2, 0x1f, 0x0, [@remote]}}}], 0x138}, 0x4000) 08:40:02 executing program 7: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x80464c453f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x10, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3ab", 0x6f}], 0x1, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @tclass={{0x14}}, @hoplimit={{0x14}}], 0x58}, 0x4000) 08:40:02 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000004c0), r0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r1, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xe758}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000004}, 0x20041884) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_bp={&(0x7f0000000000), 0x6}, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000001c0)={0x14, 0x0, 0x1}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r4) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x88, r5, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_DEVICE={0x30, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x4}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x50, r5, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000015}, 0x8010) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r7, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x5c, r5, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004810}, 0x4000080) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x60, r2, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0xffffffa1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x10000}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x100}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x60}, 0x1, 0x0, 0x0, 0x8001}, 0x40849) unshare(0x40000000) 08:40:02 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x58, 0x1, 0x1, 0x3, 0x4800, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0xffffffffffffff90, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) [ 1552.315248] hpet: Lost 3 RTC interrupts [ 1552.324975] __nla_validate_parse: 3 callbacks suppressed [ 1552.324986] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1552.327202] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1552.344855] FAULT_INJECTION: forcing a failure. [ 1552.344855] name failslab, interval 1, probability 0, space 0, times 0 [ 1552.346848] CPU: 1 PID: 10106 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 1552.347817] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1552.348996] Call Trace: [ 1552.349372] dump_stack+0x107/0x167 [ 1552.349887] should_fail.cold+0x5/0xa [ 1552.350415] ? security_file_alloc+0x34/0x170 [ 1552.351065] should_failslab+0x5/0x20 [ 1552.351599] kmem_cache_alloc+0x5b/0x310 [ 1552.352154] security_file_alloc+0x34/0x170 [ 1552.352740] __alloc_file+0xb7/0x320 [ 1552.353264] alloc_empty_file+0x6d/0x170 [ 1552.353830] path_openat+0xe6/0x2770 [ 1552.354335] ? __lock_acquire+0x1657/0x5b00 [ 1552.354957] ? path_lookupat+0x860/0x860 [ 1552.355526] ? perf_trace_lock+0xac/0x490 [ 1552.356085] ? SOFTIRQ_verbose+0x10/0x10 [ 1552.356644] ? __lockdep_reset_lock+0x180/0x180 [ 1552.357293] do_filp_open+0x190/0x3e0 [ 1552.357818] ? may_open_dev+0xf0/0xf0 [ 1552.358364] ? alloc_fd+0x2e7/0x670 [ 1552.358916] ? lock_downgrade+0x6d0/0x6d0 [ 1552.359511] ? do_raw_spin_lock+0x121/0x260 [ 1552.360116] ? rwlock_bug.part.0+0x90/0x90 [ 1552.360682] ? lock_chain_count+0x20/0x20 [ 1552.361384] ? stack_trace_save+0x8c/0xc0 [ 1552.361971] ? _raw_spin_unlock+0x1a/0x30 [ 1552.362576] ? alloc_fd+0x2e7/0x670 [ 1552.363111] io_openat2+0x24d/0xb80 [ 1552.363603] ? io_send+0x780/0x780 [ 1552.364102] ? perf_trace_lock+0xac/0x490 [ 1552.364694] ? SOFTIRQ_verbose+0x10/0x10 [ 1552.365259] io_issue_sqe+0x2cd/0x77b0 [ 1552.365795] ? lock_acquire+0x197/0x470 [ 1552.366323] ? find_held_lock+0x2c/0x110 [ 1552.366910] ? __virt_addr_valid+0x346/0x5d0 [ 1552.367536] ? io_connect+0x610/0x610 [ 1552.368085] ? __might_fault+0xd3/0x180 [ 1552.368634] ? lock_downgrade+0x6d0/0x6d0 [ 1552.369215] ? __virt_addr_valid+0x170/0x5d0 [ 1552.369837] ? __check_object_size+0x319/0x440 [ 1552.370525] __io_queue_sqe+0x90/0x9d0 [ 1552.371055] ? io_issue_sqe+0x77b0/0x77b0 [ 1552.371609] ? getname+0x96/0xd0 [ 1552.372080] io_submit_sqes+0x44aa/0x8610 [ 1552.372659] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1552.373311] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1552.373989] ? find_held_lock+0x2c/0x110 [ 1552.374596] ? io_submit_sqes+0x8610/0x8610 [ 1552.375203] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1552.375839] ? wait_for_completion_io+0x270/0x270 [ 1552.376464] ? rcu_read_lock_any_held+0x75/0xa0 [ 1552.377226] ? vfs_write+0x354/0xb10 [ 1552.377731] ? fput_many+0x2f/0x1a0 [ 1552.378231] ? ksys_write+0x1a9/0x260 [ 1552.378804] ? __ia32_sys_read+0xb0/0xb0 [ 1552.379416] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1552.380153] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1552.380894] do_syscall_64+0x33/0x40 [ 1552.381417] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1552.382145] RIP: 0033:0x7faee6584b19 [ 1552.382697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1552.383400] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1552.385475] RSP: 002b:00007faee3afa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1552.385494] RAX: ffffffffffffffda RBX: 00007faee6697f60 RCX: 00007faee6584b19 [ 1552.385503] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1552.385512] RBP: 00007faee3afa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1552.385521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1552.385529] R13: 00007fff102f569f R14: 00007faee3afa300 R15: 0000000000022000 08:40:02 executing program 4: r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x4}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000080)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c9f8e650da8d1f569053e8984b83777318760a5238f6af85581608069a64b06b92de9de827a06da13dfd0a7244f9276114abb0c4ea0c40656d1732e262fd02"}}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8001) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x6) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r5, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) 08:40:02 executing program 7: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x80464c453f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x10, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3ab", 0x6f}], 0x1, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @tclass={{0x14}}, @hoplimit={{0x14}}], 0x58}, 0x4000) [ 1552.477084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1552.478330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1552.479577] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 08:40:02 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x58, 0x1, 0x1, 0x3, 0x4c00, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0xffffffffffffff90, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) [ 1552.498024] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 08:40:02 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x20042, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x10010, r0, 0x39) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200080, 0x23456}, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f0000000340)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 16) [ 1552.524435] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1552.525739] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 08:40:02 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x58, 0x1, 0x1, 0x3, 0x630d, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0xffffffffffffff90, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) [ 1552.612079] FAULT_INJECTION: forcing a failure. [ 1552.612079] name failslab, interval 1, probability 0, space 0, times 0 [ 1552.613700] CPU: 0 PID: 10140 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 1552.614660] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1552.615863] Call Trace: [ 1552.616243] dump_stack+0x107/0x167 [ 1552.616749] should_fail.cold+0x5/0xa [ 1552.617268] ? create_object.isra.0+0x3a/0xa20 [ 1552.617912] should_failslab+0x5/0x20 [ 1552.618426] kmem_cache_alloc+0x5b/0x310 [ 1552.619008] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 1552.619926] create_object.isra.0+0x3a/0xa20 [ 1552.620555] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1552.621262] kmem_cache_alloc+0x159/0x310 [ 1552.621866] security_file_alloc+0x34/0x170 [ 1552.622506] __alloc_file+0xb7/0x320 [ 1552.623026] alloc_empty_file+0x6d/0x170 [ 1552.623586] path_openat+0xe6/0x2770 [ 1552.624119] ? __lock_acquire+0x1657/0x5b00 [ 1552.624748] ? path_lookupat+0x860/0x860 [ 1552.625314] ? perf_trace_lock+0xac/0x490 [ 1552.625862] ? SOFTIRQ_verbose+0x10/0x10 [ 1552.626394] ? __lockdep_reset_lock+0x180/0x180 [ 1552.627157] do_filp_open+0x190/0x3e0 [ 1552.627673] ? may_open_dev+0xf0/0xf0 [ 1552.628207] ? alloc_fd+0x2e7/0x670 [ 1552.628705] ? lock_downgrade+0x6d0/0x6d0 [ 1552.629313] ? do_raw_spin_lock+0x121/0x260 [ 1552.629925] ? rwlock_bug.part.0+0x90/0x90 [ 1552.630526] ? lock_chain_count+0x20/0x20 [ 1552.631087] ? stack_trace_save+0x8c/0xc0 [ 1552.631665] ? _raw_spin_unlock+0x1a/0x30 [ 1552.632519] ? alloc_fd+0x2e7/0x670 [ 1552.633021] io_openat2+0x24d/0xb80 [ 1552.633531] ? io_send+0x780/0x780 [ 1552.634022] ? perf_trace_lock+0xac/0x490 [ 1552.634597] ? SOFTIRQ_verbose+0x10/0x10 [ 1552.635125] io_issue_sqe+0x2cd/0x77b0 [ 1552.635622] ? lock_acquire+0x197/0x470 [ 1552.636157] ? find_held_lock+0x2c/0x110 [ 1552.636749] ? __virt_addr_valid+0x346/0x5d0 [ 1552.637354] ? io_connect+0x610/0x610 [ 1552.637877] ? __might_fault+0xd3/0x180 [ 1552.638431] ? lock_downgrade+0x6d0/0x6d0 [ 1552.639020] ? __virt_addr_valid+0x170/0x5d0 [ 1552.639630] ? __check_object_size+0x319/0x440 [ 1552.640261] __io_queue_sqe+0x90/0x9d0 [ 1552.640778] ? io_issue_sqe+0x77b0/0x77b0 [ 1552.641356] ? getname+0x96/0xd0 [ 1552.641827] io_submit_sqes+0x44aa/0x8610 [ 1552.642408] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1552.643099] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1552.643760] ? find_held_lock+0x2c/0x110 [ 1552.644321] ? io_submit_sqes+0x8610/0x8610 [ 1552.644919] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1552.645559] ? wait_for_completion_io+0x270/0x270 [ 1552.646202] ? rcu_read_lock_any_held+0x75/0xa0 [ 1552.646855] ? vfs_write+0x354/0xb10 [ 1552.647347] ? fput_many+0x2f/0x1a0 [ 1552.647844] ? ksys_write+0x1a9/0x260 [ 1552.648361] ? __ia32_sys_read+0xb0/0xb0 [ 1552.648912] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1552.649595] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1552.649632] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1552.651739] do_syscall_64+0x33/0x40 [ 1552.652245] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1552.652941] RIP: 0033:0x7faee6584b19 [ 1552.653440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1552.655940] RSP: 002b:00007faee3afa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1552.656968] RAX: ffffffffffffffda RBX: 00007faee6697f60 RCX: 00007faee6584b19 [ 1552.657943] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1552.658987] RBP: 00007faee3afa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1552.659979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1552.660937] R13: 00007fff102f569f R14: 00007faee3afa300 R15: 0000000000022000 [ 1552.662141] hpet: Lost 2 RTC interrupts 08:40:02 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0xf8, 0x0, 0x5e, 0x11010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x88c9}, 0xe200}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x0, 0x80, 0x1, 0xcf, 0xc0, 0x9, 0x0, 0x3, 0xa, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x0, 0x3f}, 0x50502, 0x7fff, 0x7f, 0x9, 0x80000000, 0x8, 0x6, 0x0, 0x366b, 0x0, 0x40}, 0x0, 0x8, r0, 0xa) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001100)=ANY=[@ANYBLOB="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"], 0x98}}, 0x0) close_range(r1, r0, 0x0) fcntl$addseals(r1, 0x409, 0x8) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000440)=0x7, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd_index=0xffffffff, 0x8, &(0x7f0000000140)="ef3003e7d4d5730dd9bc0d2116cbd2ec2d4cef0397c67262d0882d05da47c1147ab3a8e1b3dfac797791d00529f0be39c7c3024d4751fcbfb4d3ec4b7b6dc1", 0xfffffffffffffcdc, 0x1e, 0x1}, 0x9) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, r2) add_key$keyring(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r2) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) request_key(&(0x7f0000000480)='dns_resolver\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380)='\x00', r3) futimesat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)) add_key(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) unshare(0x48020200) [ 1552.702289] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1552.703591] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 08:40:02 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) pread64(r0, &(0x7f0000000180)=""/199, 0xc7, 0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4008040) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fcntl$setstatus(r2, 0x4, 0xf0ac3d2370543000) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x5}, 0x1c705, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x4052, r4, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000140)={0x2, 0x3, 0xffff, 0x3}) sendmsg$nl_generic(r1, 0x0, 0x0) sendmsg$inet6(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0xa, 0x4e21, 0x81, @private0, 0xdf}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3abf5375c3866c0afd7148bb0dbf63d6a303e9125d9ad676bffcd27b2c53e52bcf1a1ce477ea55f678c2ed40464e3474c6156a7f6eaca23d80e426209b43d6d6818277a8e2f463ee217205a30440776e59857fc14fc2572251bbb80eaee7edc46e42abe63c1ba32adb2fdb60513e80fde", 0xde}], 0x1, &(0x7f00000005c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x80000001}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x33, 0x0, '\x00', [@pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0xffff}}, @hopopts={{0x50, 0x29, 0x36, {0xff, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0xef}, @calipso={0x7, 0x28, {0x3, 0x8, 0x8, 0x4, [0xfffffffffffffeff, 0x6, 0x8, 0x1]}}, @ra={0x5, 0x2, 0x6}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @rthdr={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x2, 0x1f, 0x0, [@remote]}}}], 0x138}, 0x4000) 08:40:02 executing program 7: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x80464c453f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x10, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3ab", 0x6f}], 0x1, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @tclass={{0x14}}, @hoplimit={{0x14}}], 0x58}, 0x0) 08:40:18 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) pread64(r0, &(0x7f0000000180)=""/199, 0xc7, 0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4008040) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fcntl$setstatus(r2, 0x4, 0xf0ac3d2370543000) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x5}, 0x1c705, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x4052, r4, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000140)={0x2, 0x3, 0xffff}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000001d00020000000000000010000400020008001200", @ANYRES32=r5, @ANYBLOB="8e2afb567c5049dab9732cf28484b893fcfd880ab5baea589e57661b1636f8952dae03129ab89e4e7a135718433900cf3d4ff0ae317eeacc91e3da5a28218297aff7a03d9c33fea62687074915caa746f95b6bb5d48248caaff63665c7"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0xa, 0x4e21, 0x81, @private0, 0xdf}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3abf5375c3866c0afd7148bb0dbf63d6a303e9125d9ad676bffcd27b2c53e52bcf1a1ce477ea55f678c2ed40464e3474c6156a7f6eaca23d80e426209b43d6d6818277a8e2f463ee217205a30440776e59857fc14fc2572251bbb80eaee7edc46e42abe63c1ba32adb2fdb60513e80fde", 0xde}], 0x1, &(0x7f00000005c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x80000001}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x33, 0x0, '\x00', [@pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0xffff}}, @hopopts={{0x50, 0x29, 0x36, {0xff, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0xef}, @calipso={0x7, 0x28, {0x3, 0x8, 0x8, 0x4, [0xfffffffffffffeff, 0x6, 0x8, 0x1]}}, @ra={0x5, 0x2, 0x6}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @rthdr={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x2, 0x1f, 0x0, [@remote]}}}], 0x138}, 0x4000) 08:40:18 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x58, 0x1, 0x1, 0x3, 0x640d, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0xffffffffffffff90, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) 08:40:18 executing program 4: sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000440)={{0x1, 0x1, 0x18}, '.\x00'}) socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f00000000c0), 0x80000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c000000000101e2ffffff00000000a0ed554515f681f1018008000300ac14140008000200e0000001951aed1454834c6a67bb12c616b65091cf3d915c6e7e3d5d6b90478d3b00de7ece840e051f9330578c4048354a148094b04285cea564e228659330000000000000f916c77ef233"], 0x2c}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1000004307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)={0x11c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@nested={0xc, 0x11, 0x0, 0x1, [@typed={0x7, 0x76, 0x0, 0x0, @str='\xf3+\x00'}]}, @generic="2ef9b9d79bb827e8b023d973f9a9b317430606a5eb854dcf902b63643a28dfea2b84efeeb6dd5765d40299ce6e50190d9408877186bdf575b0c6c65b685d75e818361d6b1d17e3cf85df0b3de40dc1ec6c27fdc611b63c9c9d1c566dd4d417a0d86a6b907220885899fea9320188a414523d893995ae45cdc0276ce695fd4969066c7fe9dbabe7b9f1185eaa5447775b2f81f9484dc04a388b73b9313d8395bb5588a2d2d59aaee6064f9ea0235eebdd073e56f754222c96782a97ca91ff39e0a241931526faa44f4a43cc21d76909df80017a7d975b60458ca0af08a73e18de7a86817f9ce234d177eafbbb0a4e4a226258958c5ed14b5a4d"]}, 0x11c}}, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000280), 0x8) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000280), 0x8) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r2, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}]}, 0x38}}, 0x81) io_submit(0x0, 0x1, &(0x7f00000006c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r3, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x841}, 0x440d1) io_submit(0x0, 0x1, &(0x7f00000006c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) io_uring_enter(r1, 0x7a4b, 0x5ab, 0x6, &(0x7f0000000040)={[0x2]}, 0x8) 08:40:18 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) pread64(r0, &(0x7f0000000180)=""/199, 0xc7, 0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4008040) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fcntl$setstatus(r2, 0x4, 0xf0ac3d2370543000) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x5}, 0x1c705, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x4052, r4, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000140)={0x2, 0x3, 0xffff, 0x3}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000001d00020000000000000010000400020008001200", @ANYRES32=r5, @ANYBLOB="8e2afb567c5049dab9732cf28484b893fcfd880ab5baea589e57661b1636f8952dae03129ab89e4e7a135718433900cf3d4ff0ae317eeacc91e3da5a28218297aff7a03d9c33fea62687074915caa746f95b6bb5d48248caaff63665c7"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0xa, 0x4e21, 0x81, @private0, 0xdf}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3abf5375c3866c0afd7148bb0dbf63d6a303e9125d9ad676bffcd27b2c53e52bcf1a1ce477ea55f678c2ed40464e3474c6156a7f6eaca23d80e426209b43d6d6818277a8e2f463ee217205a30440776e59857fc14fc2572251bbb80eaee7edc46e42abe63c1ba32adb2fdb60513e80fde", 0xde}], 0x1, &(0x7f00000005c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x80000001}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x33, 0x0, '\x00', [@pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0xffff}}, @hopopts={{0x50, 0x29, 0x36, {0xff, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0xef}, @calipso={0x7, 0x28, {0x3, 0x8, 0x8, 0x4, [0xfffffffffffffeff, 0x6, 0x8, 0x1]}}, @ra={0x5, 0x2, 0x6}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @rthdr={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x2, 0x1f, 0x0, [@remote]}}}], 0x138}, 0x4000) 08:40:18 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) pread64(r0, &(0x7f0000000180)=""/199, 0xc7, 0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4008040) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fcntl$setstatus(r2, 0x4, 0xf0ac3d2370543000) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x5}, 0x1c705, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x4052, r4, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000140)={0x2, 0x3, 0xffff, 0x3}) sendmsg$nl_generic(r1, 0x0, 0x0) sendmsg$inet6(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0xa, 0x4e21, 0x81, @private0, 0xdf}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3abf5375c3866c0afd7148bb0dbf63d6a303e9125d9ad676bffcd27b2c53e52bcf1a1ce477ea55f678c2ed40464e3474c6156a7f6eaca23d80e426209b43d6d6818277a8e2f463ee217205a30440776e59857fc14fc2572251bbb80eaee7edc46e42abe63c1ba32adb2fdb60513e80fde", 0xde}], 0x1, &(0x7f00000005c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x80000001}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x33, 0x0, '\x00', [@pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0xffff}}, @hopopts={{0x50, 0x29, 0x36, {0xff, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0xef}, @calipso={0x7, 0x28, {0x3, 0x8, 0x8, 0x4, [0xfffffffffffffeff, 0x6, 0x8, 0x1]}}, @ra={0x5, 0x2, 0x6}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @rthdr={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x2, 0x1f, 0x0, [@remote]}}}], 0x138}, 0x4000) 08:40:18 executing program 7: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x80464c453f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x10, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3ab", 0x6f}], 0x1, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @tclass={{0x14}}, @hoplimit={{0x14}}], 0x58}, 0x0) 08:40:18 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4c8c, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/clockevents', 0xc0, 0x18) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="a1ae8fb5c4de3f79ba461cafc93df8", 0xf}], 0x1}}, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x4c07, 0x0, 0x0, &(0x7f0000000300), 0x8) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)=ANY=[@ANYBLOB="b0cc9fab71b10c89d704a01835ca70e752ed803262844e", @ANYRES32, @ANYRES32, @ANYBLOB="000000002e2f6669ec653000"]) 08:40:18 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x20042, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x10010, r0, 0x39) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200080, 0x23456}, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f0000000340)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 17) [ 1568.380726] netlink: 252 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1568.385276] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1568.386163] ieee802154 phy0 wpan0: encryption failed: -22 [ 1568.386498] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1568.396216] FAULT_INJECTION: forcing a failure. [ 1568.396216] name failslab, interval 1, probability 0, space 0, times 0 [ 1568.397855] CPU: 0 PID: 10171 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 1568.398896] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1568.400104] Call Trace: [ 1568.400462] dump_stack+0x107/0x167 [ 1568.400957] should_fail.cold+0x5/0xa [ 1568.401491] ? getname_flags.part.0+0x50/0x4f0 [ 1568.402070] should_failslab+0x5/0x20 [ 1568.402586] kmem_cache_alloc+0x5b/0x310 [ 1568.403286] getname_flags.part.0+0x50/0x4f0 [ 1568.403877] getname+0x8e/0xd0 [ 1568.404303] __io_openat_prep+0x228/0x4c0 [ 1568.404874] io_submit_sqes+0xacc/0x8610 [ 1568.405458] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1568.406154] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1568.406952] ? find_held_lock+0x2c/0x110 [ 1568.407581] ? io_submit_sqes+0x8610/0x8610 [ 1568.408294] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1568.408900] ? wait_for_completion_io+0x270/0x270 [ 1568.409518] ? rcu_read_lock_any_held+0x75/0xa0 [ 1568.410129] ? vfs_write+0x354/0xb10 [ 1568.410658] ? fput_many+0x2f/0x1a0 [ 1568.411135] ? ksys_write+0x1a9/0x260 [ 1568.411635] ? __ia32_sys_read+0xb0/0xb0 [ 1568.412230] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1568.412970] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1568.413691] do_syscall_64+0x33/0x40 [ 1568.414227] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1568.414949] RIP: 0033:0x7faee6584b19 [ 1568.415505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1568.418129] RSP: 002b:00007faee3afa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1568.419241] RAX: ffffffffffffffda RBX: 00007faee6697f60 RCX: 00007faee6584b19 [ 1568.420203] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1568.421211] RBP: 00007faee3afa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1568.422200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1568.423187] R13: 00007fff102f569f R14: 00007faee3afa300 R15: 0000000000022000 [ 1568.424433] hpet: Lost 1 RTC interrupts [ 1568.471996] netlink: 252 bytes leftover after parsing attributes in process `syz-executor.4'. 08:40:18 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x58, 0x1, 0x1, 0x3, 0x6800, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0xffffffffffffff90, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) 08:40:18 executing program 7: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x80464c453f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x10, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3ab", 0x6f}], 0x1, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @tclass={{0x14}}, @hoplimit={{0x14}}], 0x58}, 0x0) 08:40:18 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) pread64(r0, &(0x7f0000000180)=""/199, 0xc7, 0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4008040) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fcntl$setstatus(r2, 0x4, 0xf0ac3d2370543000) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x5}, 0x1c705, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x4052, r4, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000140)={0x2, 0x3, 0xffff, 0x3}) sendmsg$nl_generic(r1, 0x0, 0x0) sendmsg$inet6(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0xa, 0x4e21, 0x81, @private0, 0xdf}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3abf5375c3866c0afd7148bb0dbf63d6a303e9125d9ad676bffcd27b2c53e52bcf1a1ce477ea55f678c2ed40464e3474c6156a7f6eaca23d80e426209b43d6d6818277a8e2f463ee217205a30440776e59857fc14fc2572251bbb80eaee7edc46e42abe63c1ba32adb2fdb60513e80fde", 0xde}], 0x1, &(0x7f00000005c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x80000001}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x33, 0x0, '\x00', [@pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0xffff}}, @hopopts={{0x50, 0x29, 0x36, {0xff, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0xef}, @calipso={0x7, 0x28, {0x3, 0x8, 0x8, 0x4, [0xfffffffffffffeff, 0x6, 0x8, 0x1]}}, @ra={0x5, 0x2, 0x6}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @rthdr={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x2, 0x1f, 0x0, [@remote]}}}], 0x138}, 0x4000) [ 1568.515992] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1568.517429] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1568.591297] hpet: Lost 2 RTC interrupts 08:40:18 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x58, 0x1, 0x1, 0x3, 0x6c00, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0xffffffffffffff90, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) 08:40:18 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x20042, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x10010, r0, 0x39) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200080, 0x23456}, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f0000000340)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 18) [ 1568.637952] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1568.639386] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 08:40:18 executing program 4: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, 0x0, 0xfeac) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r2, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048fff0f0000001c000000000000000000000008000000", @ANYRES32=r4], 0x38}}], 0x1, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1c, &(0x7f0000000000)=""/90, &(0x7f0000000180)=0x5a) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x20}, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fchmod(r5, 0x6) ioctl$PERF_EVENT_IOC_ID(r5, 0x80082407, &(0x7f00000001c0)) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYBLOB="110d0000000000000000970643980d8500006342c1510f700000000c9900000000000000006332e995beab66e5450dcc0000b0a904e445d90d6a89b1e1a872be59dec124e66f6fffd88226800f98f0f41a383d118437b367c78462b3b1e746c0b652087218b2940000384203d96da943929086a319399d047eabc198c76d93d3d1c8abed3fad420762884d30c2ca284472f2931e17c1fe59a7ee00000000e7"], 0x20}, 0x1, 0x0, 0x0, 0xc801}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000200)=@req={0x9, 0x8, 0x6, 0x61}, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x28, r0, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000894}, 0x20000088) 08:40:18 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) pread64(r0, &(0x7f0000000180)=""/199, 0xc7, 0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4008040) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fcntl$setstatus(r2, 0x4, 0xf0ac3d2370543000) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x5}, 0x1c705, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x4052, r4, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000140)={0x2, 0x3, 0xffff, 0x3}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0xa, 0x4e21, 0x81, @private0, 0xdf}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3abf5375c3866c0afd7148bb0dbf63d6a303e9125d9ad676bffcd27b2c53e52bcf1a1ce477ea55f678c2ed40464e3474c6156a7f6eaca23d80e426209b43d6d6818277a8e2f463ee217205a30440776e59857fc14fc2572251bbb80eaee7edc46e42abe63c1ba32adb2fdb60513e80fde", 0xde}], 0x1, &(0x7f00000005c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x80000001}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x33, 0x0, '\x00', [@pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0xffff}}, @hopopts={{0x50, 0x29, 0x36, {0xff, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0xef}, @calipso={0x7, 0x28, {0x3, 0x8, 0x8, 0x4, [0xfffffffffffffeff, 0x6, 0x8, 0x1]}}, @ra={0x5, 0x2, 0x6}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @rthdr={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x2, 0x1f, 0x0, [@remote]}}}], 0x138}, 0x4000) [ 1568.670354] FAULT_INJECTION: forcing a failure. [ 1568.670354] name failslab, interval 1, probability 0, space 0, times 0 [ 1568.671933] CPU: 0 PID: 10195 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 1568.672825] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1568.673956] Call Trace: [ 1568.674319] dump_stack+0x107/0x167 [ 1568.674830] should_fail.cold+0x5/0xa [ 1568.675359] ? create_object.isra.0+0x3a/0xa20 [ 1568.676005] should_failslab+0x5/0x20 [ 1568.676533] kmem_cache_alloc+0x5b/0x310 [ 1568.677086] create_object.isra.0+0x3a/0xa20 [ 1568.677670] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1568.678338] kmem_cache_alloc+0x159/0x310 [ 1568.678908] getname_flags.part.0+0x50/0x4f0 [ 1568.679481] getname+0x8e/0xd0 [ 1568.679915] __io_openat_prep+0x228/0x4c0 [ 1568.680469] io_submit_sqes+0xacc/0x8610 [ 1568.681009] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1568.681652] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1568.682313] ? find_held_lock+0x2c/0x110 [ 1568.682924] ? io_submit_sqes+0x8610/0x8610 [ 1568.683535] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1568.684164] ? wait_for_completion_io+0x270/0x270 [ 1568.684798] ? rcu_read_lock_any_held+0x75/0xa0 [ 1568.685394] ? vfs_write+0x354/0xb10 [ 1568.685870] ? fput_many+0x2f/0x1a0 [ 1568.686334] ? ksys_write+0x1a9/0x260 [ 1568.686849] ? __ia32_sys_read+0xb0/0xb0 [ 1568.687401] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1568.688099] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1568.688823] do_syscall_64+0x33/0x40 [ 1568.689309] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1568.689998] RIP: 0033:0x7faee6584b19 [ 1568.690498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1568.693288] RSP: 002b:00007faee3afa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa 08:40:18 executing program 3: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f00000000c0)='./file0\x00', r0, 0xee01) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000140)={{}, {}, [], {}, [], {0x10, 0x4}}, 0x24, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f00000002c0)=0x0) r5 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f00000001c0)={'fscrypt:', @desc3}, &(0x7f0000000200)={0x0, "f038779de021f8c8c974dd89170cf2579d1fa459ba726003d07140eeb357b87ae67d5b00d5a28eea29113393d0e1c7391515c7ab7c00", 0x2d}, 0x48, 0xffffffffffffffff) r6 = getegid() keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000080)='rxrpc_s\x00', &(0x7f0000000300)=@keyring={'key_or_keyring:', r5}) keyctl$chown(0x4, r5, 0xee01, r6) setxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="02000000010000000000000002000300", @ANYRES32=r3, @ANYBLOB="02000000", @ANYRES32=r0, @ANYBLOB="02000100", @ANYRES32=r4, @ANYBLOB="02000200", @ANYRES32=r0, @ANYBLOB="040000002000000008000200", @ANYRES32=r6, @ANYBLOB="cb3800f9", @ANYRES32=r1, @ANYBLOB="10000400000000002000040000000000"], 0x54, 0x2) [ 1568.694401] RAX: ffffffffffffffda RBX: 00007faee6697f60 RCX: 00007faee6584b19 [ 1568.695640] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1568.696716] RBP: 00007faee3afa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1568.697728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1568.698722] R13: 00007fff102f569f R14: 00007faee3afa300 R15: 0000000000022000 [ 1568.699947] hpet: Lost 1 RTC interrupts 08:40:34 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x20042, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x10010, r0, 0x39) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200080, 0x23456}, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f0000000340)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 19) 08:40:34 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000022c0), 0x20381, 0x0) write$P9_RREAD(r0, 0x0, 0x0) name_to_handle_at(r0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000340)=@ceph_nfs_snapfh={0x1c, 0x4e, {0x0, 0x5, 0x400, 0x40}}, &(0x7f0000000500), 0x400) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x2c, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0xc, 0x0, 0x0, 0x0, @str='keyring\x00'}, @typed={0xc, 0x11, 0x0, 0x0, @u64}]}, 0x2c}}, 0x0) close_range(r2, r1, 0x0) perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) sendmsg$nl_generic(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1423ac00210000092cbd686b46f6470cb3a2ec0c77468efe5886d81b6ba804cdb4a5fbdb7875fba8d15b5ac6e68a732725035c47bb9f6eef0108f479e52f05e3aedb7819b38664d3be6ad16bdb1f05e6d3df1bc5d13400df3c6dd4c59b12065a606dccd7473488d708f59a463567236abda1ddf0894ab552bd59ea9d309472fdafad9501"], 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x20040000) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) unshare(0x48020200) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x16, 0x1}, 0x1) 08:40:34 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) pread64(r0, &(0x7f0000000180)=""/199, 0xc7, 0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4008040) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fcntl$setstatus(r2, 0x4, 0xf0ac3d2370543000) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x5}, 0x1c705, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x4052, r4, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000140)={0x2, 0x3, 0xffff, 0x3}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0xa, 0x4e21, 0x81, @private0, 0xdf}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3abf5375c3866c0afd7148bb0dbf63d6a303e9125d9ad676bffcd27b2c53e52bcf1a1ce477ea55f678c2ed40464e3474c6156a7f6eaca23d80e426209b43d6d6818277a8e2f463ee217205a30440776e59857fc14fc2572251bbb80eaee7edc46e42abe63c1ba32adb2fdb60513e80fde", 0xde}], 0x1, &(0x7f00000005c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x80000001}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x33, 0x0, '\x00', [@pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0xffff}}, @hopopts={{0x50, 0x29, 0x36, {0xff, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0xef}, @calipso={0x7, 0x28, {0x3, 0x8, 0x8, 0x4, [0xfffffffffffffeff, 0x6, 0x8, 0x1]}}, @ra={0x5, 0x2, 0x6}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @rthdr={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x2, 0x1f, 0x0, [@remote]}}}], 0x138}, 0x4000) 08:40:34 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x58, 0x1, 0x1, 0x3, 0x7400, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0xffffffffffffff90, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) [ 1584.515010] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1584.563470] hpet: Lost 2 RTC interrupts 08:40:34 executing program 7: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x80464c453f) (fail_nth: 1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x10, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3ab", 0x6f}], 0x1, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @tclass={{0x14}}, @hoplimit={{0x14}}], 0x58}, 0x4000) 08:40:34 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) pread64(r0, &(0x7f0000000180)=""/199, 0xc7, 0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4008040) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fcntl$setstatus(r2, 0x4, 0xf0ac3d2370543000) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x5}, 0x1c705, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x4052, r4, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000140)={0x2, 0x3, 0xffff, 0x3}) sendmsg$nl_generic(r1, 0x0, 0x0) sendmsg$inet6(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0xa, 0x4e21, 0x81, @private0, 0xdf}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3abf5375c3866c0afd7148bb0dbf63d6a303e9125d9ad676bffcd27b2c53e52bcf1a1ce477ea55f678c2ed40464e3474c6156a7f6eaca23d80e426209b43d6d6818277a8e2f463ee217205a30440776e59857fc14fc2572251bbb80eaee7edc46e42abe63c1ba32adb2fdb60513e80fde", 0xde}], 0x1, &(0x7f00000005c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x80000001}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x33, 0x0, '\x00', [@pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0xffff}}, @hopopts={{0x50, 0x29, 0x36, {0xff, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0xef}, @calipso={0x7, 0x28, {0x3, 0x8, 0x8, 0x4, [0xfffffffffffffeff, 0x6, 0x8, 0x1]}}, @ra={0x5, 0x2, 0x6}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @rthdr={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x2, 0x1f, 0x0, [@remote]}}}], 0x138}, 0x4000) 08:40:34 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r0, r1, 0x0, 0x100000001) r2 = creat(&(0x7f0000000040)='./file1\x00', 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x58, 0x1, 0x1, 0x3, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[@ANYRESDEC=r2, @ANYRES32=r3], 0xfdef) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 08:40:34 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) pread64(r0, &(0x7f0000000180)=""/199, 0xc7, 0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4008040) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fcntl$setstatus(r2, 0x4, 0xf0ac3d2370543000) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x5}, 0x1c705, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x4052, r4, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000140)={0x2, 0x3, 0xffff, 0x3}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000001d00020000000000000010000400020008001200", @ANYRES32=r5, @ANYBLOB="8e2afb567c5049dab9732cf28484b893fcfd880ab5baea589e57661b1636f8952dae03129ab89e4e7a135718433900cf3d4ff0ae317eeacc91e3da5a28218297aff7a03d9c33fea62687074915caa746f95b6bb5d48248caaff63665c7"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0xa, 0x4e21, 0x81, @private0, 0xdf}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3abf5375c3866c0afd7148bb0dbf63d6a303e9125d9ad676bffcd27b2c53e52bcf1a1ce477ea55f678c2ed40464e3474c6156a7f6eaca23d80e426209b43d6d6818277a8e2f463ee217205a30440776e59857fc14fc2572251bbb80eaee7edc46e42abe63c1ba32adb2fdb60513e80fde", 0xde}], 0x1, &(0x7f00000005c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x80000001}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x33, 0x0, '\x00', [@pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0xffff}}, @hopopts={{0x50, 0x29, 0x36, {0xff, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0xef}, @calipso={0x7, 0x28, {0x3, 0x8, 0x8, 0x4, [0xfffffffffffffeff, 0x6, 0x8, 0x1]}}, @ra={0x5, 0x2, 0x6}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @rthdr={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x2, 0x1f, 0x0, [@remote]}}}], 0x138}, 0x4000) [ 1584.566099] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1584.567579] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1584.572033] FAULT_INJECTION: forcing a failure. [ 1584.572033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1584.573836] CPU: 1 PID: 10219 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 1584.574840] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1584.576024] Call Trace: [ 1584.576460] dump_stack+0x107/0x167 [ 1584.577509] should_fail.cold+0x5/0xa [ 1584.578059] strncpy_from_user+0x34/0x470 [ 1584.578656] getname_flags.part.0+0x95/0x4f0 [ 1584.579277] getname+0x8e/0xd0 [ 1584.579701] __io_openat_prep+0x228/0x4c0 [ 1584.580297] io_submit_sqes+0xacc/0x8610 [ 1584.580946] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1584.581647] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1584.582337] ? find_held_lock+0x2c/0x110 [ 1584.582928] ? io_submit_sqes+0x8610/0x8610 [ 1584.583532] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1584.584208] ? wait_for_completion_io+0x270/0x270 [ 1584.584926] ? rcu_read_lock_any_held+0x75/0xa0 [ 1584.585594] ? vfs_write+0x354/0xb10 [ 1584.586124] ? fput_many+0x2f/0x1a0 [ 1584.586648] ? ksys_write+0x1a9/0x260 [ 1584.587205] ? __ia32_sys_read+0xb0/0xb0 [ 1584.587773] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1584.588482] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1584.588727] FAULT_INJECTION: forcing a failure. [ 1584.588727] name failslab, interval 1, probability 0, space 0, times 0 [ 1584.589199] do_syscall_64+0x33/0x40 [ 1584.589216] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1584.589227] RIP: 0033:0x7faee6584b19 [ 1584.589250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1584.594992] RSP: 002b:00007faee3afa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1584.596108] RAX: ffffffffffffffda RBX: 00007faee6697f60 RCX: 00007faee6584b19 [ 1584.597020] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1584.597959] RBP: 00007faee3afa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1584.598945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1584.599873] R13: 00007fff102f569f R14: 00007faee3afa300 R15: 0000000000022000 [ 1584.600877] CPU: 0 PID: 10225 Comm: syz-executor.7 Not tainted 5.10.237 #1 [ 1584.601911] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1584.604871] Call Trace: [ 1584.605320] dump_stack+0x107/0x167 [ 1584.605869] should_fail.cold+0x5/0xa [ 1584.606437] ? alloc_pipe_info+0x10a/0x590 [ 1584.607097] should_failslab+0x5/0x20 [ 1584.607658] kmem_cache_alloc_trace+0x55/0x320 [ 1584.608330] ? avc_has_perm+0x108/0x1b0 [ 1584.608932] alloc_pipe_info+0x10a/0x590 [ 1584.609550] splice_direct_to_actor+0x774/0x980 [ 1584.610238] ? pipe_to_sendpage+0x380/0x380 [ 1584.610900] ? selinux_file_permission+0x92/0x520 [ 1584.611665] ? do_splice_to+0x160/0x160 [ 1584.613129] ? security_file_permission+0xb1/0xe0 [ 1584.613852] do_splice_direct+0x1c4/0x290 [ 1584.614391] ? splice_direct_to_actor+0x980/0x980 [ 1584.615088] ? security_file_permission+0xb1/0xe0 [ 1584.616899] do_sendfile+0x553/0x11e0 [ 1584.617460] ? do_pwritev+0x270/0x270 [ 1584.618026] ? wait_for_completion_io+0x270/0x270 [ 1584.618722] ? rcu_read_lock_any_held+0x75/0xa0 [ 1584.619399] ? vfs_write+0x354/0xb10 [ 1584.619956] __x64_sys_sendfile64+0x1d1/0x210 [ 1584.620629] ? __ia32_sys_sendfile+0x220/0x220 [ 1584.622301] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1584.623017] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1584.624876] do_syscall_64+0x33/0x40 [ 1584.625416] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1584.626120] RIP: 0033:0x7efca6f2bb19 [ 1584.627442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1584.629910] RSP: 002b:00007efca44a1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1584.632758] RAX: ffffffffffffffda RBX: 00007efca703ef60 RCX: 00007efca6f2bb19 [ 1584.635470] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 1584.636488] RBP: 00007efca44a11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1584.637487] R10: 00000080464c453f R11: 0000000000000246 R12: 0000000000000001 [ 1584.638434] R13: 00007ffdba8bcc9f R14: 00007efca44a1300 R15: 0000000000022000 [ 1584.639627] hpet: Lost 1 RTC interrupts [ 1584.659073] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1600.567523] FAULT_INJECTION: forcing a failure. [ 1600.567523] name failslab, interval 1, probability 0, space 0, times 0 [ 1600.569184] CPU: 0 PID: 10245 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 1600.570115] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1600.571276] Call Trace: [ 1600.571665] dump_stack+0x107/0x167 [ 1600.572179] should_fail.cold+0x5/0xa [ 1600.572703] ? __alloc_file+0x21/0x320 [ 1600.573223] should_failslab+0x5/0x20 [ 1600.573741] kmem_cache_alloc+0x5b/0x310 [ 1600.574294] ? SOFTIRQ_verbose+0x10/0x10 [ 1600.574868] __alloc_file+0x21/0x320 [ 1600.575401] alloc_empty_file+0x6d/0x170 [ 1600.575985] path_openat+0xe6/0x2770 [ 1600.576516] ? __lock_acquire+0x1657/0x5b00 [ 1600.577139] ? path_lookupat+0x860/0x860 [ 1600.577713] ? perf_trace_lock+0xac/0x490 [ 1600.578337] ? SOFTIRQ_verbose+0x10/0x10 [ 1600.578916] ? __lockdep_reset_lock+0x180/0x180 [ 1600.579587] do_filp_open+0x190/0x3e0 [ 1600.580131] ? may_open_dev+0xf0/0xf0 [ 1600.580722] ? alloc_fd+0x2e7/0x670 [ 1600.581235] ? lock_downgrade+0x6d0/0x6d0 [ 1600.581862] ? do_raw_spin_lock+0x121/0x260 [ 1600.582438] ? rwlock_bug.part.0+0x90/0x90 [ 1600.583110] ? lock_chain_count+0x20/0x20 [ 1600.583745] ? stack_trace_save+0x8c/0xc0 [ 1600.584341] ? _raw_spin_unlock+0x1a/0x30 [ 1600.584986] ? alloc_fd+0x2e7/0x670 [ 1600.585536] io_openat2+0x24d/0xb80 [ 1600.586101] ? io_send+0x780/0x780 [ 1600.586656] ? perf_trace_lock+0xac/0x490 [ 1600.587526] ? SOFTIRQ_verbose+0x10/0x10 [ 1600.588183] io_issue_sqe+0x2cd/0x77b0 [ 1600.588744] ? lock_acquire+0x197/0x470 [ 1600.589324] ? find_held_lock+0x2c/0x110 [ 1600.589983] ? __virt_addr_valid+0x346/0x5d0 [ 1600.590601] ? io_connect+0x610/0x610 [ 1600.591168] ? __might_fault+0xd3/0x180 [ 1600.591722] ? lock_downgrade+0x6d0/0x6d0 [ 1600.592367] ? __virt_addr_valid+0x170/0x5d0 [ 1600.593014] ? __check_object_size+0x319/0x440 [ 1600.593674] __io_queue_sqe+0x90/0x9d0 [ 1600.594258] ? io_issue_sqe+0x77b0/0x77b0 [ 1600.594841] ? getname+0x96/0xd0 [ 1600.595344] io_submit_sqes+0x44aa/0x8610 [ 1600.595970] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1600.596696] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1600.597407] ? find_held_lock+0x2c/0x110 [ 1600.597981] ? io_submit_sqes+0x8610/0x8610 [ 1600.598611] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1600.599311] ? wait_for_completion_io+0x270/0x270 [ 1600.599998] ? rcu_read_lock_any_held+0x75/0xa0 [ 1600.600648] ? vfs_write+0x354/0xb10 [ 1600.601174] ? fput_many+0x2f/0x1a0 [ 1600.601710] ? ksys_write+0x1a9/0x260 [ 1600.602250] ? __ia32_sys_read+0xb0/0xb0 [ 1600.602878] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1600.603641] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1600.604366] do_syscall_64+0x33/0x40 [ 1600.604951] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1600.605673] RIP: 0033:0x7faee6584b19 [ 1600.606201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1600.608685] RSP: 002b:00007faee3afa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1600.609747] RAX: ffffffffffffffda RBX: 00007faee6697f60 RCX: 00007faee6584b19 [ 1600.610756] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1600.611721] RBP: 00007faee3afa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1600.612672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1600.613606] R13: 00007fff102f569f R14: 00007faee3afa300 R15: 0000000000022000 [ 1600.614791] hpet: Lost 2 RTC interrupts 08:40:50 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x20042, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x10010, r0, 0x39) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200080, 0x23456}, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f0000000340)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 20) 08:40:50 executing program 4: recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001e00)=[{{&(0x7f0000000280), 0x6e, &(0x7f0000000440)=[{&(0x7f0000000300)=""/120, 0x78}, {&(0x7f0000000000)=""/31, 0x1f}, {&(0x7f0000000500)=""/198, 0xc6}, {&(0x7f0000000140)=""/32, 0x20}, {&(0x7f0000000380)=""/110, 0x6e}, {&(0x7f0000000600)=""/164, 0xa4}], 0x6, &(0x7f00000006c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x68}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000740)=""/179, 0xb3}, {&(0x7f00000001c0)=""/33, 0x21}, {&(0x7f0000000800)=""/115, 0x73}, {&(0x7f0000000880)=""/140, 0x8c}], 0x4}}, {{&(0x7f0000000980), 0x6e, &(0x7f0000001b40)=[{&(0x7f0000000a00)=""/129, 0x81}, {&(0x7f0000000ac0)=""/96, 0x60}, {&(0x7f0000000b40)=""/4096, 0x1000}], 0x3}}, {{&(0x7f0000001b80)=@abs, 0x6e, &(0x7f0000001d00)=[{&(0x7f0000001c00)=""/235, 0xeb}], 0x1}}], 0x4, 0x101, &(0x7f0000001d40)={0x77359400}) r1 = syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x800, 0x0, 0x0, r0}, &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x40004, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0, @ANYRESDEC=r1]) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000280), 0x8) io_submit(0x0, 0x1, &(0x7f00000006c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) mkdirat(r2, &(0x7f0000001f00)='./file0\x00', 0x113) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000400)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 08:40:50 executing program 7: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x80464c453f) (fail_nth: 2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x10, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3ab", 0x6f}], 0x1, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @tclass={{0x14}}, @hoplimit={{0x14}}], 0x58}, 0x4000) 08:40:50 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x58, 0x1, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0xffff}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3e}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000080)=[r0, 0xffffffffffffffff, r0], 0x3) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc8c01) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 08:40:50 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x58, 0x1, 0x1, 0x3, 0x7a00, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0xffffffffffffff90, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) 08:40:50 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) pread64(r0, &(0x7f0000000180)=""/199, 0xc7, 0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4008040) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fcntl$setstatus(r2, 0x4, 0xf0ac3d2370543000) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x5}, 0x1c705, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x4052, r4, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000140)={0x2, 0x3, 0xffff, 0x3}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0xa, 0x4e21, 0x81, @private0, 0xdf}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3abf5375c3866c0afd7148bb0dbf63d6a303e9125d9ad676bffcd27b2c53e52bcf1a1ce477ea55f678c2ed40464e3474c6156a7f6eaca23d80e426209b43d6d6818277a8e2f463ee217205a30440776e59857fc14fc2572251bbb80eaee7edc46e42abe63c1ba32adb2fdb60513e80fde", 0xde}], 0x1, &(0x7f00000005c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x80000001}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x33, 0x0, '\x00', [@pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0xffff}}, @hopopts={{0x50, 0x29, 0x36, {0xff, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0xef}, @calipso={0x7, 0x28, {0x3, 0x8, 0x8, 0x4, [0xfffffffffffffeff, 0x6, 0x8, 0x1]}}, @ra={0x5, 0x2, 0x6}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @rthdr={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x2, 0x1f, 0x0, [@remote]}}}], 0x138}, 0x4000) 08:40:50 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140)}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) read(r0, &(0x7f0000000340)=""/148, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x58, 0x1, 0x1, 0x3, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x412002, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000400)={0x1, 0x0, &(0x7f00000002c0)=[r0, 0xffffffffffffffff, r1, r0, r0, r2, r0, r0]}, 0x8) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c03000000000101000000000000000000000000000001000000000050fd30f943aee1dc4661fbfcc64e624d37564c1a4c5e25e64536f81704", @ANYRES32=0x0, @ANYRESHEX], 0x2c}, 0x1, 0x0, 0x0, 0xa0}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendfile(r4, 0xffffffffffffffff, 0x0, 0xf88c) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000040)) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x22902, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r5, 0x0, 0xa1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)={0x188, r7, 0x329, 0x0, 0x0, {{0x6b}, {@void, @val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x5f, 0xc5, "874872128c7d84f34d6054954b42749aa4ca80d2fd1e6ec7c868c40903f4daa8bc0c8846ec055ee5639417cf40ee33a3435bd0bed03de7542943f6978f7cc04697756866145ec3279264ff45785ecfa6d6fdf09729346c8a451b83"}, @NL80211_ATTR_VENDOR_DATA={0xec, 0xc5, "4a56e7cdc8437468d071aae413abf09fc8127f9197c4b06b15e25bedeb6db25243ca0950b51bd3d3f82f17faf91d8931bda9f663f9c947c5b7dead820347702c5f675182d26b5510b0b759a11ef660d77624ba76e030490304a3a47ff41b5d12e80e356c25328b502440eff9a1f8008c87def70bd459199ef3e81c7988a380f814f3c655da55adab8abfbb1c33c03c1baa4f653c00e4de8335e5d21bfadbf434b5dc8b50e7255e24fc89a4c1a3c52c1ef4d1c3440f0de2f048f80e6d5600b3e4c81240290a8938a1854e263ea102e3d1a0ac1bc0519addd6d7144331164ae61400d2395cb0afecf1"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xabd}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7}]}, 0x188}}, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000940)={0xffffffffffffff4c, 0x0, 0x400, 0x70bd2c, 0x25dfdbf8, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x44, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="7caa8d8c8f5b2fb1c35258dccd9a3d78"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="c87eda02302c9c0c15adfc161aa33feb"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x400}, @NL80211_REKEY_DATA_AKM={0x8}]}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="8f3570642c80414f6133645f6f551980"}]}, @NL80211_ATTR_REKEY_DATA={0x44, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="5c18ddc8bf7e00f6d1a5e86f29d8d475"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x80000000}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="7d1a5d8708546bbec4792c7b05c7d54065625dfa936b65e6"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8001}]}, @NL80211_ATTR_REKEY_DATA={0x44, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="f0a5c497a225f962def18ce12d00a28865b00bfcbcf98943"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="462d0c2ec00929cacb4491647bb1c856fbe2d0ea61262c014faaf7ad6234c967"}]}, @NL80211_ATTR_REKEY_DATA={0x18, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "eb4c0ef4c02f41f5"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}]}]}, 0x110}, 0x1, 0x0, 0x0, 0xc0}, 0x4000080) 08:40:50 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) pread64(r0, &(0x7f0000000180)=""/199, 0xc7, 0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4008040) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fcntl$setstatus(r2, 0x4, 0xf0ac3d2370543000) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x5}, 0x1c705, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x4052, r4, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000140)={0x2, 0x3, 0xffff, 0x3}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000001d00020000000000000010000400020008001200", @ANYRES32=r5, @ANYBLOB="8e2afb567c5049dab9732cf28484b893fcfd880ab5baea589e57661b1636f8952dae03129ab89e4e7a135718433900cf3d4ff0ae317eeacc91e3da5a28218297aff7a03d9c33fea62687074915caa746f95b6bb5d48248caaff63665c7"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0xa, 0x4e21, 0x81, @private0, 0xdf}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3abf5375c3866c0afd7148bb0dbf63d6a303e9125d9ad676bffcd27b2c53e52bcf1a1ce477ea55f678c2ed40464e3474c6156a7f6eaca23d80e426209b43d6d6818277a8e2f463ee217205a30440776e59857fc14fc2572251bbb80eaee7edc46e42abe63c1ba32adb2fdb60513e80fde", 0xde}], 0x1, &(0x7f00000005c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x80000001}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x33, 0x0, '\x00', [@pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0xffff}}, @hopopts={{0x50, 0x29, 0x36, {0xff, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0xef}, @calipso={0x7, 0x28, {0x3, 0x8, 0x8, 0x4, [0xfffffffffffffeff, 0x6, 0x8, 0x1]}}, @ra={0x5, 0x2, 0x6}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @rthdr={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x2, 0x1f, 0x0, [@remote]}}}], 0x138}, 0x4000) 08:40:50 executing program 3: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_io_uring_setup(0x68d2, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2000, @fd_index=0x9, 0x6, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/156, 0x9c}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000000000)=""/16, 0x10}], 0x3, 0x12}, 0x2) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_mmap}, {@cache_none}]}}) [ 1600.687649] hpet: Lost 2 RTC interrupts [ 1600.694144] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1600.695489] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 08:40:50 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) pread64(r0, &(0x7f0000000180)=""/199, 0xc7, 0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4008040) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fcntl$setstatus(r2, 0x4, 0xf0ac3d2370543000) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x5}, 0x1c705, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x4052, r4, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000140)={0x2, 0x3, 0xffff, 0x3}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0xa, 0x4e21, 0x81, @private0, 0xdf}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3abf5375c3866c0afd7148bb0dbf63d6a303e9125d9ad676bffcd27b2c53e52bcf1a1ce477ea55f678c2ed40464e3474c6156a7f6eaca23d80e426209b43d6d6818277a8e2f463ee217205a30440776e59857fc14fc2572251bbb80eaee7edc46e42abe63c1ba32adb2fdb60513e80fde", 0xde}], 0x1, &(0x7f00000005c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x80000001}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x33, 0x0, '\x00', [@pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0xffff}}, @hopopts={{0x50, 0x29, 0x36, {0xff, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0xef}, @calipso={0x7, 0x28, {0x3, 0x8, 0x8, 0x4, [0xfffffffffffffeff, 0x6, 0x8, 0x1]}}, @ra={0x5, 0x2, 0x6}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @rthdr={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x2, 0x1f, 0x0, [@remote]}}}], 0x138}, 0x4000) 08:40:50 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x58, 0x1, 0x1, 0x3, 0xdb00, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0xffffffffffffff90, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) 08:40:50 executing program 2: r0 = syz_open_dev$char_usb(0xc, 0xb4, 0xee) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800005}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x1c, 0x15, 0x102, 0x70bd2b, 0x25dfdbff, {0x8}, [@typed={0x8, 0x17, 0x0, 0x0, @fd=r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000200), 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000280)=""/3, 0x3}, {&(0x7f00000002c0)=""/200, 0xc8}, {&(0x7f00000004c0)=""/186, 0xba}, {&(0x7f0000000580)=""/211, 0xd3}, {&(0x7f0000000680)=""/208, 0xd0}, {&(0x7f00000003c0)=""/25, 0x19}, {&(0x7f0000000780)=""/125, 0x7d}, {&(0x7f0000000800)=""/227, 0xe3}, {&(0x7f0000000400)=""/51, 0x33}, {&(0x7f0000000900)=""/166, 0xa6}], 0xa, &(0x7f0000000a80)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x108}, 0x2000) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x7f, 0x1f, 0xf9, 0x8, 0x0, 0x3, 0x4080, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x309, 0x0, @perf_config_ext={0x1, 0x100000001}, 0x2a048, 0x8, 0x4, 0x4, 0x80, 0xf7b0, 0x4, 0x0, 0x7, 0x0, 0x9}, r2, 0x0, r1, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0041d70ee1e2cd9583d5328d5a2a53fdc958"]) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000e40)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) r7 = signalfd(0xffffffffffffffff, &(0x7f0000000280), 0x8) io_submit(0x0, 0x1, &(0x7f00000006c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}]) io_submit(0x0, 0x2, &(0x7f0000000f80)=[&(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x8, r4, &(0x7f0000000d00)="b5cb19e38502b5da9f5f4da95d5a4c9982559f71420eee2bc8dab5c02f7700ecdcc0aa439a069a8f83c9a5473ae0d6b4efe5a16292063e5bb031c7ad84db5f105d780d292baecd5d6e9eac9838fd9540b8aeefa698b0284cfad085c6ac141b2c3798d5bdc2a4b3f7be85e546512ebbabab2428f4022022ad6910596bd2e2377f679a3e8512a8af1178442dda6d692c8e82f036732e621c6c3b465c001ec7cfd54b0b22078d0962be40a86b6c4b7c9c368fd7a9ce5530a98743e85d028fc598cc6aa01e30605d726e847df30032d8c5b6609b8a0212f34c448de13bc1c0c45e32b7", 0xe1, 0xfb76, 0x0, 0x1}, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x3, 0x8000, r6, &(0x7f0000000e80)="e6d85f37ac38b3395c27a63678c2399fbf99a4e425d9d98ac03bc4281bd2839b04e56c22d26d60bb1366e105ce0162ab398b594a08470beca86c6c413c89a3a01e889fd7330e2d92035b56c01c12af273478297968000372f0ac3e7621c5ae3dc072aa9fa7a002f0c37be5f30d320ea0d2e2f4a53c0649f1268dc96170b9c8dcea8ce088822693dad3a75bec2a985f3bdcf27ef2ad46cddd842782fc3fd5b98316aeaeac43595e", 0xa7, 0x8, 0x0, 0x1, r7}]) [ 1600.788328] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1600.789568] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 08:40:50 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000540), 0x1c5002, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000008b40)='./file0\x00', 0x0, 0x40) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000008b80)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x1, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r3 = fcntl$dupfd(r0, 0x0, r0) sendmsg$inet6(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x8923, &(0x7f0000000000)={'sit0\x00', 0x0}) ioctl$CDROMREADTOCENTRY(0xffffffffffffffff, 0x5306, &(0x7f0000000200)={0x7f, 0x2, 0x5, 0x2, @msf={0x1, 0xff, 0x2}, 0x4}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="580000000101030000000000000000000a0000004400028006000340000000002c00018014000300000000000000000000000000000000011400040000000000000000000000ffffac1414bb0d0002800500010000000000"], 0x58}}, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet6(r5, &(0x7f0000000740)={&(0x7f0000000240)={0xa, 0x4e23, 0x6, @mcast2, 0x4}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000640)="abc26c8a28c32ca27c69e7fe412947011bb05cb72060eb1efeddf63a08785aeb05a8d3880766332f489f6a444a626761d9f91bbc331eb95b252a3a5f4262b1193a55213eb75f04765bb6fd403351de23cac3df8c10222633b6ff3b76fd5ef9e2305e6f305db1c285183fd4c238449e791509515d7266523878ab674890a261c5d165a984685fec51ca0000000000", 0x8e}, {&(0x7f0000000380)="dab686eea995225e7c25c96f7254cea62bd12e74a7e308eaca90982591bd0b6a2e3db9bd4ff650fbe9dcb5258d59ad7c9576c537e23091bde695ee93b51f4ee4e8c213ace5f3f9af757500ddc98741df522cc8e70069bbae58bd62ebaae820c18c9a2a34ec751140f7df08c2714e1701fd38e07f64e817846c108d21409c81fa681558ad2f9d173654cc3a0cb1b9208a705636ebbf819a7650f1db3cf593ac9be9cf78de43e83d52b1e24c88d5295dc500d12b8fe4a09f11b9f61f76b040ea12ed0b5256004bcc", 0xc7}, {&(0x7f0000000480)="a0b1d46c523474e0d3d7f4b2b1c132ee25f97d7310cc1e5158b54ebf3911447459d1acf9a3177f881cda48680203439c387769c9485b818f8032034c3ed254c22edbb027f2ef22a23d5f5e511cee5435089c", 0x52}, {&(0x7f0000000580)="a6ef4f57cb500af3c9b2a9fef7d9c91eb8c086edc50af5c0d343d7ab07590e0eb99cb7b98ecf828415fd6bc46fba32c8cd1cf508d2091a357540945e748572a23c31638c8eec741a0aa8e302d0406c14fe0da37f00", 0x55}], 0x4, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x1d0}, 0x8050) recvmmsg(r5, &(0x7f0000008900)=[{{&(0x7f0000000300)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000840)=""/123, 0x7b}, {&(0x7f0000000940)=""/94, 0x5e}, {&(0x7f00000009c0)=""/239, 0xef}, {&(0x7f0000000040)=""/53, 0x35}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/15, 0xf}], 0x6, &(0x7f0000000540)}, 0x1f}, {{&(0x7f0000000b40)=@phonet, 0x80, &(0x7f00000011c0)=[{&(0x7f0000002e00)=""/4096, 0x1000}, {&(0x7f0000000ec0)=""/154, 0x9a}, {&(0x7f0000000f80)=""/129, 0x81}, {&(0x7f0000001040)=""/121, 0x79}, {&(0x7f00000010c0)=""/203, 0xcb}, {&(0x7f0000000600)=""/13, 0xd}], 0x6, &(0x7f0000000700)=""/51, 0x33}, 0x1}, {{&(0x7f0000001240)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000780)=[{&(0x7f0000003e00)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/188, 0xbc}, {&(0x7f0000001380)=""/199, 0xc7}], 0x3, &(0x7f0000001480)=""/203, 0xcb}, 0xfd56}, {{&(0x7f0000001580)=@hci, 0x80, &(0x7f0000001640)=[{&(0x7f0000001600)=""/60, 0x3c}], 0x1, &(0x7f0000001680)=""/217, 0xd9}, 0x2}, {{&(0x7f0000001780)=@x25={0x9, @remote}, 0x80, &(0x7f0000001980)=[{&(0x7f0000001800)=""/222, 0xde}, {&(0x7f0000001900)=""/72, 0x48}], 0x2, &(0x7f0000004e00)=""/4096, 0x1000}, 0x8000}, {{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f00000019c0)=""/220, 0xdc}, {&(0x7f0000005e00)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/186, 0xba}], 0x3, &(0x7f0000001bc0)=""/225, 0xe1}, 0x1}, {{&(0x7f0000001cc0)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006f80)=[{&(0x7f0000006e00)=""/208, 0xd0}, {&(0x7f0000001d40)=""/45, 0x2d}, {&(0x7f0000006f00)=""/99, 0x63}], 0x3, &(0x7f0000006fc0)=""/1, 0x1}, 0xfffffe3c}, {{0x0, 0x0, &(0x7f0000007340)=[{&(0x7f0000007000)=""/247, 0xf7}, {&(0x7f0000007100)=""/117, 0x75}, {&(0x7f0000007180)=""/208, 0xd0}, {&(0x7f0000007280)=""/155, 0x9b}], 0x4}, 0x6}, {{0x0, 0x0, &(0x7f0000008780)=[{&(0x7f0000007380)=""/4096, 0x1000}, {&(0x7f0000008380)=""/234, 0xea}, {&(0x7f0000008480)=""/202, 0xca}, {&(0x7f0000008580)=""/243, 0xf3}, {&(0x7f0000008680)=""/250, 0xfa}], 0x5, &(0x7f0000008800)=""/236, 0xec}, 0x2}], 0x9, 0x40, 0x0) [ 1600.809885] FAULT_INJECTION: forcing a failure. [ 1600.809885] name failslab, interval 1, probability 0, space 0, times 0 [ 1600.811528] CPU: 0 PID: 10257 Comm: syz-executor.7 Not tainted 5.10.237 #1 [ 1600.812509] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1600.813679] Call Trace: [ 1600.814052] dump_stack+0x107/0x167 [ 1600.814543] should_fail.cold+0x5/0xa [ 1600.815162] ? create_object.isra.0+0x3a/0xa20 [ 1600.815802] should_failslab+0x5/0x20 [ 1600.816329] kmem_cache_alloc+0x5b/0x310 [ 1600.816921] create_object.isra.0+0x3a/0xa20 [ 1600.817528] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1600.818221] kmem_cache_alloc_trace+0x151/0x320 [ 1600.818822] ? avc_has_perm+0x108/0x1b0 [ 1600.819385] alloc_pipe_info+0x10a/0x590 [ 1600.819934] splice_direct_to_actor+0x774/0x980 [ 1600.820578] ? pipe_to_sendpage+0x380/0x380 [ 1600.821162] ? selinux_file_permission+0x92/0x520 [ 1600.821790] ? do_splice_to+0x160/0x160 [ 1600.822321] ? security_file_permission+0xb1/0xe0 [ 1600.822953] do_splice_direct+0x1c4/0x290 [ 1600.823519] ? splice_direct_to_actor+0x980/0x980 [ 1600.824148] ? security_file_permission+0xb1/0xe0 [ 1600.824785] do_sendfile+0x553/0x11e0 [ 1600.825301] ? do_pwritev+0x270/0x270 [ 1600.825807] ? wait_for_completion_io+0x270/0x270 [ 1600.826441] ? rcu_read_lock_any_held+0x75/0xa0 [ 1600.827053] ? vfs_write+0x354/0xb10 [ 1600.827529] __x64_sys_sendfile64+0x1d1/0x210 [ 1600.828095] ? __ia32_sys_sendfile+0x220/0x220 [ 1600.828690] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1600.829362] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1600.830031] do_syscall_64+0x33/0x40 [ 1600.830530] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1600.831235] RIP: 0033:0x7efca6f2bb19 [ 1600.831733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1600.834915] RSP: 002b:00007efca44a1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1600.836113] RAX: ffffffffffffffda RBX: 00007efca703ef60 RCX: 00007efca6f2bb19 [ 1600.837141] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 1600.838148] RBP: 00007efca44a11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1600.839208] R10: 00000080464c453f R11: 0000000000000246 R12: 0000000000000001 [ 1600.840371] R13: 00007ffdba8bcc9f R14: 00007efca44a1300 R15: 0000000000022000 [ 1600.842012] hpet: Lost 1 RTC interrupts 08:40:50 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x58, 0x1, 0x1, 0x3, 0xf000, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0xffffffffffffff90, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) [ 1600.905686] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1600.907183] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1600.910664] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 08:41:06 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x20042, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x10010, r0, 0x39) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200080, 0x23456}, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f0000000340)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 21) 08:41:06 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000300)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000100)=ANY=[], 0x10) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0xfdef) fallocate(r2, 0x3, 0x4077, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000140)={r2, 0x709, 0x403, 0x3ff}) r4 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xca1, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000380)={0x0, 0x0, 0x1, 0x0, 0x1f}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) fcntl$addseals(r5, 0x409, 0x8) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000340)='system_u:object_r:sshd_exec_t:s0\x00', 0x21, 0x2) mount(&(0x7f0000000240)=ANY=[@ANYBLOB="9f073ce1e3261b1b6b598a35f12acffa9f2c4530b678e5cbb60d274c9a659b1e08ecb8e15ba0888073fe87a9b7b29136bd40660ee74c252bb464fbb8c1"], &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) [ 1616.251272] loop3: detected capacity change from 0 to 41948160 [ 1616.261717] FAULT_INJECTION: forcing a failure. [ 1616.261717] name failslab, interval 1, probability 0, space 0, times 0 [ 1616.263548] CPU: 0 PID: 10298 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 1616.264581] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1616.265652] Call Trace: [ 1616.266001] dump_stack+0x107/0x167 [ 1616.266483] should_fail.cold+0x5/0xa [ 1616.266986] ? create_object.isra.0+0x3a/0xa20 [ 1616.266996] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1616.267008] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1616.267613] should_failslab+0x5/0x20 [ 1616.267632] kmem_cache_alloc+0x5b/0x310 [ 1616.270855] create_object.isra.0+0x3a/0xa20 [ 1616.271432] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1616.272101] kmem_cache_alloc+0x159/0x310 [ 1616.272636] ? SOFTIRQ_verbose+0x10/0x10 [ 1616.273157] __alloc_file+0x21/0x320 [ 1616.273618] alloc_empty_file+0x6d/0x170 [ 1616.274127] path_openat+0xe6/0x2770 [ 1616.274591] ? __lock_acquire+0x1657/0x5b00 [ 1616.275152] ? path_lookupat+0x860/0x860 [ 1616.275664] ? perf_trace_lock+0xac/0x490 [ 1616.276189] ? SOFTIRQ_verbose+0x10/0x10 [ 1616.276753] ? __lockdep_reset_lock+0x180/0x180 [ 1616.277396] do_filp_open+0x190/0x3e0 [ 1616.277894] ? may_open_dev+0xf0/0xf0 [ 1616.278362] FAULT_INJECTION: forcing a failure. [ 1616.278362] name failslab, interval 1, probability 0, space 0, times 0 [ 1616.279754] ? alloc_fd+0x2e7/0x670 [ 1616.280225] ? lock_downgrade+0x6d0/0x6d0 [ 1616.280755] ? do_raw_spin_lock+0x121/0x260 [ 1616.281315] ? rwlock_bug.part.0+0x90/0x90 [ 1616.281867] ? lock_chain_count+0x20/0x20 [ 1616.282410] ? stack_trace_save+0x8c/0xc0 [ 1616.282954] ? _raw_spin_unlock+0x1a/0x30 [ 1616.283500] ? alloc_fd+0x2e7/0x670 [ 1616.283976] io_openat2+0x24d/0xb80 [ 1616.284451] ? io_send+0x780/0x780 [ 1616.284914] ? perf_trace_lock+0xac/0x490 [ 1616.285458] ? SOFTIRQ_verbose+0x10/0x10 [ 1616.285990] io_issue_sqe+0x2cd/0x77b0 [ 1616.286495] ? lock_acquire+0x197/0x470 [ 1616.287005] ? find_held_lock+0x2c/0x110 [ 1616.287544] ? __virt_addr_valid+0x346/0x5d0 [ 1616.288115] ? io_connect+0x610/0x610 [ 1616.288608] ? __might_fault+0xd3/0x180 [ 1616.289118] ? lock_downgrade+0x6d0/0x6d0 [ 1616.289656] ? __virt_addr_valid+0x170/0x5d0 [ 1616.290221] ? __check_object_size+0x319/0x440 [ 1616.290811] __io_queue_sqe+0x90/0x9d0 [ 1616.291328] ? io_issue_sqe+0x77b0/0x77b0 [ 1616.291864] ? getname+0x96/0xd0 [ 1616.292308] io_submit_sqes+0x44aa/0x8610 [ 1616.292869] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1616.293510] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1616.294122] ? find_held_lock+0x2c/0x110 [ 1616.294633] ? io_submit_sqes+0x8610/0x8610 [ 1616.295190] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1616.295795] ? wait_for_completion_io+0x270/0x270 [ 1616.296402] ? rcu_read_lock_any_held+0x75/0xa0 [ 1616.296980] ? vfs_write+0x354/0xb10 [ 1616.297495] ? fput_many+0x2f/0x1a0 [ 1616.297997] ? ksys_write+0x1a9/0x260 [ 1616.298496] ? __ia32_sys_read+0xb0/0xb0 [ 1616.299027] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1616.299753] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1616.300482] do_syscall_64+0x33/0x40 [ 1616.301006] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1616.301733] RIP: 0033:0x7faee6584b19 [ 1616.302244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1616.304757] RSP: 002b:00007faee3afa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1616.305755] RAX: ffffffffffffffda RBX: 00007faee6697f60 RCX: 00007faee6584b19 [ 1616.306693] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1616.307686] RBP: 00007faee3afa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1616.308655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1616.309615] R13: 00007fff102f569f R14: 00007faee3afa300 R15: 0000000000022000 [ 1616.310537] CPU: 1 PID: 10303 Comm: syz-executor.7 Not tainted 5.10.237 #1 [ 1616.310786] hpet: Lost 2 RTC interrupts [ 1616.311577] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1616.311587] Call Trace: [ 1616.313474] dump_stack+0x107/0x167 [ 1616.313929] should_fail.cold+0x5/0xa [ 1616.314392] ? alloc_pipe_info+0x1e5/0x590 [ 1616.315036] should_failslab+0x5/0x20 [ 1616.315540] __kmalloc+0x72/0x390 [ 1616.315976] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1616.316618] alloc_pipe_info+0x1e5/0x590 [ 1616.317136] splice_direct_to_actor+0x774/0x980 [ 1616.317709] ? pipe_to_sendpage+0x380/0x380 [ 1616.318228] ? selinux_file_permission+0x92/0x520 [ 1616.318849] ? do_splice_to+0x160/0x160 [ 1616.319365] ? security_file_permission+0xb1/0xe0 [ 1616.319983] do_splice_direct+0x1c4/0x290 [ 1616.320517] ? splice_direct_to_actor+0x980/0x980 [ 1616.321127] ? security_file_permission+0xb1/0xe0 [ 1616.321746] do_sendfile+0x553/0x11e0 [ 1616.322237] ? do_pwritev+0x270/0x270 [ 1616.322721] ? wait_for_completion_io+0x270/0x270 [ 1616.323350] ? rcu_read_lock_any_held+0x75/0xa0 [ 1616.323938] ? vfs_write+0x354/0xb10 [ 1616.324418] __x64_sys_sendfile64+0x1d1/0x210 [ 1616.324988] ? __ia32_sys_sendfile+0x220/0x220 [ 1616.325575] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1616.326245] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1616.326904] do_syscall_64+0x33/0x40 [ 1616.327392] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1616.328038] RIP: 0033:0x7efca6f2bb19 [ 1616.328513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1616.330986] RSP: 002b:00007efca44a1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1616.331967] RAX: ffffffffffffffda RBX: 00007efca703ef60 RCX: 00007efca6f2bb19 [ 1616.332871] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 1616.333780] RBP: 00007efca44a11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1616.334679] R10: 00000080464c453f R11: 0000000000000246 R12: 0000000000000001 [ 1616.335602] R13: 00007ffdba8bcc9f R14: 00007efca44a1300 R15: 0000000000022000 [ 1616.357993] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 08:41:06 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x3, @loopback}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = signalfd4(r0, &(0x7f0000000100)={[0x3]}, 0x8, 0x800) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000001c0)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r5 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000240)="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", 0xffffffffffffffaa}], 0x1) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x44084) fallocate(r5, 0x0, 0x10001, 0x100) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x4, 0xfffffffffffffffc}) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x4, 0xffffffff, 0x1f, 0x4}) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9bbb) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendfile(r2, 0xffffffffffffffff, 0x0, 0x40001) lseek(0xffffffffffffffff, 0x2, 0x4) 08:41:06 executing program 7: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x80464c453f) (fail_nth: 3) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x10, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3ab", 0x6f}], 0x1, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @tclass={{0x14}}, @hoplimit={{0x14}}], 0x58}, 0x4000) 08:41:06 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) pread64(r0, &(0x7f0000000180)=""/199, 0xc7, 0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4008040) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fcntl$setstatus(r2, 0x4, 0xf0ac3d2370543000) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x5}, 0x1c705, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x4052, r4, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000140)={0x2, 0x3, 0xffff, 0x3}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0xa, 0x4e21, 0x81, @private0, 0xdf}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3abf5375c3866c0afd7148bb0dbf63d6a303e9125d9ad676bffcd27b2c53e52bcf1a1ce477ea55f678c2ed40464e3474c6156a7f6eaca23d80e426209b43d6d6818277a8e2f463ee217205a30440776e59857fc14fc2572251bbb80eaee7edc46e42abe63c1ba32adb2fdb60513e80fde", 0xde}], 0x1, &(0x7f00000005c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x80000001}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x33, 0x0, '\x00', [@pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0xffff}}, @hopopts={{0x50, 0x29, 0x36, {0xff, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0xef}, @calipso={0x7, 0x28, {0x3, 0x8, 0x8, 0x4, [0xfffffffffffffeff, 0x6, 0x8, 0x1]}}, @ra={0x5, 0x2, 0x6}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @rthdr={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x2, 0x1f, 0x0, [@remote]}}}], 0x138}, 0x4000) 08:41:06 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x58, 0x1, 0x1, 0x3, 0x34000, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0xffffffffffffff90, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) 08:41:06 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000080)=ANY=[@ANYBLOB="01ff00000100000018100000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x8301036f33c7775a) link(&(0x7f00000001c0)='./file1\x00', &(0x7f00000003c0)='./file0\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 08:41:06 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001c80)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32]) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/cpuinfo\x00', 0x0, 0x0) syz_io_uring_setup(0x1d, &(0x7f0000000140)={0x0, 0x31a0, 0x8, 0x0, 0x3e1, 0x0, r2}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000200)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000280)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xe}, 0x4}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000340)=""/175, 0xaf}, {&(0x7f00000005c0)=""/163, 0xa3}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/250, 0xfa}, {&(0x7f0000001780)=""/130, 0x82}, {&(0x7f0000001840)=""/246, 0xf6}, {&(0x7f0000000400)=""/78, 0x4e}, {&(0x7f0000000000)=""/43, 0x2b}], 0x8, 0xffffffff, 0x8) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet(r7, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4008000) sendmmsg$inet6(r7, &(0x7f0000004ac0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)=[@dstopts_2292={{0x18}}, @dstopts_2292={{0x18}}], 0x30}}], 0x2, 0x0) bind$inet6(r7, &(0x7f0000000240)={0xa, 0x4e20, 0xa6, @mcast2, 0x5}, 0x1c) r8 = dup(r6) preadv(r8, &(0x7f0000000200)=[{&(0x7f0000000040)=""/39, 0x27}], 0x1, 0xffff57e9, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 08:41:06 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x20042, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x10010, r0, 0x39) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200080, 0x23456}, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f0000000340)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 22) [ 1616.415741] hpet: Lost 1 RTC interrupts 08:41:06 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x58, 0x1, 0x1, 0x3, 0x80000, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0xffffffffffffff90, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) [ 1616.447467] FAULT_INJECTION: forcing a failure. [ 1616.447467] name failslab, interval 1, probability 0, space 0, times 0 [ 1616.449076] CPU: 0 PID: 10315 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 1616.449954] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1616.450993] Call Trace: [ 1616.451350] dump_stack+0x107/0x167 [ 1616.451802] should_fail.cold+0x5/0xa [ 1616.452287] ? security_file_alloc+0x34/0x170 [ 1616.452892] should_failslab+0x5/0x20 [ 1616.453405] kmem_cache_alloc+0x5b/0x310 [ 1616.453952] security_file_alloc+0x34/0x170 [ 1616.454540] __alloc_file+0xb7/0x320 [ 1616.455007] alloc_empty_file+0x6d/0x170 [ 1616.455595] path_openat+0xe6/0x2770 [ 1616.456071] ? __lock_acquire+0x1657/0x5b00 [ 1616.456647] ? path_lookupat+0x860/0x860 [ 1616.457180] ? perf_trace_lock+0xac/0x490 [ 1616.457712] ? SOFTIRQ_verbose+0x10/0x10 [ 1616.458247] ? __lockdep_reset_lock+0x180/0x180 [ 1616.458849] do_filp_open+0x190/0x3e0 [ 1616.459356] ? may_open_dev+0xf0/0xf0 [ 1616.459843] ? alloc_fd+0x2e7/0x670 [ 1616.460303] ? lock_downgrade+0x6d0/0x6d0 [ 1616.460829] ? do_raw_spin_lock+0x121/0x260 [ 1616.461379] ? rwlock_bug.part.0+0x90/0x90 [ 1616.461917] ? lock_chain_count+0x20/0x20 [ 1616.462457] ? stack_trace_save+0x8c/0xc0 [ 1616.462998] ? _raw_spin_unlock+0x1a/0x30 [ 1616.463548] ? alloc_fd+0x2e7/0x670 [ 1616.464024] io_openat2+0x24d/0xb80 [ 1616.464498] ? io_send+0x780/0x780 [ 1616.464960] ? perf_trace_lock+0xac/0x490 [ 1616.465492] ? SOFTIRQ_verbose+0x10/0x10 [ 1616.466013] io_issue_sqe+0x2cd/0x77b0 [ 1616.466521] ? lock_acquire+0x197/0x470 [ 1616.467037] ? find_held_lock+0x2c/0x110 [ 1616.467580] ? __virt_addr_valid+0x346/0x5d0 [ 1616.468011] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1616.468137] ? io_connect+0x610/0x610 [ 1616.468154] ? __might_fault+0xd3/0x180 [ 1616.468171] ? lock_downgrade+0x6d0/0x6d0 [ 1616.469301] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1616.469764] ? __virt_addr_valid+0x170/0x5d0 [ 1616.472372] ? __check_object_size+0x319/0x440 [ 1616.472957] __io_queue_sqe+0x90/0x9d0 [ 1616.473469] ? io_issue_sqe+0x77b0/0x77b0 [ 1616.473995] ? getname+0x96/0xd0 [ 1616.474441] io_submit_sqes+0x44aa/0x8610 [ 1616.474990] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1616.475667] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1616.476303] ? find_held_lock+0x2c/0x110 [ 1616.476830] ? io_submit_sqes+0x8610/0x8610 [ 1616.477387] ? __mutex_unlock_slowpath+0xe1/0x600 08:41:06 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000280), 0x8) open_tree(r0, 0x0, 0x80980) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x40040}, 0x80) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0xffffffff, 0x1, 0x17, "77004a6efdff00002d1ceb7300", 0x0, 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x121601, 0x0) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x82, 0x4, 0x4, 0x80, 0x2}}) r3 = socket$inet(0x2, 0xa, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000700)={0x23, 0x2, &(0x7f00000006c0)}, 0x0) dup(0xffffffffffffffff) r4 = syz_open_dev$vcsa(&(0x7f0000004700), 0x0, 0x4400) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) unlink(&(0x7f00000000c0)='./file0\x00') syz_open_dev$vcsu(0x0, 0x7, 0x400) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x4090) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000140)={'ip6gretap0\x00'}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x80, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x401}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r3, r1, 0x0) futimesat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', &(0x7f0000000440)={{}, {0x0, 0x2710}}) [ 1616.478005] ? wait_for_completion_io+0x270/0x270 [ 1616.478853] ? rcu_read_lock_any_held+0x75/0xa0 [ 1616.479461] ? vfs_write+0x354/0xb10 [ 1616.479939] ? fput_many+0x2f/0x1a0 [ 1616.480419] ? ksys_write+0x1a9/0x260 [ 1616.480954] ? __ia32_sys_read+0xb0/0xb0 [ 1616.481504] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1616.482206] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1616.482874] do_syscall_64+0x33/0x40 [ 1616.483374] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1616.484016] RIP: 0033:0x7faee6584b19 [ 1616.484506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1616.486868] RSP: 002b:00007faee3afa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1616.487859] RAX: ffffffffffffffda RBX: 00007faee6697f60 RCX: 00007faee6584b19 [ 1616.488746] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1616.489635] RBP: 00007faee3afa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1616.490524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1616.491418] R13: 00007fff102f569f R14: 00007faee3afa300 R15: 0000000000022000 [ 1616.492640] hpet: Lost 2 RTC interrupts [ 1616.494000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1616.495039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1616.523583] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1616.538285] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 08:41:06 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) pread64(r0, &(0x7f0000000180)=""/199, 0xc7, 0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4008040) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fcntl$setstatus(r2, 0x4, 0xf0ac3d2370543000) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x5}, 0x1c705, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x4052, r4, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000140)={0x2, 0x3, 0xffff, 0x3}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0xa, 0x4e21, 0x81, @private0, 0xdf}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3abf5375c3866c0afd7148bb0dbf63d6a303e9125d9ad676bffcd27b2c53e52bcf1a1ce477ea55f678c2ed40464e3474c6156a7f6eaca23d80e426209b43d6d6818277a8e2f463ee217205a30440776e59857fc14fc2572251bbb80eaee7edc46e42abe63c1ba32adb2fdb60513e80fde", 0xde}], 0x1, &(0x7f00000005c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x80000001}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x33, 0x0, '\x00', [@pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0xffff}}, @hopopts={{0x50, 0x29, 0x36, {0xff, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0xef}, @calipso={0x7, 0x28, {0x3, 0x8, 0x8, 0x4, [0xfffffffffffffeff, 0x6, 0x8, 0x1]}}, @ra={0x5, 0x2, 0x6}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @rthdr={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x2, 0x1f, 0x0, [@remote]}}}], 0x138}, 0x4000) 08:41:06 executing program 7: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x80464c453f) (fail_nth: 4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x10, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3ab", 0x6f}], 0x1, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @tclass={{0x14}}, @hoplimit={{0x14}}], 0x58}, 0x4000) 08:41:06 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x58, 0x1, 0x1, 0x3, 0x400300, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0xffffffffffffff90, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) [ 1616.634774] audit: type=1326 audit(1749199266.597:207): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10319 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee58433b19 code=0x7ffc0000 [ 1616.638171] audit: type=1326 audit(1749199266.597:208): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10319 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee58433b19 code=0x7ffc0000 [ 1616.643807] audit: type=1326 audit(1749199266.606:209): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10319 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fee58433b19 code=0x7ffc0000 [ 1616.647265] audit: type=1326 audit(1749199266.607:210): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10319 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee58433b19 code=0x7ffc0000 08:41:06 executing program 2: mknod$loop(&(0x7f0000000300)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91}) openat(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x32) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) [ 1616.678131] FAULT_INJECTION: forcing a failure. [ 1616.678131] name failslab, interval 1, probability 0, space 0, times 0 [ 1616.679814] CPU: 0 PID: 10327 Comm: syz-executor.7 Not tainted 5.10.237 #1 [ 1616.680663] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1616.681703] Call Trace: [ 1616.682037] dump_stack+0x107/0x167 [ 1616.682487] should_fail.cold+0x5/0xa [ 1616.683030] ? create_object.isra.0+0x3a/0xa20 [ 1616.683684] should_failslab+0x5/0x20 [ 1616.684153] kmem_cache_alloc+0x5b/0x310 [ 1616.684653] ? create_object.isra.0+0x3ad/0xa20 [ 1616.685233] create_object.isra.0+0x3a/0xa20 [ 1616.685781] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1616.686162] audit: type=1326 audit(1749199266.607:211): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10319 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fee58433b19 code=0x7ffc0000 [ 1616.686403] __kmalloc_node+0x1ae/0x420 [ 1616.686418] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1616.686434] memcg_alloc_page_obj_cgroups+0x73/0x100 [ 1616.691072] memcg_slab_post_alloc_hook+0x1f0/0x430 [ 1616.691198] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1616.691781] ? _raw_spin_unlock_irqrestore+0x25/0x40 [ 1616.691800] kmem_cache_alloc_trace+0x169/0x320 [ 1616.691814] ? avc_has_perm+0x108/0x1b0 [ 1616.691835] alloc_pipe_info+0x10a/0x590 [ 1616.693060] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1616.693733] splice_direct_to_actor+0x774/0x980 [ 1616.696913] ? pipe_to_sendpage+0x380/0x380 [ 1616.697453] ? selinux_file_permission+0x92/0x520 [ 1616.698057] ? do_splice_to+0x160/0x160 [ 1616.698551] ? security_file_permission+0xb1/0xe0 [ 1616.699185] do_splice_direct+0x1c4/0x290 [ 1616.699747] ? splice_direct_to_actor+0x980/0x980 [ 1616.700496] ? security_file_permission+0xb1/0xe0 [ 1616.701210] do_sendfile+0x553/0x11e0 [ 1616.701785] ? do_pwritev+0x270/0x270 [ 1616.702350] ? wait_for_completion_io+0x270/0x270 [ 1616.702957] ? rcu_read_lock_any_held+0x75/0xa0 [ 1616.703556] ? vfs_write+0x354/0xb10 [ 1616.704021] __x64_sys_sendfile64+0x1d1/0x210 [ 1616.704575] ? __ia32_sys_sendfile+0x220/0x220 [ 1616.705146] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1616.705448] audit: type=1326 audit(1749199266.607:212): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10319 comm="syz-executor.4" exe="/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee58433b19 code=0x7ffc0000 [ 1616.705804] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1616.705826] do_syscall_64+0x33/0x40 [ 1616.709765] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1616.710479] RIP: 0033:0x7efca6f2bb19 [ 1616.710994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1616.713291] RSP: 002b:00007efca44a1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1616.714329] RAX: ffffffffffffffda RBX: 00007efca703ef60 RCX: 00007efca6f2bb19 [ 1616.715428] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 1616.716515] RBP: 00007efca44a11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1616.717504] R10: 00000080464c453f R11: 0000000000000246 R12: 0000000000000001 [ 1616.718492] R13: 00007ffdba8bcc9f R14: 00007efca44a1300 R15: 0000000000022000 [ 1616.719714] hpet: Lost 1 RTC interrupts 08:41:06 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) pread64(r0, &(0x7f0000000180)=""/199, 0xc7, 0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4008040) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fcntl$setstatus(r2, 0x4, 0xf0ac3d2370543000) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x5}, 0x1c705, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x4052, r4, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000140)={0x2, 0x3, 0xffff, 0x3}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000001d00020000000000000010000400020008001200", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0xa, 0x4e21, 0x81, @private0, 0xdf}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3abf5375c3866c0afd7148bb0dbf63d6a303e9125d9ad676bffcd27b2c53e52bcf1a1ce477ea55f678c2ed40464e3474c6156a7f6eaca23d80e426209b43d6d6818277a8e2f463ee217205a30440776e59857fc14fc2572251bbb80eaee7edc46e42abe63c1ba32adb2fdb60513e80fde", 0xde}], 0x1, &(0x7f00000005c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x80000001}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x33, 0x0, '\x00', [@pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0xffff}}, @hopopts={{0x50, 0x29, 0x36, {0xff, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0xef}, @calipso={0x7, 0x28, {0x3, 0x8, 0x8, 0x4, [0xfffffffffffffeff, 0x6, 0x8, 0x1]}}, @ra={0x5, 0x2, 0x6}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @rthdr={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x2, 0x1f, 0x0, [@remote]}}}], 0x138}, 0x4000) 08:41:06 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x58, 0x1, 0x1, 0x3, 0xe0ffff, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0xffffffffffffff90, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) [ 1616.868938] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1616.870118] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 08:41:21 executing program 7: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x80464c453f) (fail_nth: 5) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x10, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3ab", 0x6f}], 0x1, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @tclass={{0x14}}, @hoplimit={{0x14}}], 0x58}, 0x4000) [ 1631.927978] hpet_rtc_timer_reinit: 10 callbacks suppressed [ 1631.927985] hpet: Lost 2 RTC interrupts [ 1631.931546] FAULT_INJECTION: forcing a failure. 08:41:21 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000540)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x1) syz_io_uring_setup(0x4cc1, &(0x7f0000000080)={0x0, 0xed63, 0x0, 0x3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000002a40)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000100)={'filter\x00', 0x2, [{}, {}]}, 0x48) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x11, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1, 0x0, 0x0, 0x3}, 0x200000}], 0x7ffff000, 0x0) 08:41:21 executing program 0: getresuid(&(0x7f0000000000), &(0x7f0000000180), &(0x7f00000001c0)=0x0) unlinkat(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8000}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000080)='devpts\x00', 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r2, 0x0) setresuid(r2, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x100000000, 0x5, &(0x7f0000001540)=[{&(0x7f0000001240)="32ad6b3cc0162b8580e1e3394ae8f674d22f03020ddce6389124f193759f94f073080b01993e9c1a1abe060d6527880f1701bd4aafe1ac038f810d7046", 0x3d, 0x3}, {&(0x7f0000001280)="be02ed363a43b06481eac78b7416058fdb625677f2e58f59c74b728b8cbcef379d248b4faa8ff2dc9436d17d7eda308a32533f8a8bc600733a11be3f1080e7b6e120443ed0f1aeaa704e82ee6710e11b4b7fc1340ac7837307849d75d7fd8dd754a801d93b7c67affbeecf6d1745a8af00b7662b0b5bd00bde74753971e0a486aefeee99e45a51f33d9188f417f8", 0x8e, 0x8}, {&(0x7f0000001680)="d1bd5bf10adc3ef26a3e8f0c169fd88c9bac3b91f78a9d109844acc5ce3b1bf0b878aa95c76431abf3207ab98e80e2baa95a14c270aca8f3a07a570bddd6c54234cc121f48197fdad768b0516a6904df6856dfb60d483f08b5d9052398a11c36b8401f80260af0feff9b632573f5b100f61e1a5dc1011ac5fe7b71a4c440cb02720b0ad6b420e9df52f647572493611a5e9d38855a87ba3355a57019fb95442d0972e236902692bc8e0f2dc71cdb540b81a2a686ea589cbe4dfa4a3f44412b77a32a1c01aee13dc475e07b2dfdf569eae764305b22bd8bf90d8b78644714d04c03dc5c60046dcd74f4916a7745ef4145b80de5d878645f74f44765fa2fe78e7a03f8e76656861d211ec2c6b072bc433e6d2a3e2aac8d7ab96c771d22b20a0285f4a62b6a7ce03cc89e9292af96e26dc7018422fa8315c37f8bb224e135", 0x13d, 0x3ff}, {&(0x7f0000001440)="901c0c5da76f501c45afb6bbacf7caf62fa669fe8fc238ed8adcfcb514bf5dec84f15e7625a86fb7f1edbf93138c4c8d54e4ec909b8a58a8b45cd72b0df897256a2b77953c94654031638f9cd35d051a727ebbbd696c5ff64f80925c95261c70e5bb", 0x62, 0x80000000}, {&(0x7f00000014c0)="9d92feb4f1ee323ffd9f3f052b7522827f7c6773829e738bf0f009e42c585bb8be5bd59c3e8e7595bb8b25ccab88aac4c058116ca86ddce74e4fe8baee313ca41208341f774696cb4c6f6033da81a10c89d5ec8da13b92376e", 0x59, 0x9}], 0x1204000, &(0x7f0000001340)={[{@session={'session', 0x3d, 0x3c}}, {@map_acorn}, {@map_acorn}, {@gid={'gid', 0x3d, 0xffffffffffffffff}}, {@gid={'gid', 0x3d, 0xffffffffffffffff}}], [{@euid_lt={'euid<', r2}}, {@euid_eq={'euid', 0x3d, r0}}]}) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r1, 0x1, 0x80) r4 = memfd_create(&(0x7f0000000340)='\x00', 0x0) pwritev2(r4, &(0x7f0000000080)=[{&(0x7f0000000100)='Z', 0x1}], 0x1, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000380)) finit_module(r4, 0x0, 0x0) open_by_handle_at(r4, &(0x7f0000000200)=@OVL_FILEID_V1={0x1018, 0xf8, {'\x00', {0x0, 0xfb, 0x1015, 0x6, 0x9, "0ed24540a56c07b77505a7ff5a779748", "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"/4096}}}, 0x444502) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) flock(r5, 0x2) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) 08:41:21 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x403, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f00000004c0)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)=""/235, 0xeb}, {&(0x7f0000000200)=""/231, 0xe7}, {&(0x7f0000000300)=""/53, 0x35}, {&(0x7f0000000340)=""/193, 0xc1}, {&(0x7f0000000440)=""/96, 0x60}], 0x6, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/141, 0x8d}, {&(0x7f0000000600)=""/125, 0x7d}, {&(0x7f0000000680)=""/4, 0x4}], 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="58000000010103000000008006000340000000002cf1018014000300000000000000000000000000000000011400040000000000000020000000ffffac14ffde6eac028005000100"/88], 0x58}}, 0x0) read(r3, &(0x7f0000000740), 0x0) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000280), 0x8) io_submit(0x0, 0x1, &(0x7f00000006c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) getdents64(r4, &(0x7f0000000700)=""/7, 0x7) openat(r4, &(0x7f0000000ac0)='./file0\x00', 0x488502, 0x100) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000b00)=ANY=[@ANYBLOB="100200001d0008002abd7000fddbdf251d000000fb3878b4f056b4045ce30224e8463f51a4968efdb166f586dffb251fc28bc35c783a1db90c9d4bfd2e0647169380e0500ed402aa99250a7893e18e9c511736124f9bd65146dbcae5b54b7cdaa3e9b8213908db66596c99f6028050f95f3d6cfec007e49d70635fc06f3a1d71558a36c5aec9152c012989aef9482e0206e91ba8ecbe2168aa518f6495cf03c86f10c9f7b5edfb44ad9ccade0392fb2a016cd9c3a0c9de254cbab9c3b77628beb8d0b4a653f392cef57bdcf6b899aebb7bedb450f36a4828658702da753164a5fb5a55d237fd85c585275b016a344c0eb9745553e1e7da9b383aed1174e575e8592f130e5e4fd6d22353240173859af37e72676c84d3acace23ecc4412743fa9512014007c0000000000000000000000ffffe000000275f018d5ae56a34e2a77f1e35f43fb3088b927c280f5b15f8753a531a0264d82533cd3692206f59a762c5cc9f05651be5762ad0b12ac056cc1e829bc5ef4638611ebd8f9d89c7f65e0f28e7f46b6df9c40bacb8d8cb96cd53e38477db79ffb275009da1e2db877c306f7d58ece32dbbcef1fc00edfb117888aad760475878f2780558504f976a0657ad04ceeebf5c4803ff635bd46c4155d9bc219af314c0eea8ca423901b6e72d271f27fe9e81c1236bad91004cf52e1d8a6a73bc40c6b48d899a5040056001400388008003f00", @ANYRES32=r2, @ANYBLOB='\b\x006\x00', @ANYRES32=r0, @ANYBLOB="1c032c4e7d3a025c8b60d294028a678c4ff6842de8b5674bd4aefc6226f7"], 0x210}, 0x1, 0x0, 0x0, 0x20040040}, 0x40000) r5 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x1e, 0xc0b12afe4b722e85, 0x0, 0x0, {}, [@typed={0x4}, @typed={0x8, 0x8, 0x0, 0x0, @pid}]}, 0x20}}, 0x0) syz_io_uring_setup(0x59af, &(0x7f0000000740)={0x0, 0x555f, 0x8, 0x0, 0x164}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000840), &(0x7f0000000880)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000a80)=@IORING_OP_STATX={0x15, 0x2, 0x0, r4, &(0x7f0000000940), &(0x7f0000000a40)='./file0\x00', 0x80, 0x1000, 0x1, {0x0, r7}}, 0x3) [ 1631.931546] name failslab, interval 1, probability 0, space 0, times 0 08:41:21 executing program 2: socket$netlink(0x10, 0x3, 0x0) 08:41:21 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x58, 0x1, 0x1, 0x3, 0xf0ffff, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0xffffffffffffff90, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) 08:41:21 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) pread64(r0, &(0x7f0000000180)=""/199, 0xc7, 0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4008040) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fcntl$setstatus(r2, 0x4, 0xf0ac3d2370543000) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x5}, 0x1c705, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x4052, r4, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000140)={0x2, 0x3, 0xffff, 0x3}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000001d00020000000000000010000400020008001200", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0xa, 0x4e21, 0x81, @private0, 0xdf}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3abf5375c3866c0afd7148bb0dbf63d6a303e9125d9ad676bffcd27b2c53e52bcf1a1ce477ea55f678c2ed40464e3474c6156a7f6eaca23d80e426209b43d6d6818277a8e2f463ee217205a30440776e59857fc14fc2572251bbb80eaee7edc46e42abe63c1ba32adb2fdb60513e80fde", 0xde}], 0x1, &(0x7f00000005c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x80000001}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x33, 0x0, '\x00', [@pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0xffff}}, @hopopts={{0x50, 0x29, 0x36, {0xff, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0xef}, @calipso={0x7, 0x28, {0x3, 0x8, 0x8, 0x4, [0xfffffffffffffeff, 0x6, 0x8, 0x1]}}, @ra={0x5, 0x2, 0x6}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @rthdr={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x2, 0x1f, 0x0, [@remote]}}}], 0x138}, 0x4000) 08:41:21 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x20042, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x10010, r0, 0x39) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200080, 0x23456}, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f0000000340)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 23) [ 1631.933716] CPU: 1 PID: 10363 Comm: syz-executor.7 Not tainted 5.10.237 #1 [ 1631.934662] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1631.935739] Call Trace: [ 1631.936087] dump_stack+0x107/0x167 [ 1631.936565] should_fail.cold+0x5/0xa [ 1631.937068] ? __alloc_skb+0x6d/0x5b0 [ 1631.937578] should_failslab+0x5/0x20 [ 1631.938096] kmem_cache_alloc_node+0x55/0x330 [ 1631.938700] __alloc_skb+0x6d/0x5b0 [ 1631.939189] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1631.939972] sk_stream_alloc_skb+0x109/0xc30 [ 1631.940628] do_tcp_sendpages+0x9d6/0x1b80 [ 1631.941179] ? lock_release+0x680/0x680 [ 1631.941693] ? lock_downgrade+0x6d0/0x6d0 [ 1631.942248] ? tcp_send_mss+0x2b0/0x2b0 [ 1631.942767] ? mark_held_locks+0x9e/0xe0 [ 1631.943309] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1631.944013] tcp_sendpage+0x80/0xd0 [ 1631.944519] ? tcp_sendpage_locked+0xc0/0xc0 [ 1631.945113] inet_sendpage+0xc9/0x130 [ 1631.945653] kernel_sendpage.part.0+0x146/0x290 [ 1631.946277] sock_sendpage+0xe5/0x140 [ 1631.946777] ? __sock_recv_ts_and_drops+0x430/0x430 [ 1631.947468] pipe_to_sendpage+0x2af/0x380 [ 1631.948051] ? propagate_umount+0x1550/0x1550 [ 1631.948688] ? splice_from_pipe_next.part.0+0x166/0x520 [ 1631.949431] __splice_from_pipe+0x43d/0x890 [ 1631.950000] ? propagate_umount+0x1550/0x1550 [ 1631.950648] generic_splice_sendpage+0xd5/0x140 [ 1631.951336] ? __do_sys_vmsplice+0x8d0/0x8d0 [ 1631.951968] ? security_file_permission+0xb1/0xe0 [ 1631.952623] ? __do_sys_vmsplice+0x8d0/0x8d0 [ 1631.953208] direct_splice_actor+0x10f/0x170 [ 1631.953786] splice_direct_to_actor+0x387/0x980 [ 1631.954429] ? pipe_to_sendpage+0x380/0x380 [ 1631.955027] ? do_splice_to+0x160/0x160 [ 1631.955643] ? security_file_permission+0xb1/0xe0 [ 1631.956378] do_splice_direct+0x1c4/0x290 [ 1631.956956] ? splice_direct_to_actor+0x980/0x980 [ 1631.957661] ? security_file_permission+0xb1/0xe0 [ 1631.958366] do_sendfile+0x553/0x11e0 [ 1631.958910] ? do_pwritev+0x270/0x270 [ 1631.959457] ? wait_for_completion_io+0x270/0x270 [ 1631.960143] ? rcu_read_lock_any_held+0x75/0xa0 [ 1631.960804] ? vfs_write+0x354/0xb10 [ 1631.961375] __x64_sys_sendfile64+0x1d1/0x210 [ 1631.962028] ? __ia32_sys_sendfile+0x220/0x220 [ 1631.962748] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1631.963498] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1631.963991] Module has invalid ELF structures [ 1631.964273] do_syscall_64+0x33/0x40 [ 1631.965466] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1631.966374] RIP: 0033:0x7efca6f2bb19 [ 1631.966919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1631.969636] RSP: 002b:00007efca4480188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1631.970755] RAX: ffffffffffffffda RBX: 00007efca703f020 RCX: 00007efca6f2bb19 [ 1631.971847] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 1631.972861] RBP: 00007efca44801d0 R08: 0000000000000000 R09: 0000000000000000 [ 1631.973978] R10: 00000080464c453f R11: 0000000000000246 R12: 0000000000000001 [ 1631.974992] R13: 00007ffdba8bcc9f R14: 00007efca4480300 R15: 0000000000022000 08:41:21 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) lsetxattr$security_selinux(&(0x7f0000000040)='./file1\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:udev_exec_t:s0\x00', 0x21, 0x0) r1 = getpgrp(0xffffffffffffffff) r2 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x2, 0xcf, 0x0, 0x5, 0x12000, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000080), 0x3}, 0x100, 0x100000001, 0x0, 0x1, 0x5, 0xffffffa6, 0x6, 0x0, 0x2, 0x0, 0xffffffffffffff02}, r1, 0xd2d4, r3, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x58, 0x1, 0x1, 0x3, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000006, 0x100010, r4, 0x329d0000) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) [ 1631.980650] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1631.982537] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1631.989284] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1631.995846] FAULT_INJECTION: forcing a failure. [ 1631.995846] name failslab, interval 1, probability 0, space 0, times 0 [ 1631.997471] CPU: 0 PID: 10368 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 1631.998368] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1631.999459] Call Trace: [ 1631.999934] dump_stack+0x107/0x167 [ 1632.000590] should_fail.cold+0x5/0xa [ 1632.001195] ? security_file_alloc+0x34/0x170 [ 1632.001770] should_failslab+0x5/0x20 [ 1632.002261] kmem_cache_alloc+0x5b/0x310 [ 1632.002847] security_file_alloc+0x34/0x170 [ 1632.003416] __alloc_file+0xb7/0x320 [ 1632.003902] alloc_empty_file+0x6d/0x170 [ 1632.004437] path_openat+0xe6/0x2770 [ 1632.004937] ? __lock_acquire+0x1657/0x5b00 [ 1632.005516] ? path_lookupat+0x860/0x860 [ 1632.006064] ? perf_trace_lock+0xac/0x490 [ 1632.006606] ? SOFTIRQ_verbose+0x10/0x10 [ 1632.007138] ? __lockdep_reset_lock+0x180/0x180 [ 1632.007779] do_filp_open+0x190/0x3e0 [ 1632.008300] ? may_open_dev+0xf0/0xf0 [ 1632.008832] ? alloc_fd+0x2e7/0x670 [ 1632.009312] ? lock_downgrade+0x6d0/0x6d0 [ 1632.009883] ? do_raw_spin_lock+0x121/0x260 [ 1632.010468] ? rwlock_bug.part.0+0x90/0x90 [ 1632.011034] ? lock_chain_count+0x20/0x20 [ 1632.011719] ? stack_trace_save+0x8c/0xc0 [ 1632.012280] ? _raw_spin_unlock+0x1a/0x30 [ 1632.012827] ? alloc_fd+0x2e7/0x670 [ 1632.013340] io_openat2+0x24d/0xb80 [ 1632.013838] ? io_send+0x780/0x780 [ 1632.014340] ? perf_trace_lock+0xac/0x490 [ 1632.014914] ? SOFTIRQ_verbose+0x10/0x10 [ 1632.015536] io_issue_sqe+0x2cd/0x77b0 [ 1632.016110] ? lock_acquire+0x197/0x470 [ 1632.016696] ? find_held_lock+0x2c/0x110 [ 1632.017286] ? __virt_addr_valid+0x346/0x5d0 [ 1632.017877] ? io_connect+0x610/0x610 [ 1632.018419] ? __might_fault+0xd3/0x180 [ 1632.019026] ? lock_downgrade+0x6d0/0x6d0 [ 1632.019604] ? __virt_addr_valid+0x170/0x5d0 [ 1632.020221] ? __check_object_size+0x319/0x440 [ 1632.020877] __io_queue_sqe+0x90/0x9d0 [ 1632.021468] ? io_issue_sqe+0x77b0/0x77b0 [ 1632.022023] ? getname+0x96/0xd0 [ 1632.022531] io_submit_sqes+0x44aa/0x8610 [ 1632.023157] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1632.023879] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1632.024548] ? find_held_lock+0x2c/0x110 [ 1632.025096] ? io_submit_sqes+0x8610/0x8610 [ 1632.025699] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1632.026346] ? wait_for_completion_io+0x270/0x270 [ 1632.027019] ? rcu_read_lock_any_held+0x75/0xa0 [ 1632.027713] ? vfs_write+0x354/0xb10 [ 1632.028270] ? fput_many+0x2f/0x1a0 [ 1632.028744] ? ksys_write+0x1a9/0x260 [ 1632.029245] ? __ia32_sys_read+0xb0/0xb0 [ 1632.029813] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1632.030539] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1632.031209] do_syscall_64+0x33/0x40 [ 1632.031809] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1632.032604] RIP: 0033:0x7faee6584b19 [ 1632.033153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1632.035683] RSP: 002b:00007faee3afa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1632.036941] RAX: ffffffffffffffda RBX: 00007faee6697f60 RCX: 00007faee6584b19 [ 1632.037963] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1632.038945] RBP: 00007faee3afa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1632.039970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1632.041014] R13: 00007fff102f569f R14: 00007faee3afa300 R15: 0000000000022000 [ 1632.042133] hpet: Lost 2 RTC interrupts [ 1632.048993] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 08:41:22 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x58, 0x1, 0x1, 0x3, 0x1000000, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0xffffffffffffff90, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) [ 1632.205001] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1632.206613] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 08:41:22 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2300, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x1f, 0x0, 0x0, 0x8, 0x0, 0x6, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000}, 0x0, 0x7f, 0x0, 0x6, 0xfffffffffffffd1b, 0x0, 0x3ff, 0x0, 0x7, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x30040) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, 0x0) 08:41:22 executing program 7: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x80464c453f) (fail_nth: 6) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x10, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3ab", 0x6f}], 0x1, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @tclass={{0x14}}, @hoplimit={{0x14}}], 0x58}, 0x4000) 08:41:22 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) pread64(r0, &(0x7f0000000180)=""/199, 0xc7, 0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4008040) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fcntl$setstatus(r2, 0x4, 0xf0ac3d2370543000) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x5}, 0x1c705, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x4052, r4, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000140)={0x2, 0x3, 0xffff, 0x3}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000001d00020000000000000010000400020008001200", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0xa, 0x4e21, 0x81, @private0, 0xdf}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3abf5375c3866c0afd7148bb0dbf63d6a303e9125d9ad676bffcd27b2c53e52bcf1a1ce477ea55f678c2ed40464e3474c6156a7f6eaca23d80e426209b43d6d6818277a8e2f463ee217205a30440776e59857fc14fc2572251bbb80eaee7edc46e42abe63c1ba32adb2fdb60513e80fde", 0xde}], 0x1, &(0x7f00000005c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x80000001}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x33, 0x0, '\x00', [@pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0xffff}}, @hopopts={{0x50, 0x29, 0x36, {0xff, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0xef}, @calipso={0x7, 0x28, {0x3, 0x8, 0x8, 0x4, [0xfffffffffffffeff, 0x6, 0x8, 0x1]}}, @ra={0x5, 0x2, 0x6}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @rthdr={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x2, 0x1f, 0x0, [@remote]}}}], 0x138}, 0x4000) 08:41:22 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000002c0), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) getpgrp(0x0) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="3c00000001000000030015c1e10000030000000220000001dee8fc131fc92b570000000100008068fb93f20624d998bb2382fbef2e605d20efd13ad8020454fe726d5ec494d8000000000000b7382cb035aee7d07675"]}) sendmsg$nl_generic(r0, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="d400000014000268e872002a36e58c2516000000309195bcedd4a355ffd0b57d36c80aa3cd5c00a209ab410588e2acf39f612a058aca019d424c1cfefa9bd84118e7b9a3dc7b648488e3b314280151f16e53c3b34d356001432e0e37dbfac2e264d49dde22ffb05d71782e4588a22964e120c9b3e8ac10a180903c642a26553943488705f8f9389f0dc82f10989f62b3874701ee49da692b47f3a2374ddcf5407ac1d8d6ece93e8156a83bca75748906b35121f4bfbcd532464798ecfcbf0151eccc1703000000e09aefabad56510f51901f721fb776488673f91400"/230], 0xd4}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/bus/input/handlers\x00', 0x0, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) r2 = signalfd4(r1, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x9, 0x81, 0x0, 0x1ff}]}) prlimit64(0x0, 0x6, &(0x7f0000000440)={0x4, 0x16ba}, &(0x7f0000000600)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/consoles\x00', 0x0, 0x0) unshare(0x48020200) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x58, 0x1, 0x1, 0x3, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) dup(r3) [ 1632.262061] FAULT_INJECTION: forcing a failure. [ 1632.262061] name failslab, interval 1, probability 0, space 0, times 0 [ 1632.263709] CPU: 1 PID: 10386 Comm: syz-executor.7 Not tainted 5.10.237 #1 [ 1632.264605] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1632.265719] Call Trace: [ 1632.266107] dump_stack+0x107/0x167 [ 1632.266613] should_fail.cold+0x5/0xa [ 1632.267146] ? create_object.isra.0+0x3a/0xa20 [ 1632.267813] should_failslab+0x5/0x20 [ 1632.268480] kmem_cache_alloc+0x5b/0x310 [ 1632.269034] create_object.isra.0+0x3a/0xa20 [ 1632.269627] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1632.270326] kmem_cache_alloc_node+0x169/0x330 [ 1632.271043] __alloc_skb+0x6d/0x5b0 [ 1632.271598] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1632.272355] sk_stream_alloc_skb+0x109/0xc30 [ 1632.272994] do_tcp_sendpages+0x9d6/0x1b80 [ 1632.273617] ? lock_release+0x680/0x680 [ 1632.274192] ? lock_downgrade+0x6d0/0x6d0 [ 1632.274822] ? tcp_send_mss+0x2b0/0x2b0 [ 1632.275404] ? mark_held_locks+0x9e/0xe0 [ 1632.275986] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1632.276837] tcp_sendpage+0x80/0xd0 [ 1632.277369] ? tcp_sendpage_locked+0xc0/0xc0 [ 1632.277994] inet_sendpage+0xc9/0x130 [ 1632.278582] kernel_sendpage.part.0+0x146/0x290 [ 1632.279257] sock_sendpage+0xe5/0x140 [ 1632.279799] ? __sock_recv_ts_and_drops+0x430/0x430 [ 1632.280525] pipe_to_sendpage+0x2af/0x380 [ 1632.281151] ? propagate_umount+0x1550/0x1550 [ 1632.281884] ? splice_from_pipe_next.part.0+0x166/0x520 [ 1632.282641] __splice_from_pipe+0x43d/0x890 [ 1632.283246] ? propagate_umount+0x1550/0x1550 [ 1632.284069] generic_splice_sendpage+0xd5/0x140 [ 1632.284720] ? __do_sys_vmsplice+0x8d0/0x8d0 [ 1632.285431] ? security_file_permission+0xb1/0xe0 [ 1632.286078] ? __do_sys_vmsplice+0x8d0/0x8d0 [ 1632.286705] direct_splice_actor+0x10f/0x170 [ 1632.287384] splice_direct_to_actor+0x387/0x980 [ 1632.288053] ? pipe_to_sendpage+0x380/0x380 [ 1632.288677] ? do_splice_to+0x160/0x160 [ 1632.289239] ? security_file_permission+0xb1/0xe0 [ 1632.289925] do_splice_direct+0x1c4/0x290 [ 1632.290514] ? splice_direct_to_actor+0x980/0x980 [ 1632.291198] ? security_file_permission+0xb1/0xe0 [ 1632.291904] do_sendfile+0x553/0x11e0 [ 1632.292456] ? do_pwritev+0x270/0x270 [ 1632.293009] __x64_sys_sendfile64+0x1d1/0x210 [ 1632.293656] ? __ia32_sys_sendfile+0x220/0x220 [ 1632.294296] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1632.295053] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1632.295802] do_syscall_64+0x33/0x40 [ 1632.296329] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1632.297051] RIP: 0033:0x7efca6f2bb19 [ 1632.297576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1632.300292] RSP: 002b:00007efca44a1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1632.301382] RAX: ffffffffffffffda RBX: 00007efca703ef60 RCX: 00007efca6f2bb19 [ 1632.302394] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 1632.303454] RBP: 00007efca44a11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1632.304426] R10: 00000080464c453f R11: 0000000000000246 R12: 0000000000000001 08:41:22 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000380)=ANY=[@ANYBLOB="e0006c9dac14e802000000000500000000007ef0435002ad94460001c4c310e000"], 0x24) setsockopt$inet_group_source_req(r0, 0x0, 0x2a, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x56020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x181080, 0x2) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000240), 0xfffffffffffff0b1) r2 = syz_io_uring_setup(0x0, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, r5, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0, 0x20000040, 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_setup(0x0, &(0x7f00000003c0)={0x0, 0x8bbb, 0x2, 0x3, 0x325}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000280)) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r6, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) connect$802154_dgram(r6, &(0x7f0000000080)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x2f) sendmmsg$sock(r6, &(0x7f00000021c0)=[{{0x0, 0x2303, 0x0}}], 0x324, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000440)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x1, 0x0, r1, &(0x7f00000002c0)={0x4}}, 0x80000001) dup3(0xffffffffffffffff, r5, 0x0) io_uring_enter(r2, 0x4f12, 0x3, 0x0, 0x0, 0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x50, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r3, r7, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000140)={0x0, 0x3938700}, 0x1, 0x1, 0x1}, 0x963) [ 1632.305390] R13: 00007ffdba8bcc9f R14: 00007efca44a1300 R15: 0000000000022000 08:41:37 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x58, 0x1, 0x1, 0x3, 0x2000000, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0xffffffffffffff90, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) 08:41:37 executing program 3: openat(0xffffffffffffff9c, 0x0, 0x882c2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0xf8, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000040), 0x1}, 0x8, 0x5, 0x2, 0x5, 0x8, 0x2, 0x401, 0x0, 0x5c, 0x0, 0x9}, 0x0, 0xa, r0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f00000003c0)=ANY=[@ANYBLOB="ef685a6aeab45b18f7f90756dd398874d2e1b469c4937af89cf57aa8488eb84dfe9e5a8bb30878afc2c433da"], 0x8) sendmmsg$inet6(r2, &(0x7f0000000080)=[{{0x0, 0x90, &(0x7f00000004c0)=[{&(0x7f00000001c0)="4bc702854e3954b59347985ccc868289d3fe483d2c0900a2a1d12e33a66529e1f276fef452632dfa3c004ce3be84a5f66c29cd4ec39ae5206562fbc9ea3c0dbbebc22e628e147b0e9631f19b0ce0a48e0e675b2da3442226b898f1ddf8eabf133ab4a9cb0999c2ee1d3bd36d089b0d8e97ea00d4c5f6ad14dce058d595aacba2d587ff5eacd81b71a73f53ed276d1f3b3384bb2bfba4e0f37302e690df9e7024378ac754ac0576f996f3ee53d1034c7720767ddf2625817532f7ae89103367b73a36152b84c38bc227ba9e9ff48bcfe027585cf14bff37a888", 0xff41}], 0x1}}], 0x1, 0x0) capset(&(0x7f0000000180)={0x20080522}, &(0x7f00000002c0)={0x40, 0x2, 0xfffffaf2, 0x6, 0xffffffff, 0x40}) perf_event_open(&(0x7f0000000640)={0x3, 0x80, 0x3, 0xfa, 0xc0, 0x81, 0x0, 0x5, 0x80000, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x1, @perf_config_ext={0x10001, 0x100000000}, 0x10, 0x2, 0x6, 0x4, 0x6, 0x1f, 0x9, 0x0, 0x7ff, 0x0, 0xc2}, 0xffffffffffffffff, 0x10, r1, 0x0) clone3(&(0x7f00000005c0)={0x1100180, &(0x7f0000000400), &(0x7f0000000440)=0x0, &(0x7f0000000480), {0x34}, &(0x7f00000004c0)=""/36, 0x24, &(0x7f0000000140)=""/35, &(0x7f0000000540)=[0x0, 0x0], 0x2}, 0x58) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) capset(&(0x7f0000000300)={0x20071026, r3}, &(0x7f0000000340)={0x17d, 0x8, 0x8, 0x6, 0x2, 0x7ff}) [ 1647.078404] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1647.080476] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 08:41:37 executing program 4: io_submit(0x0, 0x1, &(0x7f00000006c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x615a4237f8220b7e, &(0x7f0000001d40)={@dev, 0x0}, &(0x7f0000005340)=0x14) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000064c0)=[{{&(0x7f0000000480)={0xa, 0x4e21, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0xcd5}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="ead36ddafe0ed5b068016d0ff94cf01173f4efd324b8d80380ce7ad86c5ce33d754937811c151bc57f8a26fe3dc06bd2a6b9ab709c24a99760ee2eedb7c87430b187911c7d3ca891666dcb85bbee7c9f02102fbf6a49424f107b", 0x5a}], 0x1, &(0x7f0000000640)=[@hopopts={{0x48, 0x29, 0x36, {0x2c, 0x6, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0xff, 0x6, "ea4ade5257b4"}, @ra={0x5, 0x2, 0x9}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @jumbo={0xc2, 0x4, 0x3a}, @ra]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xef7}}], 0x78}}, {{&(0x7f0000000540)={0xa, 0x4e22, 0x8, @rand_addr=' \x01\x00', 0x80000000}, 0x1c, &(0x7f0000000840)=[{&(0x7f00000007c0)="0bf43f04845c745686e8e350b55f2dc35634a65ca689069f2a96f6fa5a5b57efbdef2f68bef7e9ba59996b5b21030ac6eae42a2121ddd85489723ab8d09d647ffb14", 0x42}, {&(0x7f0000002080)="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", 0x1000}], 0x2, &(0x7f0000000880)=[@rthdr_2292={{0x68, 0x29, 0x39, {0x5c, 0xa, 0x0, 0x1, 0x0, [@local, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3b, 0x4, 0x1, 0x20, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}]}}}], 0xa0}}, {{&(0x7f0000000940)={0xa, 0x4e21, 0x7, @remote, 0xfffffff7}, 0x1c, &(0x7f0000000c40)=[{&(0x7f0000000980)="9573452329984558ebe30c6e", 0xc}, {&(0x7f00000009c0)="e00cce2c698191c87fdf0c6a70fc0dc4b7b587aa72c7d7edc147e8395b81a4cf47cd22029ebd97916d268664a56a2fe7d01085058bc4717fbd848206cf6cff0895a762adfd302df5872055780369f3ff36dc68437f707aa34f2181d6f39e9b45bcf20d0f50995b1b12ab3cebd7b26cf8b941e103db061ef613ec4717284790be635dae6af18a075d1f4c1a", 0x8b}, {&(0x7f0000000a80)="e05d910dcc4b0921b2c5cf3e71b328e219a2467526158b6b7a2829792d07cd4876dd9a7c5956829c5a963d1114a0fe1e09821cb6fd461f0073aaf5a180e0a68e1c3953b53ab518e87b9ad37ea79d82713d2ad6ae334ffacb2c5673f6eed5fbaca846ab307e2fc23be6de8108663aad85c609ddd180a6ee8f65a0e94df6", 0x7d}, {&(0x7f0000000b00)="1a61e04e0473f6d74b434a64c457b4e429423acf79b37c56b2dd006bdeccbf3fe9d34567774b880136185e318a74557f9945f71e05425be417000fe3a867695c7a5f17492483cbd62d7867f20c473e44e625449e0bf67baafb5705a7935dd97979e0e1b8917ec76e73cafdf0ce35765cac54ba0d73d1d14352728816fcc9c1cc70df65b7b3e703d5ca3b2ba89e36e9643d597573dce8c77fc37746d3466a6b361515c46798fefacd9f91213f1ff6395d6d303ccfef57b4ffb5858ade6781790bb3eccb048550ecf3598d0a93d775", 0xce}, {&(0x7f0000000c00)="0a2942ca2a855c9493adc1ebdf72150e562c2b4ff0486d1bc97bd83753f69eb99c8cf60222cb68b567cb9013e03a0dba05c5a16dfe1222c90278ee", 0x3b}], 0x5, &(0x7f0000000cc0)=[@dstopts={{0x28, 0x29, 0x37, {0x3a, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0xdb}, @ra={0x5, 0x2, 0xffff}, @pad1]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x16, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0xf9}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x1}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7}}], 0x90}}, {{&(0x7f0000000d80)={0xa, 0x4e21, 0x7f, @remote, 0xffffff01}, 0x1c, &(0x7f0000000e40)=[{&(0x7f0000000dc0)="444c099edbcb497ebe5397bd9eede1efdf7d49c0ae03bb2f3c5effe1f0845573a0a6437c644012ff9542c30ff70b1ccc35c0d40687c765b01831cb525c8020a2a0dc637336ddb75c5942231298c7aa3909067cd107d277e89756e9b23d5d2bf6a8a65526711ed2cb5ed3f5c872d2f690c90ac91749796f76daf35179da", 0x7d}], 0x1, &(0x7f0000000e80)=[@hopopts={{0x68, 0x29, 0x36, {0x3a, 0x9, '\x00', [@jumbo={0xc2, 0x4, 0x2}, @padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x28, {0x0, 0x8, 0x4, 0xffff, [0x3, 0x93, 0x6, 0x1ff]}}, @ra={0x5, 0x2, 0x3}, @enc_lim={0x4, 0x1, 0x7f}, @generic={0x6, 0xa, "60bb40a6fbabf20984c0"}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @tclass={{0x14, 0x29, 0x43, 0xeb4}}, @hopopts_2292={{0x68, 0x29, 0x36, {0x2f, 0xa, '\x00', [@padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x48, {0x2, 0x10, 0x2, 0x0, [0x4, 0x8, 0x4, 0x1f, 0x4, 0x10001, 0x9d87, 0x800]}}, @pad1]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x3}}], 0x100}}, {{&(0x7f0000000f80)={0xa, 0x4e24, 0x0, @private0, 0x8}, 0x1c, &(0x7f0000001200)=[{&(0x7f0000000fc0)="738628b01feb50ac4b318745aa334468c85ee68602a81241d43206549928ba2c2583b382e75d8a98513f570b20e6a20b93a25254fa1033e5efa30fb0457ede6e9cb75c3aea2ecffc61734ca52f7d21785c851e302fec41f4de56530faf67361889e04ad7a07dbc63513ba8fb54b784639f1962099db923083e028474aa8ad1e061aa1cb22f5bdb4213d3805812d7517b6dc41d396bf84d2ae5c6038f3e9fca", 0x9f}, {&(0x7f0000001080)="3da1bcc2c69c7d01c62158e668", 0xd}, {&(0x7f00000010c0)="184151b71295d081d4e2cfd82f0f700d573aa4a6efe459237480d30c011a51d9009c88ec52378288c49b56bae5", 0x2d}, {&(0x7f0000001100)="7d260ce7accc8fe1daef2b26f9a756c6859f2b8016d017cf724d66a1f6b076d18364dfc7a6fe92ee610e1c2ec5e2b636900f0c8bd1c53b4f8f25f303a7a1e60dabf024de745cbf92869d1237169b1b0501fc42966045c78d9e56ed116bf77f334896d05f5146e585e6d2c03c8afb3bd278314171f634ad79a418f78bfd411afc6182a365caf85037987721482fe05292e7c6a9a84f344ce99291ad9115af5948bfb7300fd7f6d39cd57a3d1c5cc8702bb4e5c979d44bb9eec7d1d1edfdec355f99940683eedcff31fe24f311be3f846199f6f788150777d9c45c669b8f48edd29a95956a9d5f1a8fa6d3d448b85f216e51e71161", 0xf4}], 0x4, &(0x7f0000001240)=[@dstopts_2292={{0x68, 0x29, 0x4, {0x0, 0x9, '\x00', [@calipso={0x7, 0x28, {0x3, 0x8, 0x2, 0xc994, [0x1, 0x9, 0x0, 0x0]}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @remote}, @jumbo={0xc2, 0x4, 0xfffff001}, @enc_lim={0x4, 0x1, 0xff}, @enc_lim={0x4, 0x1, 0x2}]}}}, @rthdrdstopts={{0x30, 0x29, 0x37, {0x5c, 0x3, '\x00', [@hao={0xc9, 0x10, @mcast1}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}, @dstopts={{0x28, 0x29, 0x37, {0x88, 0x1, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x5}]}}}], 0xc0}}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001300)}, {&(0x7f0000001340)="3c4ace528b69bcaf88f8ff16b5008c64a2726d35d16bcad4b4c93129a4b3dcfd816382981d911e416634bf4f4b3bf4c6a00182642bb6a79e2b578c31a0dc7455640514cf233340a073a3f4b278509ca952ac9dbac864f4c79ae34d1bf91b8bf880cd659e14997636be0593f64ef3655971538fc8814778cd325340ae8c2a2a4720ce383973b4ec66431fd41914eafe2f614fdb374fb973db629f04515da6291a0a3d218142eca37dabf1b1bb1990f271943b88a6c8f5148e59e10d72566f4b1b8d1c7418d687f5f266ecb5c72de7c440", 0xd0}, {&(0x7f0000003080)="cd67cc54ff4e102706591b72a1d65231150ba23b7cdbc3cb930223f462334e389de828ed7db2f53cf5ebf4bd5f68306e8721e15ec3d5fd842fdd2ee20a97c1e9f9d2a139d47efb4566b7abb0033625d74dfc77695dc215d84e586996923411738f23ee565991f65ab252f3dcdad44bf1a7439f126731b1f59f68b777905a650256658478082e11fae2c4e3481cdd9a436e1a19aada4c80b50e588417c6caf8ffa6100acd23b0631e8b814c348055d3d6332e4b40c905caca62f6bc0a7cda0894e1e2c2e83850d5b182aa2a9a587821070c4626af4778381a416eb96e9a45bf23ebfa17375c6b72c283a9177c27d12ed08f2ab6d113bf5805008315aecf7d26126ba0ec8e6ccb2b481b63bd2fb112f8cfb438042c6e8ff5e3fc4f127b9310273942767579acd584050a0a06f412b26e1de08791bbcbfbe6ace0d067749c31c3432fe0954684584444030be65f03e81371a4b8016e7518b67b32c8e874abfba68a8aa41f2fb9a8820afa2869c3e42e480d49451d1887fa302769b872668f234f852639779335fb35682ada1c87b4db28b88dbf213301002e27afe25048eb8f4ad014d9e4ed5ea37eaa5ac13482982a4d901c382e4c34576fb269c67613d582d83701e9d5e96b2092fc6b3e6b116f82eed7b81422635bdc448729d347d3ec0515dccf703bee492ac553135dfab2ef67ab5e3884714ef662ff6911760e70ee7b61f651d7a28404660006922aad5dcf9db660861f8d53d18ca0445d0662ec9101ee301e6dace08f0e934740a2782d86d131a87c2f1af2259d87401f9bfc78894d3b14e5d69b1f14ac0858034f1c8301b9a5db1ab6d687ad700d0c71ebd027bd3d07e1d9710c01bd8640bcd54d3b894afd2cbb952de09c0a7d73160c1d1dccf73267e6f572329bcb7d3626125d75d1cfbf91d7a607983b68327f644659bc261f76c4228b2ff9f5b2fc4694de5a93547e116698cc8c4341b0737ccd03c458c6b6a99dddb40b8e88dd2ab221055da350e721737f7ba1fc3c1b1d15316522b6fb6bd584443c3c8d2a916dd7264b0d1b63b0874883f6e91a163acae0d3ab9774c07de767526e435295fe59818aea5eab8fc6c15194249c186b8acf3163fd4e352a37d73297424807c6a3a63e22ee87a0ba64b208fa77451df358c828d5b5fa11127345f51ca39467775e97600ae93617234ab71dcb3f9ca8afdf6cb209dc18feeb0027cc117c07444353d8b929702e1a8239b50dbb19dd9e7b90b2693c0be7c9cf9a72376f320ba78d728e827e2113122f7f654f476d872efd96b12917f77ad212029303c1b83b4e1c93ad7683702db8bf0e32e769da8c9d6f0e6878785dc7cf3e4f259bf13cecbbfcea337e76f56d883cf4ffb6e722d22416820e511bda77c4337337a69ab9f235313750863f0b81aa6ad6948d12045d6f8f2bbf9486099c5506f2fb575d5ddbd679bab9753a95e01a0cebcb78848a9d8f86ed6d0ceb51617180119ef9537efa86848c1ccb9da2685fa5ac25afebac64ac63a2e82e68f5365b8dc07a8ed86bb334661e1d1c3b32afac007a1ea32da015e25dda5e007180f8a7059fabae6fa3e120ac16e07345348a75ce89b6885230095a15cff31d162fd21bac8428e62c28c5be2d8924faa9df84144fa1cb1bb39f4cfdcc2bf9cea2191e8c9b7dba7a351e08a642aa9e0a2c6713fdd3cca86f1e778ec3fb8da1bae86e415475fd1613c1dae78e5af54e244dc698501a3c7ce1311e1d89c5795d4a8b9413397f6f5ce5ac59556def93b9356478504893f2050e4ca1512e9d64b7b5cc98c8a8c9e09bb61841fe53218b715473e19cf1d417599324eaa01d87ed368679ffeda6d0b688a82d8f19256db19f8f1148f5b159a2851e74f47a36a2a1a14e31bf5964cb7a306aeb283a8f3dd0790f7975119a0c1409fd85c186c96f31fef0c8d3a7702ae8e1711270f2aae0b75be9ebd02c876dc7f03fd30bbb4dab7b4743709369b4ada6bc4eca9b38d0fdbc0e160b9ed08d805e8d235e7245b916f6b1f9afa3f096879496e8bf4706c35c648b03b8d83142d6539b85b9d1c6b886af5ca7e64565fffdfb98b9eb25bcd116d446ca2a1689c48e2b0ad12d9f79631e0d5e8a30358f68ea8c73ec133cc5aafb54fcdc6b9fa642b9e5bfa45233875203a1bdd02cde4b634b26f5c6c688ef6ec14ada3a26f95188b7fbc80491a5df6d618a04eab13ab0db41f9b34ad010a59c07ba6cac7be6872a9bcf6d6fcbffb430a87b03ba69890c282590481fd7672aac6ef327e15ab369c33a5f07436f4998c9bafd65001816ca188d076c665b6098ff8328a73986a8edb35bf56165fbaf0079974ec4463a4c42ad990cc043becd923fd9c847e4e6d9f30e60d355a7fa2f479b72e5ea760c42f95d4dfaed658e11a6acd73412ed2b5f50f110a637c489d42a649dbb64fd84b08037e181020a289bf273ce6623a1db70ba3488b483ebeaf57fd2a10af15dfafd323548b61136faf35da6ec42070869b449de09b6a7268b5f3a92d5f4239ef6892b42c0735ff4c25bdacafda2abe93840dc1e2ff495143e544cebfb6204c2a8684dc685cd0f89df78333a63afae52b04a8bca17bedae468ed996b166504f8408e200699f7b519c9206ca3c462b16733bad1a01a2a9e94c02995c71025a8f47a225b32a4d61620846d9cb9552c51d8e2b5079e2fe69b9050fc7e1fedb9ae2038734ebe6ae49e8ef515d56d2a36ddd68e30fe9b4f1e2b3438390434e07b1678a43f3dbe89913d41cf34be856cecf463eb1ddc067257f8732714db15ded525dac1d2cf7bd9f21749357b7e0a1cf9a450cdb038eefed1c1d616e4e89dee16aa9335452468da45024d8622c57c8eaf21fdfbca8ab294d5da6fa840ac749d9e3cb7ac5a4bd1739f9e666e922397f661f7db7727cc02955bf919c58813607a5a4a912e9e3fda1ac8ad8139fa2663bf412d2fd9312cdbf1909f3d2858db5248c23adf873fb276578aaaed202e9895c012417097e6d1d9eb589b084d50726f448133de467e1d1cc610f1651cb0975612eb60cfedcbab132e6cdba7c564dbfe445916031292904998e3316ba1f69985d959662a07bf9eea8ed753698da9457ee92ef0475f9b58232c973d029c62e57227085c702b0e03771e91d4ad8a67fe7983d1ed0d7ab636690ddebd53d3bf145e3d860fab82af862b713b5712f935f51658e13fdf9d105ed1fbbe1580a4a823c26536fb916d2954853b2fedfd7dcebe386278262d3ff528d8ac813b68814fed84a9af8c6816fd4b5c77aa64273b98f7c1525a5f7c8cf75fad83986522b4b8fce2c79dfc2602e9d2c88e9eb39877b8ccc76db09e272c0b66759203c6993086ffc8954fcba494d11ebb2cffb1364d5bc06e89e3b138fac329914d4b4d5e63281b7012ef6b6b1e239d4c105c242fba689b93b917ae08373b9130e13ef6ba20f99e3faef3acc64d9e5da80772c79a593b62afeade52a6b928c638e143f11c89fa4d09e09a952401313b724ecb2cfe2c312af698d0fcd6938740a74e34b1591a272153a6d4aacfc282556550a96e0e4f52de0118eba6471fd16df00f0fca4d27cea3204c36b7ce0f9babadef26f34eb9a8dd043d7caf9fd0aae8dd167970bc323b532a2556dc114b1cfb9a2fa5f4627d5c64cc5ace894d3ae678254e8ef49aa3baa313baf7ab2d2dc4e65d7f456e7c069c55ebf87131316b2651ac0e91ec3abb3c355a778ead9af2b7bdfb4b6c736fdaddfb9c67d10777ffe0a2915bcb6620c971f2b6cf81bf2860c6c5beed466412e7778996ca5c8199095efdb714bede5e29e0cc5ad5e646883a641783c1807b1f13fc4be701e9d233060014b533b160e8c8f1d022c22c4ee98d8a01b2917d4b3f6dfc6a928b1378dca21e4e02833f3049afc4883ce2f89feaa23f9a6f1429dc77bdf62665adbcd8bd6253cbed4981151005e9d7b85b7e15ae06bebbfbc7627958f66d4c8c4e3d7d176a67bfd7452d298fb19f1b040c99eddbadd422066eeb26fb2430b5d6fc126357c881860979edf9c82291bba152697a0bfcc111e961a6a1eecf99d0fcf4fad6483d8b95e11c95c512252a5fbb21f3029e5ac0ac8ddcfb8f6908797597d39dbcec8f1b8f6a7c86d5f4bec762a44bf3391e744a3c193cc0f3a1b9c03344112ffd4b20bf744957536918cbe3595133c6828383db278c56c8575516f5a8390a730e7293a1d9a986881aaca612c5e036cc8d670424bb40b4e5e8ae4489605906736548adb61c4ffddedbaf67896d7c82f67e97ff3f6a5f5fa86eeab24a5742539001d72533707cad0be3fc705c35d4585983255bc0fcd260111b6e4b6798c296ad25cfd6ccf69d3fb87f035244772d27e4617e48a5da0da2712b55c1dc95b4d509708162ee7b703b2044412246845baba6e126d91de7d6b2e7fc491a0193d38df8b09add6ab220f92bf3c8bc73b91d32acc8e6e3e83985070fe47ebb022e9c37d193d349439ec2064cb7c1a55ba49aeeb0af07098ab5bf1071e952512393bc73d5417404ed708aa7305a965b5cd4ed3bbc5c2a10061df38ec5cf6fb520ce51c365f8eeaad488351d420212924c5020c8b80e0129519c2516faf7f48aa1af2cb13e448c47a6b6170c1a05b12036402fdac59bc50e72750a9562f1c227f11f37d8039088f6fdf77f1d3d0698cb7ea52c299a193c3b3db731fc292bf7f8bb4337bd2b8c89266f752f84c1f9e4601b8a5aefe497b359d87f871a8af7ed00bdd60240a0c0049d96a85e4cd3bada194a1977ad75f412c0fd5e90991797023748ac31188363437aa40b3058c8f80132f2b9ee52a3a7b758986579837383ea360900085ab0c3324da2c07eb2319f961dd6073b3624ac40a76b490cad2c48dcf25a32a0ad520778898f942ead093a0ce40cc5e525eee13d3516d7d131491e2a302b58c8e712059ab6a6e7398954d8f49a15dcef45c50453ae56616530acab0a8b07e424be84a49d1cb9bc19abebefb6bcec46fb1fea5cb9d783c0f2d7ffbcbf72537b515fd811bc8482bbcc5dfe7bbca5804253fe5b8713641d894d4775921d8e74b7b0a0370cacdd15e63eb916d5d109bd9b7a044b9391aee1b02a156c703d6ec07491cd542c446976277c65f63a5f776d3958f9bf37c04308f50807bbbd6c25718c6c08ae4c1a4630790c9b7d14075e6d1d058a9ba9be0476776c4174364369cab4509c78727d844e35a5320377d62ead3728ecbc2e0bd828b063efde866072b38adc45a7a50e2f23db852df26d6b2376b6de468e79e09670654716a952550d77e052ded688bea8e736d1fd2412db9de9488b75b0f8e883ef2bef486dd393f7c8b213c1d8994d964c1968b2e86e506630a2d2d46e8cad28d279cc8b953e40d950a8b9d0615f61a7480e68233196171b4641b60ebc0321c2a1764a922d6e31dd74d205b9f64931e8ed53a68f4a87246ade947f68ae3936fe793afd38b00b5f73b9ea4db949d7da3864f8bc451b1e9074aef04f5669193bb7de80bddf56b9615097a5125c8a482ebd3b8713450e5389eacb9db50621ea8857fd617635c7740dc2a2a5da311725cf2e79a6fb2d3b58975ef325a334332bcc5503d5502f2af1779305b078c8adc0cca18187fc36aab9a0aa8b2b385139ba650c8eb3749dc4f4a5b4cfa7ce61aad2f385a1a1bd0f0eaa8547c76633f6858de1570e61ba45800f48e59ef2a33b38e2468b436dde20e804f169fe04e8386d1941b9e059c794fac560ab99d04f25dce6153cbc0126d6c6a1224c9e36cea7b19f94777e193fb1415bc643740e29c91356b9c7aadbff9f6a220846", 0x1000}, {&(0x7f0000001440)="cbbe4af7884a5283533b55132c4e0352040d4c56f0bb93", 0x17}, {&(0x7f0000001480)="66c84cb9b40a381502af5ef857d0bc01da90e4ef004f2768259ebd73abdebc5a135fe193eaa36d", 0x27}, {&(0x7f00000014c0)="4b4788cf88d82be1fda27b3eed13cec89d3e3c1a8d0b987dca5e1caa25c4a8d4b1dea4bb689d79c757d384f2f8617795437d803b47698968e5cc5eaa37006e03d497898eb7f417df1237f834e69e530096869a4ff1b1cb5313d1d5326a0b68d669fc0de33145521350fc1702ab6803122f8db394bdbc563df61cc6de5f6a44bb6f3ba65dbda74876a4f4db4a90de7c4964946586ba0265e8d6617717de9ebd7c85a20418d0291bae9a2df015", 0xac}, {&(0x7f0000001580)="477cae501763c31df9b08c0084d9c2fcd9a8f39a246d72fd19d1f8cc25f0640ce044a2b2046cc18bbc43ce21d8c090ba74296a871e7b27674019f473856b9776a9f76c607a015219f6d625a60e0b2a89e74033bd3d0b2b8bf0d3b498a49ab71686999fed181910fd96c09222e3ed264a", 0x70}], 0x7}}, {{&(0x7f0000001700)={0xa, 0x4e23, 0x7fff, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f00000017c0)=[{&(0x7f0000004080)="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", 0x1000}, {&(0x7f0000001740)="ac2650b0c93b40a670d3f773a972e945ff6061a8", 0x14}, {&(0x7f0000001780)="82eea4b91cb9686b96b9214ee2b2bf10e9f7f1f9975a0825a5cfe9f6f5a91bc152f5dd228f22f5779482260ddebd0249c4409a3d7f0eb9962f15716ea3bf7f9a", 0x40}], 0x3, &(0x7f0000001800)=[@dontfrag={{0x14, 0x29, 0x3e, 0x7fffffff}}, @hoplimit={{0x14, 0x29, 0x34, 0x8}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffc}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x29, 0x2, 0x1, 0x9, 0x0, [@mcast1]}}}], 0x88}}, {{&(0x7f00000018c0)={0xa, 0x4e24, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f0000001b00)=[{&(0x7f0000001900)="31c872e36880b556bee5fbd5148cbdca362b9152301c9a028dbf456004ca5d3830c217058401a23fe72813c41b27f83751bdda242b8f026fff563be701ab33eb59300fe3a846d08f6388dd55aa7553d07e3c66c3e437bf465af36ccd754ddae688d4ab6306bee61172cc08d0b82193daa4f3", 0x72}, {&(0x7f0000001980)="2ec385eb14852832a06d78c094bd2b1a702cce", 0x13}, {&(0x7f00000019c0)="5cf4201d2f3a62d6a34f996e52367945184d5fe0a644fb75be743e02edb3f10f2d8e741fb6a3676e0dc3e97d639a749615472d542b6032f22008f7f38809", 0x3e}, {&(0x7f0000001a00)="21c020f9db2eaacc3e96db85f1760dba12f84ecd769bb616b62947ad57d9f8", 0x1f}, {&(0x7f0000001a40)="6a42da812bdbe4eb12ad5cacb9f9f822d0a571ca8b161132f1dbaf4a43f0c0", 0x1f}, {&(0x7f0000001a80)="f5ef6463e880ab3f359522edfb53718e7760ea3ccdbf072d621d2ff26e46b27e1b06ebd8bb1f4d2d745346b1549e1183228cee39ccc579e04ce5b31ffb4d1821fd4109aa9eaebd388a114001d17be0b3d650554b5ef8", 0x56}], 0x6, &(0x7f0000001b80)=[@dstopts_2292={{0x50, 0x29, 0x4, {0x1b, 0x6, '\x00', [@ra={0x5, 0x2, 0x6}, @jumbo={0xc2, 0x4, 0x8}, @pad1, @hao={0xc9, 0x10, @empty}, @ra={0x5, 0x2, 0x200}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0xa}}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x5}}], 0x68}}, {{&(0x7f0000001c00)={0xa, 0x4e20, 0x5, @loopback, 0x81}, 0x1c, &(0x7f0000001c40), 0x0, &(0x7f0000001c80)=[@hopopts={{0x30, 0x29, 0x36, {0x0, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x4}, @ra={0x5, 0x2, 0xd95}, @pad1, @ra={0x5, 0x2, 0x9}, @jumbo={0xc2, 0x4, 0x10000}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @rthdr={{0x78, 0x29, 0x39, {0xff, 0xc, 0x2, 0x1, 0x0, [@remote, @mcast1, @loopback, @private0, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}}}], 0xc0}}, {{0x0, 0x0, &(0x7f00000052c0)=[{&(0x7f0000001e00)="d91ff084a0e3d42d43f9375be6f934d15c38e266440fb34399001a6745b72fbfef2fde716d14b44284876034d8ae95020f109277b4aede618f7d278fc04fe6d4c1ec51e5bf4ae96f25712b53057b1d86e7558d8e4516df68a28567f8fa18c2480356f8126a6a99499ba039f9dbe336f6aab94f2bcc14837ae155186a55b0c46cd85da7bbabfd9abaeae07c2de991fe0def0d02eb068be02d4c9984e308ac76b135a571c6bace676381b2916a0536ec8cc36355a86003279c9acb4d9a84143859969eaa2b31d72de8ecae", 0xca}, {&(0x7f0000001f00)="2347b60a6298f7b9661989a0cc27ed50dd3ec1fbbd03f4c163ef111e06eac2bf9d8ab2638afdf8203a66330e52f3154ad04c830b30665cde1932ad024126c919d66f41eafadf107d7c127ff9818f12e0d770418c6e313033baaa6a5a502961159d902875644e49b34895e01e687372e1345a4efb0832631c25786a77a0af186a6f99", 0x82}, {&(0x7f0000006740)="da093cb5394dd30df2d6933b114074e2a8ff1dbc76c9a46f446f265d35f23a719dab908570852157bf86264f377da8ff5860aeefa071b3ad1b914ba296788b737237f4590c6563e8c1d4aabfdda83fa364888f3a6574a23e0ec188e39fdddb3579aa912fe60b4fc8dfead7aa9dec64839bd74d8d781ab46e87b2994d5b6bcfe81cff070000186e00bf512603", 0x8c}, {&(0x7f0000005140)="651f4a0839c9b3bdaa43a297a59b7fefced7c48e787096466ee5e7914a8878819ae4a3faaee2429035e778105c2c83041e52e5521d391e3eb88dc9ea7df509dac6492af65e3f9085ddb9c4830bc730798f0c787f36d75dbae1e5a1895025cf1a3c161a2213fbb9d38db04dcee648784924e9b650a94ace2a448803baec63d707b1994d317cd450397249b5067aec10e27d470a69d8d0c70d6d785648ed0ed00010cabfd78a26561c252119e30abf45c8f40d818b9834bc51478e3a760c0e8c5030efda3cdbe031775765dcb96909c71865158fdb94b683fa89949c50ce", 0xdd}, {&(0x7f0000001fc0)="7dbbe1a38c27a954521fd8fc42143736ff23d4d12871afdfc7430322c42df27aa0a73e6d06afcc21def1fdda094a2f96c7469c77f2cac8c0adb8468e9e307bad3b685ba797", 0x45}, {&(0x7f0000005240)="7b1456ad4b18efdc024d760d00e4cfcf54993c20705f54209fe9a07fd6327278d45637f51c5523f2c774557f788287478f4051bb3c71e0ba195b3365cf14161fb59ee9954ab314e1", 0x48}], 0x6, &(0x7f0000005380)=[@rthdrdstopts={{0x10d0, 0x29, 0x37, {0x3b, 0x216, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x80, 0x8b6, [0x2, 0x6]}}, @hao={0xc9, 0x10, @local}, @pad1, @generic={0x9, 0x1000, "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"}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @generic={0xb5, 0x6c, "7076ac284db5bc0bd7bf872c712a19a8297fb9b7300b7f285e17a4d59ae47ead8dfaaae56892eff7b112a0ad8160c9412df1cf201c517b603e5905e00de5dabe2f1448b439f109a9e0a21e5a414cc714bb4c252d867aa1b3fbf18070757b001e61d4ab50f24864e7477704ff"}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast2, r0}}}, @pktinfo={{0x24, 0x29, 0x32, {@local}}}], 0x1120}}], 0xa, 0x4000000) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, 0x0, 0xfeac) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000001c0)={0x2, 0x3}, 0x4) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r3, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000001640)=ANY=[@ANYBLOB="14000000000000000000000007000000c4048fff0f0000001c000000000000000000000008000000", @ANYRES32=r5], 0x38}}], 0x1, 0x0) getsockopt$sock_buf(r4, 0x1, 0x1c, &(0x7f0000000000)=""/90, &(0x7f0000000180)=0x5a) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x20}, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYBLOB="110d0000000000000000970643980d8500006342c1510f700000000c9900000000000000006332e995beab66e5450dcc0000b0a904e445d90d6a89b1e1a872be59dec124e66f6fffd88226800f98f0f41a383d118437b367c78462b3b1e746c0b652087218b2940000384203d96da943929086a319399d047eabc198c76d93d3d1c8abed3fad420762884d30c2ca284472f2931e17c1fe59a7ee00000000e725d84346f7b3f6126e257a550780f2f131d6191c3ce95e9e1a300e8d4374f1c84bdf68ded1a38485037093647baca9811a9b9b9c17f4761f2a"], 0x20}, 0x1, 0x0, 0x0, 0xc801}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000200)=@req={0x9, 0x8, 0x6, 0x61}, 0x10) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000001300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="100028bd7000fcdbdf2521000000050020000100000029ddc0147a170a0001007770616e33000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000894}, 0x20000088) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) 08:41:37 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) pread64(r0, &(0x7f0000000180)=""/199, 0xc7, 0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4008040) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fcntl$setstatus(r2, 0x4, 0xf0ac3d2370543000) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x5}, 0x1c705, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x4052, r4, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000140)={0x2, 0x3, 0xffff, 0x3}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000001d00020000000000000010000400020008001200", @ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0xa, 0x4e21, 0x81, @private0, 0xdf}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3abf5375c3866c0afd7148bb0dbf63d6a303e9125d9ad676bffcd27b2c53e52bcf1a1ce477ea55f678c2ed40464e3474c6156a7f6eaca23d80e426209b43d6d6818277a8e2f463ee217205a30440776e59857fc14fc2572251bbb80eaee7edc46e42abe63c1ba32adb2fdb60513e80fde", 0xde}], 0x1, &(0x7f00000005c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x80000001}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x33, 0x0, '\x00', [@pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0xffff}}, @hopopts={{0x50, 0x29, 0x36, {0xff, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0xef}, @calipso={0x7, 0x28, {0x3, 0x8, 0x8, 0x4, [0xfffffffffffffeff, 0x6, 0x8, 0x1]}}, @ra={0x5, 0x2, 0x6}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @rthdr={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x2, 0x1f, 0x0, [@remote]}}}], 0x138}, 0x4000) 08:41:37 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @multicast1}}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x80, 0x9, 0x2, 0x0, 0x20, 0x0, 0x7, 0x1020a, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0x5, 0x5}, 0x800, 0x0, 0x4, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x6, r0, 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r7 = inotify_init1(0x800) copy_file_range(r6, &(0x7f0000000180)=0x8, r7, &(0x7f0000000280)=0x714, 0x0, 0x0) r8 = accept$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000140)=0x1c) sendmmsg$inet6(r8, 0x0, 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) fcntl$notify(r9, 0x402, 0x180000030) connect$inet6(r9, &(0x7f0000000300)={0xa, 0x4e21, 0x8, @local, 0x7}, 0x1c) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 08:41:37 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x20042, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x10010, r0, 0x39) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200080, 0x23456}, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f0000000340)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 24) 08:41:37 executing program 7: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x80464c453f) (fail_nth: 7) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x10, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3ab", 0x6f}], 0x1, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @tclass={{0x14}}, @hoplimit={{0x14}}], 0x58}, 0x4000) 08:41:37 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400000015fff30d0000000000000000f6000000156880d3aa937a0ce5c4e8f2d20c256d982fe811236ce91b205d07f936c6f150fc5aeab98125f366cd8cd180e2421a6b705f4b0a1c939988a9a7cbbe477684316b2e2e88a0db9b020ceeca6140351d063015ea253ab34eb95e1c7bf0d27a412e9faf655cb562e06dab607cf14d935fa4590cb5c4d86240374ab6f531abe5164f6977d07545c20e555c3b82e7883a587a3e9b5e90e2e04a4125b3273fcf65d109499f5f38d2"], 0x14}}, 0x0) timer_gettime(r0, &(0x7f0000000080)) timer_settime(r0, 0x0, &(0x7f00000004c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000500)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x4, 0x4}, &(0x7f00000002c0)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x4ac1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c739b4f25f709", 0x19}, {0x0}, {0x0}], 0x3}, 0x0, 0x4000000}, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000040)) r5 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000440)=0x14, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) [ 1647.117668] FAULT_INJECTION: forcing a failure. [ 1647.117668] name failslab, interval 1, probability 0, space 0, times 0 [ 1647.119643] CPU: 1 PID: 10418 Comm: syz-executor.7 Not tainted 5.10.237 #1 [ 1647.120766] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1647.122095] Call Trace: [ 1647.122524] dump_stack+0x107/0x167 [ 1647.123113] should_fail.cold+0x5/0xa [ 1647.123747] should_failslab+0x5/0x20 [ 1647.124365] __kmalloc_node_track_caller+0x74/0x3b0 [ 1647.125178] ? sk_stream_alloc_skb+0x109/0xc30 [ 1647.125926] __alloc_skb+0xb1/0x5b0 [ 1647.126526] sk_stream_alloc_skb+0x109/0xc30 [ 1647.127255] do_tcp_sendpages+0x9d6/0x1b80 [ 1647.128100] ? lock_release+0x680/0x680 [ 1647.128757] ? lock_downgrade+0x6d0/0x6d0 [ 1647.129445] ? tcp_send_mss+0x2b0/0x2b0 [ 1647.130096] ? mark_held_locks+0x9e/0xe0 [ 1647.130761] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1647.131628] tcp_sendpage+0x80/0xd0 [ 1647.132214] ? tcp_sendpage_locked+0xc0/0xc0 [ 1647.132932] inet_sendpage+0xc9/0x130 [ 1647.133555] kernel_sendpage.part.0+0x146/0x290 [ 1647.134313] sock_sendpage+0xe5/0x140 [ 1647.134934] ? __sock_recv_ts_and_drops+0x430/0x430 [ 1647.135756] pipe_to_sendpage+0x2af/0x380 [ 1647.136438] ? propagate_umount+0x1550/0x1550 [ 1647.137167] ? splice_from_pipe_next.part.0+0x166/0x520 [ 1647.138042] __splice_from_pipe+0x43d/0x890 [ 1647.138741] FAULT_INJECTION: forcing a failure. [ 1647.138741] name failslab, interval 1, probability 0, space 0, times 0 [ 1647.140506] ? propagate_umount+0x1550/0x1550 [ 1647.141241] generic_splice_sendpage+0xd5/0x140 [ 1647.141991] ? __do_sys_vmsplice+0x8d0/0x8d0 [ 1647.142706] ? security_file_permission+0xb1/0xe0 [ 1647.143606] ? __do_sys_vmsplice+0x8d0/0x8d0 [ 1647.144317] direct_splice_actor+0x10f/0x170 [ 1647.145027] splice_direct_to_actor+0x387/0x980 [ 1647.145781] ? pipe_to_sendpage+0x380/0x380 [ 1647.146485] ? do_splice_to+0x160/0x160 [ 1647.147125] ? security_file_permission+0xb1/0xe0 [ 1647.147923] do_splice_direct+0x1c4/0x290 [ 1647.148593] ? splice_direct_to_actor+0x980/0x980 [ 1647.149376] ? security_file_permission+0xb1/0xe0 [ 1647.150149] do_sendfile+0x553/0x11e0 [ 1647.150756] ? do_pwritev+0x270/0x270 [ 1647.151355] ? wait_for_completion_io+0x270/0x270 [ 1647.152122] ? rcu_read_lock_any_held+0x75/0xa0 [ 1647.152841] ? vfs_write+0x354/0xb10 [ 1647.153432] __x64_sys_sendfile64+0x1d1/0x210 [ 1647.154136] ? __ia32_sys_sendfile+0x220/0x220 [ 1647.154853] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1647.155688] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1647.156512] do_syscall_64+0x33/0x40 [ 1647.157099] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1647.157903] RIP: 0033:0x7efca6f2bb19 [ 1647.158483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1647.161433] RSP: 002b:00007efca44a1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1647.162624] RAX: ffffffffffffffda RBX: 00007efca703ef60 RCX: 00007efca6f2bb19 [ 1647.163741] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 1647.164860] RBP: 00007efca44a11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1647.165964] R10: 00000080464c453f R11: 0000000000000246 R12: 0000000000000001 [ 1647.167069] R13: 00007ffdba8bcc9f R14: 00007efca44a1300 R15: 0000000000022000 [ 1647.168221] CPU: 0 PID: 10419 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 1647.169839] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1647.171736] Call Trace: [ 1647.172349] dump_stack+0x107/0x167 [ 1647.173184] should_fail.cold+0x5/0xa [ 1647.174055] ? getname_flags.part.0+0x50/0x4f0 [ 1647.175142] should_failslab+0x5/0x20 [ 1647.176037] kmem_cache_alloc+0x5b/0x310 [ 1647.176977] getname_flags.part.0+0x50/0x4f0 [ 1647.177990] getname+0x8e/0xd0 [ 1647.178726] __io_openat_prep+0x228/0x4c0 [ 1647.179693] io_submit_sqes+0xacc/0x8610 [ 1647.180660] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1647.181805] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1647.182921] ? find_held_lock+0x2c/0x110 [ 1647.183874] ? io_submit_sqes+0x8610/0x8610 [ 1647.184861] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1647.185954] ? wait_for_completion_io+0x270/0x270 [ 1647.187054] ? rcu_read_lock_any_held+0x75/0xa0 [ 1647.188113] ? vfs_write+0x354/0xb10 [ 1647.188958] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 1647.189992] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 1647.191211] ? ksys_write+0x1a9/0x260 [ 1647.192091] ? __ia32_sys_read+0xb0/0xb0 [ 1647.193013] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1647.194200] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1647.195375] do_syscall_64+0x33/0x40 [ 1647.196230] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1647.197386] RIP: 0033:0x7faee6584b19 [ 1647.198231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1647.202376] RSP: 002b:00007faee3afa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1647.204098] RAX: ffffffffffffffda RBX: 00007faee6697f60 RCX: 00007faee6584b19 [ 1647.205724] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1647.207334] RBP: 00007faee3afa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1647.208949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1647.210578] R13: 00007fff102f569f R14: 00007faee3afa300 R15: 0000000000022000 [ 1647.212439] hpet: Lost 2 RTC interrupts 08:41:37 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) pread64(r0, &(0x7f0000000180)=""/199, 0xc7, 0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4008040) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fcntl$setstatus(r2, 0x4, 0xf0ac3d2370543000) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x5}, 0x1c705, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x4052, r4, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000140)={0x2, 0x3, 0xffff, 0x3}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000001d00020000000000000010000400020008001200", @ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0xa, 0x4e21, 0x81, @private0, 0xdf}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3abf5375c3866c0afd7148bb0dbf63d6a303e9125d9ad676bffcd27b2c53e52bcf1a1ce477ea55f678c2ed40464e3474c6156a7f6eaca23d80e426209b43d6d6818277a8e2f463ee217205a30440776e59857fc14fc2572251bbb80eaee7edc46e42abe63c1ba32adb2fdb60513e80fde", 0xde}], 0x1, &(0x7f00000005c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x80000001}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x33, 0x0, '\x00', [@pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0xffff}}, @hopopts={{0x50, 0x29, 0x36, {0xff, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0xef}, @calipso={0x7, 0x28, {0x3, 0x8, 0x8, 0x4, [0xfffffffffffffeff, 0x6, 0x8, 0x1]}}, @ra={0x5, 0x2, 0x6}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @rthdr={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x2, 0x1f, 0x0, [@remote]}}}], 0x138}, 0x4000) [ 1647.240514] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65301 sclass=netlink_route_socket pid=10421 comm=syz-executor.0 08:41:37 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x58, 0x1, 0x1, 0x3, 0x3000000, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0xffffffffffffff90, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) 08:41:37 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) pread64(r0, &(0x7f0000000180)=""/199, 0xc7, 0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4008040) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fcntl$setstatus(r2, 0x4, 0xf0ac3d2370543000) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x5}, 0x1c705, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x4052, r4, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000140)={0x2, 0x3, 0xffff, 0x3}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000001d00020000000000000010000400020008001200", @ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0xa, 0x4e21, 0x81, @private0, 0xdf}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3abf5375c3866c0afd7148bb0dbf63d6a303e9125d9ad676bffcd27b2c53e52bcf1a1ce477ea55f678c2ed40464e3474c6156a7f6eaca23d80e426209b43d6d6818277a8e2f463ee217205a30440776e59857fc14fc2572251bbb80eaee7edc46e42abe63c1ba32adb2fdb60513e80fde", 0xde}], 0x1, &(0x7f00000005c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x80000001}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x33, 0x0, '\x00', [@pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0xffff}}, @hopopts={{0x50, 0x29, 0x36, {0xff, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0xef}, @calipso={0x7, 0x28, {0x3, 0x8, 0x8, 0x4, [0xfffffffffffffeff, 0x6, 0x8, 0x1]}}, @ra={0x5, 0x2, 0x6}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @rthdr={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x2, 0x1f, 0x0, [@remote]}}}], 0x138}, 0x4000) [ 1647.320349] hpet: Lost 1 RTC interrupts [ 1647.353201] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1647.355229] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 08:41:37 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x20042, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x10010, r0, 0x39) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200080, 0x23456}, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f0000000340)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 25) 08:41:37 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) pread64(r0, &(0x7f0000000180)=""/199, 0xc7, 0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4008040) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fcntl$setstatus(r2, 0x4, 0xf0ac3d2370543000) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x5}, 0x1c705, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x4052, r4, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000140)={0x2, 0x3, 0xffff, 0x3}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000001d00020000000000000010000400020008001200", @ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0xa, 0x4e21, 0x81, @private0, 0xdf}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3abf5375c3866c0afd7148bb0dbf63d6a303e9125d9ad676bffcd27b2c53e52bcf1a1ce477ea55f678c2ed40464e3474c6156a7f6eaca23d80e426209b43d6d6818277a8e2f463ee217205a30440776e59857fc14fc2572251bbb80eaee7edc46e42abe63c1ba32adb2fdb60513e80fde", 0xde}], 0x1, &(0x7f00000005c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x80000001}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x33, 0x0, '\x00', [@pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0xffff}}, @hopopts={{0x50, 0x29, 0x36, {0xff, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0xef}, @calipso={0x7, 0x28, {0x3, 0x8, 0x8, 0x4, [0xfffffffffffffeff, 0x6, 0x8, 0x1]}}, @ra={0x5, 0x2, 0x6}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @rthdr={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x2, 0x1f, 0x0, [@remote]}}}], 0x138}, 0x4000) 08:41:37 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x58, 0x1, 0x1, 0x3, 0x4000000, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0xffffffffffffff90, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) [ 1647.441897] FAULT_INJECTION: forcing a failure. [ 1647.441897] name failslab, interval 1, probability 0, space 0, times 0 [ 1647.443256] CPU: 1 PID: 10445 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 1647.444079] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1647.444970] Call Trace: [ 1647.445278] dump_stack+0x107/0x167 [ 1647.445693] should_fail.cold+0x5/0xa [ 1647.446129] ? create_object.isra.0+0x3a/0xa20 [ 1647.446648] should_failslab+0x5/0x20 [ 1647.447081] kmem_cache_alloc+0x5b/0x310 [ 1647.447535] create_object.isra.0+0x3a/0xa20 [ 1647.448034] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1647.448588] kmem_cache_alloc+0x159/0x310 [ 1647.449062] getname_flags.part.0+0x50/0x4f0 [ 1647.449540] getname+0x8e/0xd0 [ 1647.449911] __io_openat_prep+0x228/0x4c0 [ 1647.450364] io_submit_sqes+0xacc/0x8610 [ 1647.450821] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1647.451355] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1647.451916] ? find_held_lock+0x2c/0x110 [ 1647.452358] ? io_submit_sqes+0x8610/0x8610 [ 1647.452828] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1647.453346] ? wait_for_completion_io+0x270/0x270 [ 1647.453868] ? rcu_read_lock_any_held+0x75/0xa0 [ 1647.454367] ? vfs_write+0x354/0xb10 [ 1647.454795] ? fput_many+0x2f/0x1a0 [ 1647.455190] ? ksys_write+0x1a9/0x260 [ 1647.455629] ? __ia32_sys_read+0xb0/0xb0 [ 1647.456157] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1647.456751] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1647.457310] do_syscall_64+0x33/0x40 [ 1647.457711] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1647.458260] RIP: 0033:0x7faee6584b19 [ 1647.458686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1647.460662] RSP: 002b:00007faee3afa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1647.461532] RAX: ffffffffffffffda RBX: 00007faee6697f60 RCX: 00007faee6584b19 [ 1647.462296] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1647.463059] RBP: 00007faee3afa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1647.463827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1647.464594] R13: 00007fff102f569f R14: 00007faee3afa300 R15: 0000000000022000 08:41:37 executing program 3: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000280), 0x8) io_submit(0x0, 0x1, &(0x7f00000006c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000100)={0x87, @dev={0xac, 0x14, 0x14, 0xe}, 0x4e21, 0x1, 'lblcr\x00', 0xa, 0x1, 0x74}, 0x2c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x2) ftruncate(r1, 0x1000003) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa418b6d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') read(r3, &(0x7f00000002c0)=""/225, 0xe1) socket$nl_route(0x10, 0x3, 0x0) r4 = dup2(r2, r2) write$binfmt_elf64(r4, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x3c7) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x266d40) r6 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ptype\x00') io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040)=[r3, r4, r2, r5, 0xffffffffffffffff, r6, r2], 0x7) fcntl$addseals(r3, 0x409, 0x8) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) lseek(r7, 0x0, 0x2) copy_file_range(0xffffffffffffffff, 0x0, r7, 0x0, 0x200f5ef, 0x0) [ 1647.529349] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1647.531387] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 08:41:37 executing program 4: r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfffffffffffffffd, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="01434430303101004c494e55582020202020202020202020202020202020202020202020202020204344524f4d2020202020202020202020202020202020202020202020202020200000000000000000b8000000000000b80000000000000000000000000000000000000000000000000000000000000000010000010100000100080800180000000000001813000000000000000000001500000000220017", 0x9f, 0x8000}, {&(0x7f0000010900)="8800170000000000001700080000000008007809140b2a3a0802", 0x1a, 0xb800}], 0x0, &(0x7f00000001c0)={[{@dmode}]}) openat(r0, &(0x7f0000000040)='./file0\x00', 0x119000, 0xc) openat(r0, &(0x7f0000000240)='./file0\x00', 0x40, 0x80) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) accept$unix(r1, &(0x7f0000000140)=@abs, &(0x7f00000000c0)=0x6e) 08:41:37 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) pread64(r0, &(0x7f0000000180)=""/199, 0xc7, 0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4008040) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fcntl$setstatus(r2, 0x4, 0xf0ac3d2370543000) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x5}, 0x1c705, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x4052, r4, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000140)={0x2, 0x3, 0xffff, 0x3}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000001d00020000000000000010000400020008001200", @ANYRES32=r5, @ANYBLOB="8e2afb567c5049dab9732cf28484b893fcfd880ab5baea589e57661b1636f8952dae03129ab89e4e7a135718433900"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0xa, 0x4e21, 0x81, @private0, 0xdf}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3abf5375c3866c0afd7148bb0dbf63d6a303e9125d9ad676bffcd27b2c53e52bcf1a1ce477ea55f678c2ed40464e3474c6156a7f6eaca23d80e426209b43d6d6818277a8e2f463ee217205a30440776e59857fc14fc2572251bbb80eaee7edc46e42abe63c1ba32adb2fdb60513e80fde", 0xde}], 0x1, &(0x7f00000005c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x80000001}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x33, 0x0, '\x00', [@pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0xffff}}, @hopopts={{0x50, 0x29, 0x36, {0xff, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0xef}, @calipso={0x7, 0x28, {0x3, 0x8, 0x8, 0x4, [0xfffffffffffffeff, 0x6, 0x8, 0x1]}}, @ra={0x5, 0x2, 0x6}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @rthdr={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x2, 0x1f, 0x0, [@remote]}}}], 0x138}, 0x4000) 08:41:37 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x20, 0x20, 0xc21, 0x0, 0x0, {0x2}, [@typed={0xc, 0x0, 0x0, 0x0, @str='keyring\x00'}]}, 0x20}}, 0x0) perf_event_open(&(0x7f0000000440)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000240)={0x6, &(0x7f0000000140)=[{0x8001, 0x101}, {0x8001, 0x7ff}, {0xd9, 0x6}, {0x6}, {0x8, 0x9}, {0x1, 0x9}]}) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5325, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x303c00, 0x0) fcntl$setsig(r4, 0xa, 0x0) r5 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5325, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x7, 0x0, &(0x7f0000000040)=[r3, r0, r5]}, 0x3) add_key$keyring(&(0x7f00000003c0), &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x20040000) add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000100)=0x5) sendmsg$BATADV_CMD_SET_MESH(r1, 0x0, 0x240049c1) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) unshare(0x48020200) 08:41:37 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8914, &(0x7f0000000140)={'lo\x00'}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='net/udp6\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f00000005c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_int(r2, 0x1, 0x2b, &(0x7f0000000000)=0xdfffffff, 0x4) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="460e7ad12a03"}, 0x14) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r4, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}, 0x10) r5 = dup(0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000100)=""/18, 0x12}], 0x1, 0x0, 0x80000001) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x210, 0x0, 0x1002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8914, &(0x7f0000000140)={'lo\x00'}) r7 = openat$cgroup_int(r5, &(0x7f0000000040)='cpuacct.usage\x00', 0x2, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x6c2, 0x6}) 08:41:37 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r0 = syz_open_dev$vcsa(0x0, 0x0, 0x401) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r1, &(0x7f00000007c0)=""/180, 0x200007d8) getdents64(r1, 0x0, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, 0x0, 0x1) syz_genetlink_get_family_id$ipvs(0x0, r1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, 0x0) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000080)={0x40, r3, 0x200, 0x40000000, 0x25dfdbfb, {{0x11}, {@void, @val={0xc, 0x99, {0x0, 0x2b}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}]}, 0x40}, 0x1, 0x0, 0x0, 0x88811}, 0x0) dup(r2) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYRESOCT], 0x100}, 0x1, 0x0, 0x0, 0x4044084}, 0x0) unshare(0x48020200) 08:41:37 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x58, 0x1, 0x1, 0x3, 0x5000000, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0xffffffffffffff90, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) 08:41:37 executing program 7: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x80464c453f) (fail_nth: 8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x10, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3ab", 0x6f}], 0x1, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @tclass={{0x14}}, @hoplimit={{0x14}}], 0x58}, 0x4000) [ 1647.657390] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1647.702741] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1647.703797] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 08:41:37 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) pread64(r0, &(0x7f0000000180)=""/199, 0xc7, 0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4008040) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fcntl$setstatus(r2, 0x4, 0xf0ac3d2370543000) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x5}, 0x1c705, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x4052, r4, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000140)={0x2, 0x3, 0xffff, 0x3}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000001d00020000000000000010000400020008001200", @ANYRES32=r5, @ANYBLOB="8e2afb567c5049dab9732cf28484b893fcfd880ab5baea589e57661b1636f8952dae03129ab89e4e7a135718433900"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0xa, 0x4e21, 0x81, @private0, 0xdf}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3abf5375c3866c0afd7148bb0dbf63d6a303e9125d9ad676bffcd27b2c53e52bcf1a1ce477ea55f678c2ed40464e3474c6156a7f6eaca23d80e426209b43d6d6818277a8e2f463ee217205a30440776e59857fc14fc2572251bbb80eaee7edc46e42abe63c1ba32adb2fdb60513e80fde", 0xde}], 0x1, &(0x7f00000005c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x80000001}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x33, 0x0, '\x00', [@pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0xffff}}, @hopopts={{0x50, 0x29, 0x36, {0xff, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0xef}, @calipso={0x7, 0x28, {0x3, 0x8, 0x8, 0x4, [0xfffffffffffffeff, 0x6, 0x8, 0x1]}}, @ra={0x5, 0x2, 0x6}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @rthdr={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x2, 0x1f, 0x0, [@remote]}}}], 0x138}, 0x4000) [ 1647.743764] FAULT_INJECTION: forcing a failure. [ 1647.743764] name failslab, interval 1, probability 0, space 0, times 0 08:41:37 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x20042, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x10010, r0, 0x39) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200080, 0x23456}, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f0000000340)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 26) [ 1647.747353] CPU: 0 PID: 10468 Comm: syz-executor.7 Not tainted 5.10.237 #1 [ 1647.749048] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1647.750949] Call Trace: [ 1647.751572] dump_stack+0x107/0x167 [ 1647.752412] should_fail.cold+0x5/0xa [ 1647.753318] ? create_object.isra.0+0x3a/0xa20 [ 1647.754369] should_failslab+0x5/0x20 [ 1647.755243] kmem_cache_alloc+0x5b/0x310 [ 1647.756195] create_object.isra.0+0x3a/0xa20 [ 1647.757202] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1647.758375] kmem_cache_alloc_node+0x169/0x330 [ 1647.759443] __alloc_skb+0x6d/0x5b0 [ 1647.760285] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1647.761495] sk_stream_alloc_skb+0x109/0xc30 [ 1647.762514] do_tcp_sendpages+0x9d6/0x1b80 [ 1647.763505] ? lock_release+0x680/0x680 [ 1647.764422] ? lock_downgrade+0x6d0/0x6d0 [ 1647.765378] ? tcp_send_mss+0x2b0/0x2b0 [ 1647.766292] ? mark_held_locks+0x9e/0xe0 [ 1647.767235] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1647.768633] tcp_sendpage+0x80/0xd0 [ 1647.769627] ? tcp_sendpage_locked+0xc0/0xc0 [ 1647.770708] inet_sendpage+0xc9/0x130 [ 1647.771605] kernel_sendpage.part.0+0x146/0x290 [ 1647.772683] sock_sendpage+0xe5/0x140 [ 1647.773563] ? __sock_recv_ts_and_drops+0x430/0x430 [ 1647.774218] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1647.774705] pipe_to_sendpage+0x2af/0x380 [ 1647.774730] ? propagate_umount+0x1550/0x1550 [ 1647.777712] ? splice_from_pipe_next.part.0+0x166/0x520 [ 1647.778944] __splice_from_pipe+0x43d/0x890 [ 1647.779948] ? propagate_umount+0x1550/0x1550 [ 1647.780990] generic_splice_sendpage+0xd5/0x140 [ 1647.782057] ? __do_sys_vmsplice+0x8d0/0x8d0 [ 1647.783080] ? security_file_permission+0xb1/0xe0 [ 1647.784201] ? __do_sys_vmsplice+0x8d0/0x8d0 [ 1647.785215] direct_splice_actor+0x10f/0x170 [ 1647.786230] splice_direct_to_actor+0x387/0x980 [ 1647.787306] ? pipe_to_sendpage+0x380/0x380 [ 1647.788313] ? do_splice_to+0x160/0x160 [ 1647.789192] FAULT_INJECTION: forcing a failure. [ 1647.789192] name failslab, interval 1, probability 0, space 0, times 0 [ 1647.789228] ? security_file_permission+0xb1/0xe0 [ 1647.791624] do_splice_direct+0x1c4/0x290 [ 1647.792578] ? splice_direct_to_actor+0x980/0x980 [ 1647.793691] ? security_file_permission+0xb1/0xe0 [ 1647.794811] do_sendfile+0x553/0x11e0 [ 1647.795709] ? do_pwritev+0x270/0x270 [ 1647.796583] ? wait_for_completion_io+0x270/0x270 [ 1647.797691] ? rcu_read_lock_any_held+0x75/0xa0 [ 1647.798759] ? vfs_write+0x354/0xb10 [ 1647.799632] __x64_sys_sendfile64+0x1d1/0x210 [ 1647.800661] ? __ia32_sys_sendfile+0x220/0x220 [ 1647.801717] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1647.802919] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1647.804111] do_syscall_64+0x33/0x40 [ 1647.804964] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1647.806134] RIP: 0033:0x7efca6f2bb19 [ 1647.806987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1647.811228] RSP: 002b:00007efca44a1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1647.812956] RAX: ffffffffffffffda RBX: 00007efca703ef60 RCX: 00007efca6f2bb19 [ 1647.814590] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 1647.816237] RBP: 00007efca44a11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1647.817872] R10: 00000080464c453f R11: 0000000000000246 R12: 0000000000000001 [ 1647.819516] R13: 00007ffdba8bcc9f R14: 00007efca44a1300 R15: 0000000000022000 [ 1647.821181] CPU: 1 PID: 10476 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 1647.822093] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1647.822446] hpet: Lost 4 RTC interrupts [ 1647.823139] Call Trace: [ 1647.823167] dump_stack+0x107/0x167 [ 1647.824872] should_fail.cold+0x5/0xa [ 1647.825320] ? create_object.isra.0+0x3a/0xa20 08:41:37 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000019c0)=ANY=[@ANYBLOB="280000001a00210c00000000000000000a00000008000000", @ANYRES32, @ANYBLOB="f8ff1b003a01010101010000"], 0x28}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) [ 1647.825881] should_failslab+0x5/0x20 [ 1647.826465] kmem_cache_alloc+0x5b/0x310 [ 1647.826941] create_object.isra.0+0x3a/0xa20 [ 1647.827489] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1647.828109] kmem_cache_alloc+0x159/0x310 [ 1647.828610] getname_flags.part.0+0x50/0x4f0 [ 1647.829125] getname+0x8e/0xd0 [ 1647.829501] __io_openat_prep+0x228/0x4c0 [ 1647.829989] io_submit_sqes+0xacc/0x8610 [ 1647.830478] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1647.831057] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1647.831628] ? find_held_lock+0x2c/0x110 [ 1647.832094] ? io_submit_sqes+0x8610/0x8610 [ 1647.832615] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1647.833184] ? wait_for_completion_io+0x270/0x270 [ 1647.833738] ? rcu_read_lock_any_held+0x75/0xa0 [ 1647.834290] ? vfs_write+0x354/0xb10 [ 1647.834721] ? fput_many+0x2f/0x1a0 [ 1647.835157] ? ksys_write+0x1a9/0x260 [ 1647.835601] ? __ia32_sys_read+0xb0/0xb0 [ 1647.836064] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1647.836668] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1647.837260] do_syscall_64+0x33/0x40 [ 1647.837681] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1647.838263] RIP: 0033:0x7faee6584b19 [ 1647.838691] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1647.840787] RSP: 002b:00007faee3afa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1647.841646] RAX: ffffffffffffffda RBX: 00007faee6697f60 RCX: 00007faee6584b19 [ 1647.842458] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1647.843267] RBP: 00007faee3afa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1647.844078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1647.844895] R13: 00007fff102f569f R14: 00007faee3afa300 R15: 0000000000022000 08:41:37 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x58, 0x1, 0x1, 0x3, 0x6000000, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0xffffffffffffff90, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) 08:41:54 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) pread64(r0, &(0x7f0000000180)=""/199, 0xc7, 0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4008040) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fcntl$setstatus(r2, 0x4, 0xf0ac3d2370543000) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x5}, 0x1c705, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x4052, r4, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000140)={0x2, 0x3, 0xffff, 0x3}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000001d00020000000000000010000400020008001200", @ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0xa, 0x4e21, 0x81, @private0, 0xdf}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3abf5375c3866c0afd7148bb0dbf63d6a303e9125d9ad676bffcd27b2c53e52bcf1a1ce477ea55f678c2ed40464e3474c6156a7f6eaca23d80e426209b43d6d6818277a8e2f463ee217205a30440776e59857fc14fc2572251bbb80eaee7edc46e42abe63c1ba32adb2fdb60513e80fde", 0xde}], 0x1, &(0x7f00000005c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x80000001}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x33, 0x0, '\x00', [@pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0xffff}}, @hopopts={{0x50, 0x29, 0x36, {0xff, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0xef}, @calipso={0x7, 0x28, {0x3, 0x8, 0x8, 0x4, [0xfffffffffffffeff, 0x6, 0x8, 0x1]}}, @ra={0x5, 0x2, 0x6}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @rthdr={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x2, 0x1f, 0x0, [@remote]}}}], 0x138}, 0x4000) [ 1664.399994] __nla_validate_parse: 3 callbacks suppressed [ 1664.400004] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1664.402003] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1664.419286] audit: type=1400 audit(1749199314.381:223): avc: denied { relabelto } for pid=10500 comm="syz-executor.0" name="NETLINK" dev="sockfs" ino=41281 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:sshd_key_t:s0 tclass=netlink_audit_socket permissive=1 [ 1664.421825] FAULT_INJECTION: forcing a failure. [ 1664.421825] name failslab, interval 1, probability 0, space 0, times 0 [ 1664.424354] CPU: 0 PID: 10502 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 1664.425336] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1664.426432] Call Trace: [ 1664.426786] dump_stack+0x107/0x167 [ 1664.427286] should_fail.cold+0x5/0xa 08:41:54 executing program 7: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x80464c453f) (fail_nth: 9) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x10, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3ab", 0x6f}], 0x1, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @tclass={{0x14}}, @hoplimit={{0x14}}], 0x58}, 0x4000) 08:41:54 executing program 4: prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x2) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) flock(0xffffffffffffffff, 0x8) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x10000) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, 0x0) name_to_handle_at(r0, &(0x7f0000000340)='./file0\x00', &(0x7f0000001580)=ANY=[@ANYBLOB="1000d596af280537959cafdadbf768000008000000"], &(0x7f00000015c0), 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000001500)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000002e147e83f889cab60ea3bd60465c2359832f66696c65300054bec3bcb761eafbcde0d5d070b151678560e2858eb4054f70"]) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@noacl}]}) r2 = socket(0x5, 0x80000, 0x7ff) sendfile(r1, r2, 0x0, 0x9) 08:41:54 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x58, 0x1, 0x1, 0x3, 0x7000000, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0xffffffffffffff90, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) 08:41:54 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x20042, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x10010, r0, 0x39) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200080, 0x23456}, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f0000000340)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 27) 08:41:54 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) pread64(r0, &(0x7f0000000180)=""/199, 0xc7, 0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4008040) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fcntl$setstatus(r2, 0x4, 0xf0ac3d2370543000) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x5}, 0x1c705, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x4052, r4, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000140)={0x2, 0x3, 0xffff, 0x3}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000001d00020000000000000010000400020008001200", @ANYRES32=r5, @ANYBLOB="8e2afb567c5049dab9732cf28484b893fcfd880ab5baea589e57661b1636f8952dae03129ab89e4e7a135718433900"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0xa, 0x4e21, 0x81, @private0, 0xdf}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3abf5375c3866c0afd7148bb0dbf63d6a303e9125d9ad676bffcd27b2c53e52bcf1a1ce477ea55f678c2ed40464e3474c6156a7f6eaca23d80e426209b43d6d6818277a8e2f463ee217205a30440776e59857fc14fc2572251bbb80eaee7edc46e42abe63c1ba32adb2fdb60513e80fde", 0xde}], 0x1, &(0x7f00000005c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x80000001}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x33, 0x0, '\x00', [@pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0xffff}}, @hopopts={{0x50, 0x29, 0x36, {0xff, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0xef}, @calipso={0x7, 0x28, {0x3, 0x8, 0x8, 0x4, [0xfffffffffffffeff, 0x6, 0x8, 0x1]}}, @ra={0x5, 0x2, 0x6}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @rthdr={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x2, 0x1f, 0x0, [@remote]}}}], 0x138}, 0x4000) 08:41:54 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x4000004, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_audit(0x10, 0x3, 0x9) fsetxattr$security_selinux(r0, &(0x7f0000000040), &(0x7f00000000c0)='system_u:object_r:sshd_key_t:s0\x00', 0x20, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="580800000101030000000000000000000a2000004400028006000340000000002c0001801400030000000000000000000000000000000001140004000000fd00000000000000ffffac1414bb0c0002800500010000000000"], 0x58}}, 0x0) signalfd4(r3, &(0x7f0000000000)={[0x7]}, 0x8, 0x80000) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_USER_TTY(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000006404000826bd7000fb00df25667a8586ff4bcd629a8985053e6c75f1e1870000"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) splice(r2, 0x0, r5, 0x0, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) quotactl(0x9, &(0x7f0000000440)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000340)="69eb1e6f327054e098d4b672a2ac69e4a486eec99baaeb24bc9dc28efe8d0c838961f1d61ceaf812d84d496f943e749abf74baedc04a5553b47861f92ca15074048c41addccf376ba3f5144e2b9506480cd629de543f421089f812abc7684fa19da9967b5a92a6d9d503467006ac2d514fa065a35b2f93a5a80619736f35a8480dbd3d99714c71d3d8be92574acb7eab5df8d4d78908971371be61cbae0ad20b6a66d50b4d6f0988c1e2f1f6f915c764e69e76c9ed4ae867e6bb063a15ec8561807bd910cbedf631f5ef8135407790e3350ded37") r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1c0000001e0000000579c27ded1100000a000000"], 0x1c}}, 0x0) ioctl$CDROMEJECT(0xffffffffffffffff, 0x5309) 08:41:54 executing program 3: openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000700)={0x0, 0x0, 0x0, 0xffffffff}) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000280), 0x8) io_submit(0x0, 0x1, &(0x7f00000006c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r2 = syz_open_dev$vcsa(&(0x7f0000000040), 0x4, 0x80) faccessat2(r2, &(0x7f0000000080)='./file1\x00', 0x42, 0x3100) openat(r1, &(0x7f0000000000)='./file1\x00', 0x0, 0x80) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000700)={0x0, 0x0, 0x0, 0xffffffff}) [ 1664.427302] ? __alloc_file+0x21/0x320 [ 1664.427318] should_failslab+0x5/0x20 [ 1664.427332] kmem_cache_alloc+0x5b/0x310 [ 1664.427346] ? SOFTIRQ_verbose+0x10/0x10 [ 1664.427362] __alloc_file+0x21/0x320 [ 1664.427376] alloc_empty_file+0x6d/0x170 [ 1664.427392] path_openat+0xe6/0x2770 [ 1664.427404] ? __lock_acquire+0x1657/0x5b00 [ 1664.427426] ? path_lookupat+0x860/0x860 [ 1664.427440] ? perf_trace_lock+0xac/0x490 [ 1664.427452] ? SOFTIRQ_verbose+0x10/0x10 [ 1664.427469] ? __lockdep_reset_lock+0x180/0x180 [ 1664.427488] do_filp_open+0x190/0x3e0 [ 1664.427501] ? may_open_dev+0xf0/0xf0 [ 1664.427518] ? alloc_fd+0x2e7/0x670 [ 1664.427532] ? lock_downgrade+0x6d0/0x6d0 [ 1664.427544] ? do_raw_spin_lock+0x121/0x260 [ 1664.427557] ? rwlock_bug.part.0+0x90/0x90 [ 1664.427569] ? lock_chain_count+0x20/0x20 08:41:54 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x58, 0x1, 0x1, 0x3, 0x8000000, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0xffffffffffffff90, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) [ 1664.427583] ? stack_trace_save+0x8c/0xc0 [ 1664.427618] ? _raw_spin_unlock+0x1a/0x30 08:41:54 executing program 0: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ptrace(0xffffffffffffffff, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r1 = syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x8f95, 0x6}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) ptrace$cont(0x9, 0x0, 0x100000001, 0x8) syz_io_uring_submit(r4, r3, &(0x7f00000002c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x5}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1664.427630] ? alloc_fd+0x2e7/0x670 [ 1664.427655] io_openat2+0x24d/0xb80 [ 1664.427673] ? io_send+0x780/0x780 [ 1664.427689] ? perf_trace_lock+0xac/0x490 [ 1664.427702] ? SOFTIRQ_verbose+0x10/0x10 [ 1664.427722] io_issue_sqe+0x2cd/0x77b0 [ 1664.427739] ? lock_acquire+0x197/0x470 [ 1664.427752] ? find_held_lock+0x2c/0x110 [ 1664.427772] ? __virt_addr_valid+0x346/0x5d0 [ 1664.427785] ? io_connect+0x610/0x610 [ 1664.427801] ? __might_fault+0xd3/0x180 [ 1664.427815] ? lock_downgrade+0x6d0/0x6d0 [ 1664.427834] ? __virt_addr_valid+0x170/0x5d0 [ 1664.427849] ? __check_object_size+0x319/0x440 [ 1664.427866] __io_queue_sqe+0x90/0x9d0 [ 1664.427886] ? io_issue_sqe+0x77b0/0x77b0 [ 1664.427903] ? getname+0x96/0xd0 [ 1664.427926] io_submit_sqes+0x44aa/0x8610 [ 1664.427964] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1664.427977] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1664.427999] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1664.428013] ? io_submit_sqes+0x8610/0x8610 [ 1664.428026] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1664.428039] ? finish_task_switch+0x126/0x5d0 [ 1664.428050] ? finish_task_switch+0xef/0x5d0 [ 1664.428061] ? __switch_to+0x572/0xf70 [ 1664.428073] ? __switch_to_asm+0x3a/0x60 [ 1664.428083] ? __switch_to_asm+0x34/0x60 [ 1664.428101] ? __schedule+0x82c/0x1ea0 [ 1664.428123] ? io_schedule_timeout+0x140/0x140 [ 1664.428138] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 1664.428154] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 1664.428175] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1664.428189] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1664.428205] do_syscall_64+0x33/0x40 [ 1664.428218] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1664.428230] RIP: 0033:0x7faee6584b19 [ 1664.428245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1664.428252] RSP: 002b:00007faee3afa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1664.428268] RAX: ffffffffffffffda RBX: 00007faee6697f60 RCX: 00007faee6584b19 [ 1664.428276] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1664.428284] RBP: 00007faee3afa1d0 R08: 0000000000000000 R09: 0000000000000000 08:41:54 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) pread64(r0, &(0x7f0000000180)=""/199, 0xc7, 0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4008040) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fcntl$setstatus(r2, 0x4, 0xf0ac3d2370543000) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x5}, 0x1c705, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x4052, r4, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000140)={0x2, 0x3, 0xffff, 0x3}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000001d00020000000000000010000400020008001200", @ANYRES32=r5, @ANYBLOB="8e2afb567c5049dab9732cf28484b893fcfd880ab5baea589e57661b1636f8952dae03129ab89e4e7a135718433900cf3d4ff0ae317eeacc91e3da5a28218297aff7a03d9c33"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0xa, 0x4e21, 0x81, @private0, 0xdf}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3abf5375c3866c0afd7148bb0dbf63d6a303e9125d9ad676bffcd27b2c53e52bcf1a1ce477ea55f678c2ed40464e3474c6156a7f6eaca23d80e426209b43d6d6818277a8e2f463ee217205a30440776e59857fc14fc2572251bbb80eaee7edc46e42abe63c1ba32adb2fdb60513e80fde", 0xde}], 0x1, &(0x7f00000005c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x80000001}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x33, 0x0, '\x00', [@pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0xffff}}, @hopopts={{0x50, 0x29, 0x36, {0xff, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0xef}, @calipso={0x7, 0x28, {0x3, 0x8, 0x8, 0x4, [0xfffffffffffffeff, 0x6, 0x8, 0x1]}}, @ra={0x5, 0x2, 0x6}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @rthdr={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x2, 0x1f, 0x0, [@remote]}}}], 0x138}, 0x4000) [ 1664.428292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1664.428300] R13: 00007fff102f569f R14: 00007faee3afa300 R15: 0000000000022000 [ 1664.434883] FAULT_INJECTION: forcing a failure. [ 1664.434883] name failslab, interval 1, probability 0, space 0, times 0 [ 1664.434902] CPU: 1 PID: 10504 Comm: syz-executor.7 Not tainted 5.10.237 #1 [ 1664.434910] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1664.434915] Call Trace: [ 1664.434935] dump_stack+0x107/0x167 [ 1664.434953] should_fail.cold+0x5/0xa [ 1664.434969] ? __alloc_skb+0x6d/0x5b0 [ 1664.434988] should_failslab+0x5/0x20 [ 1664.435003] kmem_cache_alloc_node+0x55/0x330 [ 1664.435021] __alloc_skb+0x6d/0x5b0 08:41:54 executing program 7: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x80464c453f) (fail_nth: 10) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x10, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3ab", 0x6f}], 0x1, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @tclass={{0x14}}, @hoplimit={{0x14}}], 0x58}, 0x4000) [ 1664.435036] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1664.435054] sk_stream_alloc_skb+0x109/0xc30 [ 1664.435073] do_tcp_sendpages+0x9d6/0x1b80 [ 1664.435094] ? lock_release+0x680/0x680 [ 1664.435108] ? lock_downgrade+0x6d0/0x6d0 [ 1664.435125] ? tcp_send_mss+0x2b0/0x2b0 [ 1664.435139] ? mark_held_locks+0x9e/0xe0 [ 1664.435158] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1664.435176] tcp_sendpage+0x80/0xd0 [ 1664.435188] ? tcp_sendpage_locked+0xc0/0xc0 [ 1664.435205] inet_sendpage+0xc9/0x130 [ 1664.435225] kernel_sendpage.part.0+0x146/0x290 [ 1664.435244] sock_sendpage+0xe5/0x140 [ 1664.435262] ? __sock_recv_ts_and_drops+0x430/0x430 [ 1664.435274] pipe_to_sendpage+0x2af/0x380 [ 1664.435290] ? propagate_umount+0x1550/0x1550 [ 1664.435305] ? splice_from_pipe_next.part.0+0x166/0x520 [ 1664.435324] __splice_from_pipe+0x43d/0x890 [ 1664.435342] ? propagate_umount+0x1550/0x1550 [ 1664.435368] generic_splice_sendpage+0xd5/0x140 [ 1664.435382] ? __do_sys_vmsplice+0x8d0/0x8d0 [ 1664.435406] ? security_file_permission+0xb1/0xe0 [ 1664.435425] ? __do_sys_vmsplice+0x8d0/0x8d0 [ 1664.435442] direct_splice_actor+0x10f/0x170 [ 1664.435461] splice_direct_to_actor+0x387/0x980 [ 1664.435482] ? pipe_to_sendpage+0x380/0x380 [ 1664.435502] ? do_splice_to+0x160/0x160 [ 1664.435516] ? security_file_permission+0xb1/0xe0 [ 1664.435541] do_splice_direct+0x1c4/0x290 [ 1664.435557] ? splice_direct_to_actor+0x980/0x980 [ 1664.435579] ? security_file_permission+0xb1/0xe0 [ 1664.435625] do_sendfile+0x553/0x11e0 [ 1664.435651] ? do_pwritev+0x270/0x270 [ 1664.435667] ? wait_for_completion_io+0x270/0x270 [ 1664.435685] ? rcu_read_lock_any_held+0x75/0xa0 [ 1664.435697] ? vfs_write+0x354/0xb10 [ 1664.435716] __x64_sys_sendfile64+0x1d1/0x210 [ 1664.435730] ? __ia32_sys_sendfile+0x220/0x220 [ 1664.435754] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1664.435768] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1664.435785] do_syscall_64+0x33/0x40 [ 1664.435798] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1664.435807] RIP: 0033:0x7efca6f2bb19 [ 1664.435820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1664.435827] RSP: 002b:00007efca44a1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1664.435843] RAX: ffffffffffffffda RBX: 00007efca703ef60 RCX: 00007efca6f2bb19 [ 1664.435850] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 1664.435858] RBP: 00007efca44a11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1664.435866] R10: 00000080464c453f R11: 0000000000000246 R12: 0000000000000001 [ 1664.435874] R13: 00007ffdba8bcc9f R14: 00007efca44a1300 R15: 0000000000022000 [ 1664.541494] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1664.616612] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 08:41:54 executing program 4: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x161000, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, 0x0) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000001640)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast1}}}, 0x108) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2f, &(0x7f0000000240)={0x0, {{0x2, 0x4e22, @broadcast}}, {{0x2, 0x4e20, @loopback}}}, 0x108) close(0xffffffffffffffff) syz_io_uring_submit(0x0, 0x0, 0x0, 0x2) [ 1664.653200] FAULT_INJECTION: forcing a failure. [ 1664.653200] name failslab, interval 1, probability 0, space 0, times 0 [ 1664.654966] CPU: 1 PID: 10524 Comm: syz-executor.7 Not tainted 5.10.237 #1 [ 1664.655939] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1664.657081] Call Trace: [ 1664.657454] dump_stack+0x107/0x167 [ 1664.657931] should_fail.cold+0x5/0xa [ 1664.658449] ? create_object.isra.0+0x3a/0xa20 [ 1664.659149] should_failslab+0x5/0x20 [ 1664.659708] kmem_cache_alloc+0x5b/0x310 [ 1664.660260] create_object.isra.0+0x3a/0xa20 [ 1664.660864] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1664.661549] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1664.662241] ? sk_stream_alloc_skb+0x109/0xc30 [ 1664.662852] __alloc_skb+0xb1/0x5b0 [ 1664.663339] sk_stream_alloc_skb+0x109/0xc30 [ 1664.663955] do_tcp_sendpages+0x9d6/0x1b80 [ 1664.664534] ? lock_release+0x680/0x680 [ 1664.665099] ? lock_downgrade+0x6d0/0x6d0 [ 1664.665678] ? tcp_send_mss+0x2b0/0x2b0 [ 1664.666241] ? mark_held_locks+0x9e/0xe0 [ 1664.666788] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1664.667543] tcp_sendpage+0x80/0xd0 [ 1664.668068] ? tcp_sendpage_locked+0xc0/0xc0 [ 1664.668694] inet_sendpage+0xc9/0x130 [ 1664.669223] kernel_sendpage.part.0+0x146/0x290 [ 1664.669844] sock_sendpage+0xe5/0x140 [ 1664.670348] ? __sock_recv_ts_and_drops+0x430/0x430 [ 1664.671034] pipe_to_sendpage+0x2af/0x380 [ 1664.671625] ? propagate_umount+0x1550/0x1550 [ 1664.672247] ? splice_from_pipe_next.part.0+0x166/0x520 [ 1664.672974] __splice_from_pipe+0x43d/0x890 [ 1664.673540] ? propagate_umount+0x1550/0x1550 [ 1664.674111] generic_splice_sendpage+0xd5/0x140 [ 1664.674857] ? __do_sys_vmsplice+0x8d0/0x8d0 [ 1664.675463] ? security_file_permission+0xb1/0xe0 [ 1664.676123] ? __do_sys_vmsplice+0x8d0/0x8d0 [ 1664.676737] direct_splice_actor+0x10f/0x170 [ 1664.677346] splice_direct_to_actor+0x387/0x980 [ 1664.677993] ? pipe_to_sendpage+0x380/0x380 [ 1664.678608] ? do_splice_to+0x160/0x160 [ 1664.679178] ? security_file_permission+0xb1/0xe0 [ 1664.679891] do_splice_direct+0x1c4/0x290 [ 1664.680496] ? splice_direct_to_actor+0x980/0x980 [ 1664.681193] ? security_file_permission+0xb1/0xe0 [ 1664.681868] do_sendfile+0x553/0x11e0 [ 1664.682394] ? do_pwritev+0x270/0x270 [ 1664.682926] ? wait_for_completion_io+0x270/0x270 [ 1664.683589] ? rcu_read_lock_any_held+0x75/0xa0 [ 1664.684277] ? vfs_write+0x354/0xb10 [ 1664.684804] __x64_sys_sendfile64+0x1d1/0x210 [ 1664.685425] ? __ia32_sys_sendfile+0x220/0x220 [ 1664.686160] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1664.686906] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1664.687647] do_syscall_64+0x33/0x40 [ 1664.688220] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1664.689066] RIP: 0033:0x7efca6f2bb19 [ 1664.689593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1664.692438] RSP: 002b:00007efca44a1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1664.693501] RAX: ffffffffffffffda RBX: 00007efca703ef60 RCX: 00007efca6f2bb19 [ 1664.694534] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 1664.695487] RBP: 00007efca44a11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1664.696460] R10: 00000080464c453f R11: 0000000000000246 R12: 0000000000000002 [ 1664.697468] R13: 00007ffdba8bcc9f R14: 00007efca44a1300 R15: 0000000000022000 08:41:54 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x20042, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x10010, r0, 0x39) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200080, 0x23456}, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f0000000340)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 28) 08:41:54 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000280), 0x8) io_submit(0x0, 0x1, &(0x7f00000006c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x8, 0x8, 0x0, 0x81, 0x0, 0xff, 0x4000, 0x8, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x55, 0x2, @perf_config_ext={0x7b700a47, 0x1f}, 0x40880, 0x53, 0x6, 0x3, 0x7fffffff, 0x1, 0x7, 0x0, 0x401, 0x0, 0x5}, 0x0, 0xf, r0, 0x8) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f0000000140)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB=',\t']) epoll_create1(0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)) syz_io_uring_setup(0x0, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) ioctl$TIOCL_SETVESABLANK(r4, 0x4b52, &(0x7f0000000100)) syz_io_uring_submit(0x0, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, r4, &(0x7f0000000180)={0x4c8080, 0x4, 0xc}, &(0x7f00000001c0)='./file0\x00', 0x18, 0x0, 0x23456}, 0xfffffffa) [ 1664.736522] FAULT_INJECTION: forcing a failure. [ 1664.736522] name failslab, interval 1, probability 0, space 0, times 0 [ 1664.738355] CPU: 0 PID: 10532 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 1664.739469] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1664.740763] Call Trace: [ 1664.741116] dump_stack+0x107/0x167 [ 1664.741611] should_fail.cold+0x5/0xa [ 1664.742167] ? create_object.isra.0+0x3a/0xa20 [ 1664.742791] should_failslab+0x5/0x20 [ 1664.743310] kmem_cache_alloc+0x5b/0x310 [ 1664.743888] create_object.isra.0+0x3a/0xa20 [ 1664.744502] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1664.745213] kmem_cache_alloc+0x159/0x310 [ 1664.745771] __alloc_file+0x21/0x320 [ 1664.746270] alloc_empty_file+0x6d/0x170 [ 1664.746818] path_openat+0xe6/0x2770 [ 1664.747305] ? __lock_acquire+0x1657/0x5b00 [ 1664.747896] ? path_lookupat+0x860/0x860 [ 1664.748424] ? perf_trace_lock+0xac/0x490 [ 1664.749009] ? SOFTIRQ_verbose+0x10/0x10 [ 1664.749603] ? __lockdep_reset_lock+0x180/0x180 [ 1664.750285] do_filp_open+0x190/0x3e0 [ 1664.750874] ? may_open_dev+0xf0/0xf0 [ 1664.751371] ? alloc_fd+0x2e7/0x670 [ 1664.751914] ? lock_downgrade+0x6d0/0x6d0 [ 1664.752451] ? do_raw_spin_lock+0x121/0x260 [ 1664.753077] ? rwlock_bug.part.0+0x90/0x90 [ 1664.753649] ? lock_chain_count+0x20/0x20 [ 1664.754225] ? stack_trace_save+0x8c/0xc0 [ 1664.754788] ? _raw_spin_unlock+0x1a/0x30 [ 1664.755369] ? alloc_fd+0x2e7/0x670 [ 1664.755914] io_openat2+0x24d/0xb80 [ 1664.756438] ? io_send+0x780/0x780 [ 1664.756921] ? perf_trace_lock+0xac/0x490 [ 1664.757457] ? SOFTIRQ_verbose+0x10/0x10 [ 1664.757985] io_issue_sqe+0x2cd/0x77b0 [ 1664.758494] ? lock_acquire+0x197/0x470 [ 1664.759043] ? find_held_lock+0x2c/0x110 [ 1664.759640] ? __virt_addr_valid+0x346/0x5d0 [ 1664.760211] ? io_connect+0x610/0x610 [ 1664.760725] ? __might_fault+0xd3/0x180 [ 1664.761253] ? lock_downgrade+0x6d0/0x6d0 [ 1664.761915] ? __virt_addr_valid+0x170/0x5d0 [ 1664.762555] ? __check_object_size+0x319/0x440 [ 1664.763192] __io_queue_sqe+0x90/0x9d0 [ 1664.763771] ? io_issue_sqe+0x77b0/0x77b0 [ 1664.764376] ? getname+0x96/0xd0 [ 1664.764832] io_submit_sqes+0x44aa/0x8610 [ 1664.765402] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1664.766093] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1664.766763] ? find_held_lock+0x2c/0x110 [ 1664.767385] ? io_submit_sqes+0x8610/0x8610 [ 1664.768081] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1664.768741] ? wait_for_completion_io+0x270/0x270 [ 1664.769393] ? rcu_read_lock_any_held+0x75/0xa0 [ 1664.770028] ? vfs_write+0x354/0xb10 [ 1664.770566] ? fput_many+0x2f/0x1a0 08:41:54 executing program 4: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x1f8, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) syz_open_procfs(0x0, &(0x7f0000000480)='net/ip6_tables_targets\x00') r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = open_tree(r3, &(0x7f0000000080)='./file0\x00', 0x100) r6 = getpgid(0xffffffffffffffff) sendmsg$nl_generic(r5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000900)={0x3dc, 0x35, 0x800, 0x70bd29, 0x25dfdbfe, {0x1}, [@nested={0x4, 0x85}, @generic="bc99b78f9cccc0fec15c5ab13239e6fa49961f7dd07824199a24c6fc761e471317f3c5e5d8901d878fce0d713f49997808b898e558f5cb7d80ee39e24f97a5d464a64204cacca3474f3e2afa", @nested={0x20b, 0x94, 0x0, 0x1, [@typed={0x8, 0x45, 0x0, 0x0, @str='./-\x00'}, @generic="ca928cf58baa14d960244d0b70cb41fcaa3ac7f582168ee7406d829deb74f3cc259af2b38f45a62d233db3bbdc3115cca06d3e3ea1aed079108028d75ba111cf", @generic="9ca9d876b4f809de3776a17f0f7bdbec545e8eaf3ac9d533e1099f02d6392811c32f13d179c4fd38bf3bbc8d55a361451eeb8530b59049bc999f7fbba7d228ed03cf18db780f74b795283252eb704650367c86b5a9a17bda9f48a0bceb7df185f2ab1bc808a38daaf21b8390a24241dbe9dde0da73fcc1eee8a84b04b4fbcd127833eb324a79783935d2b8899fdcf3396890a67861bdf965559e7dc8cc6cac2dca1d5b1d89f5d823ae24a804b3d3e3fe95ca103d5c77a781543f9c2055befb7da41f5c6ac577935a895a12607138016922f7c6fd114322579435e5f18e39cdf6aebe0b36b8c986", @typed={0x8, 0x7a, 0x0, 0x0, @uid=0xee01}, @generic="af792c2f98537fa0711fea3eb4232b5707e8d2f1040bdf4bc7286241d5dc11499a5d60d5b16c28fecf8d16dde21c6f6df289b33cff6589b0b9840a08f5fecbfd56ae6bc4", @typed={0x14, 0x47, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @generic="1e16f9fccc13edcd1f38c896a596636c2c309ba56c52086e6f5a1a0d3f30172ef8d78979bcb4a9e3c72048e54ea4d4d4764368fe31db611b3b95375a3b2df7ab06d6f4b3b8506f7c3842a9aeca8465243cca96dd5adee64f8a55e80ba24d49f260ce0eee29d8813da4f77386af384883", @typed={0x8, 0x2e, 0x0, 0x0, @u32=0x3}]}, @nested={0x13f, 0x25, 0x0, 0x1, [@generic="56357bd1c17b625286f7f380a7b64ab9b88f3d4b96405b504dcf8be319060c630ba13c2ffc9521ae5a037321b1f409f5edbee4fd737c06dd6c0499d2982e83d2864b108fdf776398ad96806c788bd0ae420a60a519f8e22c88c66374603c1dc19f383b955019953fc3dcb682185ad217b4b5d12453c12f228ed88929ecbaef2e8f5c55c47ca5a83795e820af28d7ca6cdebf742f5c446d1f314f402dab16a863e3915d4de35dba2e4dfe667c669f038d20cdc1d7455b447740", @typed={0x4, 0x3e}, @typed={0x8, 0x56, 0x0, 0x0, @pid=r6}, @typed={0x1b, 0x5f, 0x0, 0x0, @str='net/ip6_tables_targets\x00'}, @typed={0x8, 0x81, 0x0, 0x0, @ipv4=@empty}, @generic="5c92675b633a78689125017766d2a424f4a726026346ef1d98ec475f1aa1a54fbafd8d9b8dd216a67eb8c7f550e022b5276221071fe14f5800e726ed5dfd7cc3547b2eef2706f43a7a18218f5c2d087d1f12"]}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@mcast2}, @typed={0x4, 0x8b}, @typed={0x14, 0xe, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}}]}, 0x3dc}, 0x1, 0x0, 0x0, 0x4001}, 0x408a4) socket$inet6(0xa, 0x5, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x20000, 0x0) [ 1664.771123] ? ksys_write+0x1a9/0x260 [ 1664.771936] ? __ia32_sys_read+0xb0/0xb0 [ 1664.772518] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1664.773300] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1664.774039] do_syscall_64+0x33/0x40 [ 1664.774580] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1664.775306] RIP: 0033:0x7faee6584b19 [ 1664.775845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1664.778419] RSP: 002b:00007faee3afa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1664.779520] RAX: ffffffffffffffda RBX: 00007faee6697f60 RCX: 00007faee6584b19 [ 1664.780587] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1664.781638] RBP: 00007faee3afa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1664.782662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1664.783635] R13: 00007fff102f569f R14: 00007faee3afa300 R15: 0000000000022000 [ 1664.784807] hpet: Lost 2 RTC interrupts [ 1664.820131] hpet: Lost 1 RTC interrupts 08:42:10 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) pread64(r0, &(0x7f0000000180)=""/199, 0xc7, 0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4008040) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fcntl$setstatus(r2, 0x4, 0xf0ac3d2370543000) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x5}, 0x1c705, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x4052, r4, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000140)={0x2, 0x3, 0xffff, 0x3}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000001d00020000000000000010000400020008001200", @ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0xa, 0x4e21, 0x81, @private0, 0xdf}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3abf5375c3866c0afd7148bb0dbf63d6a303e9125d9ad676bffcd27b2c53e52bcf1a1ce477ea55f678c2ed40464e3474c6156a7f6eaca23d80e426209b43d6d6818277a8e2f463ee217205a30440776e59857fc14fc2572251bbb80eaee7edc46e42abe63c1ba32adb2fdb60513e80fde", 0xde}], 0x1, &(0x7f00000005c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x80000001}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x33, 0x0, '\x00', [@pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0xffff}}, @hopopts={{0x50, 0x29, 0x36, {0xff, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0xef}, @calipso={0x7, 0x28, {0x3, 0x8, 0x8, 0x4, [0xfffffffffffffeff, 0x6, 0x8, 0x1]}}, @ra={0x5, 0x2, 0x6}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @rthdr={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x2, 0x1f, 0x0, [@remote]}}}], 0x138}, 0x4000) 08:42:10 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) pread64(r0, &(0x7f0000000180)=""/199, 0xc7, 0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4008040) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fcntl$setstatus(r2, 0x4, 0xf0ac3d2370543000) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x5}, 0x1c705, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x4052, r4, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000140)={0x2, 0x3, 0xffff, 0x3}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000001d00020000000000000010000400020008001200", @ANYRES32=r5, @ANYBLOB="8e2afb567c5049dab9732cf28484b893fcfd880ab5baea589e57661b1636f8952dae03129ab89e4e7a135718433900cf3d4ff0ae317eeacc91e3da5a28218297aff7a03d9c33"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0xa, 0x4e21, 0x81, @private0, 0xdf}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3abf5375c3866c0afd7148bb0dbf63d6a303e9125d9ad676bffcd27b2c53e52bcf1a1ce477ea55f678c2ed40464e3474c6156a7f6eaca23d80e426209b43d6d6818277a8e2f463ee217205a30440776e59857fc14fc2572251bbb80eaee7edc46e42abe63c1ba32adb2fdb60513e80fde", 0xde}], 0x1, &(0x7f00000005c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x80000001}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x33, 0x0, '\x00', [@pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0xffff}}, @hopopts={{0x50, 0x29, 0x36, {0xff, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0xef}, @calipso={0x7, 0x28, {0x3, 0x8, 0x8, 0x4, [0xfffffffffffffeff, 0x6, 0x8, 0x1]}}, @ra={0x5, 0x2, 0x6}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @rthdr={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x2, 0x1f, 0x0, [@remote]}}}], 0x138}, 0x4000) 08:42:10 executing program 7: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x80464c453f) (fail_nth: 11) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x10, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3ab", 0x6f}], 0x1, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @tclass={{0x14}}, @hoplimit={{0x14}}], 0x58}, 0x4000) 08:42:10 executing program 0: r0 = syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x6, &(0x7f0000000140)=[{&(0x7f0000000600)="a9d404", 0x3}, {&(0x7f0000000700)="ff", 0x1, 0x6}, {&(0x7f0000000740)="b9", 0x1}, {0x0}, {&(0x7f0000000000)="0468796f1dd8b42c9c77fc3b859adab3c7be2789d202bd143966223dbebe98870cf414e9dd3f5d6e55bb40cd348e123b37293e5c0465b854a3fd1bb9aaf5809a40d11438866223a32e5bc40dd436416c633ee7d448b7748ddd01c34d17bbacf36bd1fa7ace135110cb2f82cd265364b0ebc1468b3fcde89cb6ed76cac7ed9ae621d993f1a46de19de22fda7b53d8d49e5d00275fdc5efdeb6016ee439a06ab2b7a6f2646057854f15fab335f547eb422b03b19e37d1943c9d19022356da693748f348a5a65ac83feb8429cb2c95f", 0xce, 0x9}, {&(0x7f0000000100)="817f03dcc6bebb715098cbd4d457fbf3fb", 0x11, 0x8}], 0x8000, 0x0) r1 = openat$incfs(r0, &(0x7f0000000200)='.log\x00', 0x40201, 0x8a) fsconfig$FSCONFIG_SET_PATH_EMPTY(r1, 0x4, &(0x7f0000000240)='%+\x00', &(0x7f0000000280)='./file0\x00', 0xffffffffffffffff) 08:42:10 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x20042, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x10010, r0, 0x39) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200080, 0x23456}, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f0000000340)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 29) 08:42:10 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x58, 0x1, 0x1, 0x3, 0x9000000, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0xffffffffffffff90, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) 08:42:10 executing program 4: write$sndseq(0xffffffffffffffff, &(0x7f0000000180)=[{0x0, 0x3, 0x40, 0x4, @time={0x7ff, 0x3a}, {0x5, 0x2}, {0x40, 0x46}, @raw32={[0x2, 0x1f, 0x8]}}], 0x1c) r0 = syz_io_uring_setup(0x4d4b, &(0x7f0000000480), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000740)={0x0, 0x57cf}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f00000000c0), 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x181042, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_uring_enter(r4, 0x463a, 0x386, 0x2, &(0x7f0000000080)={[0x400]}, 0x8) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64f, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f00000002c0), 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 08:42:10 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x8200, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000200)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4044}, 0x10) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0xffffffff, 0x1, 0x17, "77004a6efdff00002d1ceb7300", 0x0, 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r2 = perf_event_open(&(0x7f0000000300)={0x0, 0x80, 0xfe, 0x9, 0x59, 0x9, 0x0, 0x100000000, 0x40, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x200, 0x4, @perf_config_ext={0x7ff, 0x6}, 0x8000, 0x3, 0x8, 0x4, 0x7fff, 0x400, 0x5, 0x0, 0xffffffff, 0x0, 0xb291}, 0x0, 0x8000000000004, 0xffffffffffffffff, 0xb) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x121601, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x82, 0x4, 0x4, 0x80, 0x2}}) r4 = socket$inet(0x2, 0xa, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000700)={0x1ff, 0x2, &(0x7f0000000380)=[0xffffffffffffffff, r2, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0xf) r5 = syz_open_dev$vcsa(&(0x7f0000004700), 0x0, 0x4400) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) unlink(&(0x7f00000000c0)='./file0\x00') syz_open_dev$vcsu(0x0, 0x1000000000b, 0x240801) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x4090) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000140)={'ip6gretap0\x00'}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r4, r1, 0x0) futimesat(0xffffffffffffffff, &(0x7f0000000280)='./file1\x00', &(0x7f0000000440)={{0x77359400}, {0x0, 0x2710}}) io_submit(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) [ 1680.422557] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1680.425006] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1680.456387] FAULT_INJECTION: forcing a failure. [ 1680.456387] name failslab, interval 1, probability 0, space 0, times 0 [ 1680.457115] hpet: Lost 2 RTC interrupts [ 1680.459660] CPU: 1 PID: 10558 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 1680.462484] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1680.464777] Call Trace: [ 1680.465509] dump_stack+0x107/0x167 [ 1680.466510] should_fail.cold+0x5/0xa [ 1680.467558] ? security_file_alloc+0x34/0x170 [ 1680.468813] should_failslab+0x5/0x20 [ 1680.469868] kmem_cache_alloc+0x5b/0x310 [ 1680.470989] security_file_alloc+0x34/0x170 [ 1680.472193] __alloc_file+0xb7/0x320 [ 1680.473210] alloc_empty_file+0x6d/0x170 [ 1680.474313] path_openat+0xe6/0x2770 [ 1680.475327] ? __lock_acquire+0x1657/0x5b00 [ 1680.476342] ? path_lookupat+0x860/0x860 [ 1680.477445] ? perf_trace_lock+0xac/0x490 [ 1680.478589] ? SOFTIRQ_verbose+0x10/0x10 [ 1680.479713] ? __lockdep_reset_lock+0x180/0x180 [ 1680.481011] do_filp_open+0x190/0x3e0 [ 1680.482042] ? may_open_dev+0xf0/0xf0 [ 1680.483103] ? alloc_fd+0x2e7/0x670 [ 1680.484111] ? lock_downgrade+0x6d0/0x6d0 [ 1680.485251] ? do_raw_spin_lock+0x121/0x260 [ 1680.486448] ? rwlock_bug.part.0+0x90/0x90 [ 1680.487494] ? lock_chain_count+0x20/0x20 [ 1680.488640] ? stack_trace_save+0x8c/0xc0 [ 1680.489603] ? _raw_spin_unlock+0x1a/0x30 [ 1680.490569] ? alloc_fd+0x2e7/0x670 [ 1680.491433] io_openat2+0x24d/0xb80 [ 1680.492277] ? io_send+0x780/0x780 [ 1680.493103] ? perf_trace_lock+0xac/0x490 [ 1680.494064] ? SOFTIRQ_verbose+0x10/0x10 [ 1680.495018] io_issue_sqe+0x2cd/0x77b0 [ 1680.495944] ? lock_acquire+0x197/0x470 [ 1680.496884] ? find_held_lock+0x2c/0x110 [ 1680.497842] ? __virt_addr_valid+0x346/0x5d0 [ 1680.498874] ? io_connect+0x610/0x610 [ 1680.499789] ? __might_fault+0xd3/0x180 [ 1680.500700] ? lock_downgrade+0x6d0/0x6d0 [ 1680.501669] ? __virt_addr_valid+0x170/0x5d0 [ 1680.502686] ? __check_object_size+0x319/0x440 [ 1680.503835] __io_queue_sqe+0x90/0x9d0 [ 1680.504749] ? io_issue_sqe+0x77b0/0x77b0 [ 1680.505716] ? getname+0x96/0xd0 [ 1680.506522] io_submit_sqes+0x44aa/0x8610 [ 1680.507553] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1680.508695] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1680.509808] ? find_held_lock+0x2c/0x110 [ 1680.510786] ? io_submit_sqes+0x8610/0x8610 [ 1680.511793] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1680.512910] ? wait_for_completion_io+0x270/0x270 [ 1680.514036] ? rcu_read_lock_any_held+0x75/0xa0 [ 1680.515130] ? vfs_write+0x354/0xb10 [ 1680.516005] ? fput_many+0x2f/0x1a0 [ 1680.516839] ? ksys_write+0x1a9/0x260 [ 1680.517733] ? __ia32_sys_read+0xb0/0xb0 [ 1680.518790] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1680.520037] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1680.521273] do_syscall_64+0x33/0x40 [ 1680.522159] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1680.523375] RIP: 0033:0x7faee6584b19 [ 1680.524272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1680.528651] RSP: 002b:00007faee3afa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1680.530427] RAX: ffffffffffffffda RBX: 00007faee6697f60 RCX: 00007faee6584b19 [ 1680.532095] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1680.533725] RBP: 00007faee3afa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1680.535460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1680.537082] R13: 00007fff102f569f R14: 00007faee3afa300 R15: 0000000000022000 08:42:10 executing program 0: syz_emit_ethernet(0xfdef, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa0086dd60ee7c630028000020010000000000000000da0000000001000000000000000000000000000000000003000000000000c91007000000000000000000ffffac1e00010001000502000000000000000000"], 0x0) syz_emit_ethernet(0x5b, &(0x7f0000000000)={@empty, @random="1502117ecf63", @val={@val={0x9100, 0x7, 0x0, 0x2}, {0x8100, 0x3}}, {@mpls_mc={0x8848, {[{0x5c0}, {0x6, 0x0, 0x1}, {0xc, 0x0, 0x1}], @llc={@llc={0x42, 0xe, "06", "b3a4a881e75d4755c9834a99408ca7a9533ae04df61159cfbc2dbb2be3b2ad9e3838d8cd8ed9ba1c3f98323aaed2d2b43bac3b6f7157"}}}}}}, &(0x7f0000000100)={0x1, 0x1, [0xbd3, 0x347, 0x5b0, 0x7de]}) syz_emit_ethernet(0x46, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0xa, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @rand_addr=' \x01\x00', @broadcast, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}}}}, &(0x7f00000001c0)={0x0, 0x3, [0x184, 0xdf8, 0x1ce, 0x5ae]}) [ 1680.583649] audit: type=1326 audit(1749199330.543:224): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10559 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f766e0fdb19 code=0x7ffc0000 [ 1680.591580] FAULT_INJECTION: forcing a failure. [ 1680.591580] name failslab, interval 1, probability 0, space 0, times 0 [ 1680.594408] CPU: 1 PID: 10565 Comm: syz-executor.7 Not tainted 5.10.237 #1 [ 1680.596013] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1680.598023] Call Trace: [ 1680.598654] dump_stack+0x107/0x167 [ 1680.599537] should_fail.cold+0x5/0xa [ 1680.600479] should_failslab+0x5/0x20 [ 1680.601378] __kmalloc_node_track_caller+0x74/0x3b0 [ 1680.602534] ? sk_stream_alloc_skb+0x109/0xc30 [ 1680.603608] __alloc_skb+0xb1/0x5b0 [ 1680.604514] sk_stream_alloc_skb+0x109/0xc30 [ 1680.605594] do_tcp_sendpages+0x9d6/0x1b80 [ 1680.606603] ? lock_release+0x680/0x680 [ 1680.607557] ? lock_downgrade+0x6d0/0x6d0 [ 1680.608565] ? tcp_send_mss+0x2b0/0x2b0 [ 1680.609506] ? mark_held_locks+0x9e/0xe0 [ 1680.610473] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1680.611711] ? __local_bh_enable_ip+0x9d/0x100 [ 1680.612885] tcp_sendpage+0x80/0xd0 [ 1680.613740] ? tcp_sendpage_locked+0xc0/0xc0 [ 1680.614744] inet_sendpage+0xc9/0x130 [ 1680.615632] kernel_sendpage.part.0+0x146/0x290 [ 1680.616752] sock_sendpage+0xe5/0x140 [ 1680.617639] ? __sock_recv_ts_and_drops+0x430/0x430 [ 1680.618787] pipe_to_sendpage+0x2af/0x380 [ 1680.619726] ? propagate_umount+0x1550/0x1550 [ 1680.620779] ? splice_from_pipe_next.part.0+0x166/0x520 [ 1680.622014] __splice_from_pipe+0x43d/0x890 [ 1680.623036] ? propagate_umount+0x1550/0x1550 [ 1680.624089] generic_splice_sendpage+0xd5/0x140 [ 1680.625145] ? __do_sys_vmsplice+0x8d0/0x8d0 [ 1680.626169] ? security_file_permission+0xb1/0xe0 [ 1680.627267] ? __do_sys_vmsplice+0x8d0/0x8d0 [ 1680.628353] direct_splice_actor+0x10f/0x170 [ 1680.629374] splice_direct_to_actor+0x387/0x980 [ 1680.630461] ? pipe_to_sendpage+0x380/0x380 [ 1680.631460] ? do_splice_to+0x160/0x160 [ 1680.632402] ? security_file_permission+0xb1/0xe0 [ 1680.633512] do_splice_direct+0x1c4/0x290 [ 1680.634459] ? splice_direct_to_actor+0x980/0x980 [ 1680.635582] ? security_file_permission+0xb1/0xe0 [ 1680.636714] do_sendfile+0x553/0x11e0 [ 1680.637609] ? do_pwritev+0x270/0x270 [ 1680.638507] ? wait_for_completion_io+0x270/0x270 [ 1680.639611] ? rcu_read_lock_any_held+0x75/0xa0 [ 1680.640684] ? vfs_write+0x354/0xb10 [ 1680.641555] __x64_sys_sendfile64+0x1d1/0x210 [ 1680.642581] ? __ia32_sys_sendfile+0x220/0x220 [ 1680.643697] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1680.644903] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1680.646108] do_syscall_64+0x33/0x40 [ 1680.646972] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1680.648134] RIP: 0033:0x7efca6f2bb19 [ 1680.649027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1680.653214] RSP: 002b:00007efca44a1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1680.654998] RAX: ffffffffffffffda RBX: 00007efca703ef60 RCX: 00007efca6f2bb19 [ 1680.656688] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 1680.658325] RBP: 00007efca44a11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1680.660046] R10: 00000080464c453f R11: 0000000000000246 R12: 0000000000000002 [ 1680.661664] R13: 00007ffdba8bcc9f R14: 00007efca44a1300 R15: 0000000000022000 [ 1680.664485] audit: type=1326 audit(1749199330.546:225): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10559 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f766e0fdb19 code=0x7ffc0000 [ 1680.686469] audit: type=1326 audit(1749199330.570:226): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10559 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f766e0fdb19 code=0x7ffc0000 08:42:10 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x58, 0x1, 0x1, 0x3, 0xa000000, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0xffffffffffffff90, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) [ 1680.708985] audit: type=1326 audit(1749199330.570:227): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10559 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f766e0fdb19 code=0x7ffc0000 [ 1680.730151] audit: type=1326 audit(1749199330.570:228): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10559 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f766e0fdb19 code=0x7ffc0000 08:42:10 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000b80)=ANY=[@ANYBLOB="010000000100d44666b3ecea3c0b88f5f08f2671ea000018000000d9998f6b0c2b9c01aab8e18bc6078df97f492f2a034323165511890cef7753108982c6a8fe0953a10900000000000000248e368493150700000018d982c077ea998dfdcb262aa22d177c9327", @ANYRES64, @ANYRES64=r0, @ANYRES32=0xee00, @ANYBLOB="6e2f6669cf73b533727d0f2a74d98f671777c49f5771a0dd3eacafe3d9a5c520eae907ba9865614f154bc6e3a5a8f06b671a9d70cfb6b871da703edd81e09cabfb5f8427c097fe54cfb2e399b2845faeb6ceed0c2279720c6ddf1eab15884ab1be59775f48d3ef1a0fc9379ed10060e6cde35bf7ead21a503a02609992cc6da2031e5301ccd9e54e4065e49c00000000"]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000005c0)=ANY=[]) lseek(0xffffffffffffffff, 0x9e46, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=ANY=[@ANYBLOB="24000000100001000000000000000096000009000500000000000000050000804800005bdf87399f088209ee1e3e3ecd799ab580d9692a4c3dc12b855173ed2e9f93fc3bbf050c4209bdfb1544969b27bcd01a38a4e5ebe04dd1e1d7fb6705f297087dcbcd7675253395329744739d96eda915556e9429c80f9e751f0785770941bc9521b15d8570b89784466152c6f1968c71182f1305181a06216e1c41c8a9854888a3a905fbaae49510319bec010d4dd1c4b683c289630df03c198c62f0c2ea0e56"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000900)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x800, 0x70bd2a, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0xc004}, 0x884) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000540)={0x8, 'veth0_macvtap\x00', {'dummy0\x00'}, 0xfff9}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1680.751832] audit: type=1326 audit(1749199330.571:229): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10559 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f766e0fdb19 code=0x7ffc0000 [ 1680.772125] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1680.774465] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1680.776633] audit: type=1326 audit(1749199330.571:230): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10559 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f766e0fdb19 code=0x7ffc0000 [ 1680.787454] audit: type=1326 audit(1749199330.571:231): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10559 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f766e0fdb19 code=0x7ffc0000 08:42:10 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) pread64(r0, &(0x7f0000000180)=""/199, 0xc7, 0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4008040) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fcntl$setstatus(r2, 0x4, 0xf0ac3d2370543000) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x5}, 0x1c705, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x4052, r4, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000140)={0x2, 0x3, 0xffff, 0x3}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000001d00020000000000000010000400020008001200", @ANYRES32=r5, @ANYBLOB="8e2afb567c5049dab9732cf28484b893fcfd880ab5baea589e57661b1636f8952dae03129ab89e4e7a135718433900cf3d4ff0ae317eeacc91e3da5a28218297aff7a03d9c33"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0xa, 0x4e21, 0x81, @private0, 0xdf}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3abf5375c3866c0afd7148bb0dbf63d6a303e9125d9ad676bffcd27b2c53e52bcf1a1ce477ea55f678c2ed40464e3474c6156a7f6eaca23d80e426209b43d6d6818277a8e2f463ee217205a30440776e59857fc14fc2572251bbb80eaee7edc46e42abe63c1ba32adb2fdb60513e80fde", 0xde}], 0x1, &(0x7f00000005c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x80000001}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x33, 0x0, '\x00', [@pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0xffff}}, @hopopts={{0x50, 0x29, 0x36, {0xff, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0xef}, @calipso={0x7, 0x28, {0x3, 0x8, 0x8, 0x4, [0xfffffffffffffeff, 0x6, 0x8, 0x1]}}, @ra={0x5, 0x2, 0x6}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @rthdr={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x2, 0x1f, 0x0, [@remote]}}}], 0x138}, 0x4000) 08:42:10 executing program 4: membarrier(0x1, 0x0) membarrier(0x1, 0x0) membarrier(0x1, 0x0) membarrier(0x4, 0x0) membarrier(0x10, 0x0) membarrier(0x20, 0x0) membarrier(0x1, 0x0) membarrier(0x20, 0x0) membarrier(0x4, 0x0) membarrier(0x0, 0x0) membarrier(0x0, 0x0) membarrier(0x40, 0x0) membarrier(0x8, 0x0) membarrier(0x20, 0x0) membarrier(0x0, 0x0) membarrier(0x1, 0x0) membarrier(0x4, 0x0) membarrier(0x1, 0x0) membarrier(0x1, 0x0) membarrier(0x40, 0x0) [ 1680.811658] audit: type=1326 audit(1749199330.657:232): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=10559 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f766e0fdb19 code=0x7ffc0000 08:42:10 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x58, 0x1, 0x1, 0x3, 0xb000000, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0xffffffffffffff90, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) 08:42:10 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x20042, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x10010, r0, 0x39) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200080, 0x23456}, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f0000000340)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 30) [ 1680.865215] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1680.897059] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1680.899082] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1680.920304] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1680.921960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1680.925389] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 08:42:10 executing program 4: r0 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000440)={0x0, "9b55f610ffe7b9856842eb69443042b20caac33d7dda6ec6986b177fa13c2bd2c68577ea852c8bb47f31ee549b6a921e231ef07ee0f7fca620564faeeeafa440"}, 0x48, 0x0) r1 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000000)=@keyring={'key_or_keyring:', 0x0, 0xa}) request_key(&(0x7f0000000240)='user\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f0000000380)='dn\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00', r1) add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x48, r0) request_key(&(0x7f00000000c0)='user\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000380)='\x00', 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000080)={'fscrypt:', @desc3}, &(0x7f0000000740)={0x0, "3ef8a4c24927541ee4e5f8f0b6b073f3a14d9e238c0905546a9d62c9625f460dacb026ba3f615f7fdd3496dc19ed7064fc4d0bd8c5f4b761484442989c621844", 0x22}, 0x48, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000680), &(0x7f00000006c0)={'syz', 0x0}, 0x0, 0x0, 0x0) r3 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f00000005c0), &(0x7f0000000600)={'syz', 0x3}, 0x0, 0x0, r2) r5 = request_key(&(0x7f00000008c0)='dns_resolver\x00', &(0x7f0000000040)={'syz', 0x0, 0x2}, &(0x7f0000000440)='\xe8\xff\xff\xff\xff\xff\xff\xff\x00\x9d\x00\xf1\xad\xa2.\x803\x7f\xb5U\x18w\xae\x91mLO\x85\xc1D\xf8/\x19Vc\xb0\xc8\xaba\xa9T\xb2\xa4\x9d8\x13kc|Lgj V{\xddKF\xbb6\xf5\xa2\xe5\\/\xf0] \x0e2\xb5o4\xba\x98\x1e{\xcfZ\x1d\x84\xe0\xa5V\x1c3\xd78A\x9eK\x16\xfcXD\xe3\x9a,W\xb3\xc0\xeb\xcd\xf6\x89\x95\x9e\xa9\xc2H\xc5\xaa\xd8\x101!\xa3\x83\x1b\x83m\xe3RK8\xeby\xaa\x88\x94a\xea\xab#\xce*\x0f\xa0\x8c\xca\x15\xea\xdaf:\xf6\x1b\xbf\x9fR\xba\xb5\xb0\xf7\xf5g\xb1\xdcU;\x1bL\xbd\v\xc4\xf8\xf5\xd8\xd3\xba\x8a5\xa0\x00\xc2\xd7\xe0Y\xd3\xa27\xb4S\xb1bd\x05\x9bD\x01\x85b5U\xb4\x8c\x17\xf4f0P\x9f\xe9`W\xb4\xe0\xf0\x19\xc2\x87P><\xb48\xd2Jb,7\xdc2/\xdd_\xdbXT\xffZ\x12p\xac\xdb[\x00\x00\x00\xf1\xdc\xd4\x99C9\x90\x10T\xf4:\xd6\x15\xff\xe06\x99iM;\xd6\x8c\x96\xdes\xa2\xa7v>\xd8W\xf6B\x9e-*\x83\x1c\xe1\x04\x15E\xa2\xe2S\xee\xb1\x97B\xa7\x9cKN\xfb\x14m\x84\x85A\xb7\x10g\x86\x04\x148{\vh\x14\x94\x81?\x14\xc7\xb5\xd9\xc1\x8f\x9e\xb9l\xbb\xb1H\xa3e\x7f-\xfb\xc2L\xe5\xf6p\xc5\x82\xcb\x85\xe80\xaf6\xf3\xd5\xa1\xe0\xc9\xe6\xb0', r4) request_key(&(0x7f0000000700)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000180)='-]\x1ab\xe6\x06\\]\x00', r5) r6 = add_key$keyring(&(0x7f0000000200), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, r4) r7 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "3339b7878a1c91bbd7511e9f0230d3de41391b9b52b98b015a8460bbb4be26f73d7663f703da9b7df7c4c66762b16e6eb6231ce5c27f841f14881a9ebc769b6e"}, 0x48, 0xfffffffffffffffd) keyctl$update(0x2, 0x0, &(0x7f0000000b40)="04bd75484a67094d42dd39da3f37e3e9cd88a9153a37faef082bddd84aef8fff511e105852bf23c9a57b68eb1918514159511a195672aef1b2e36341df6b4263d82237f585b0a9a13fa51318693514cd68c7bf1646273b483b6af067dc3ab784bd4ce5a6507fbedcbfa249897f34eaf5435efbdfd4de9f4c06e9c4ac1241c9d16a0000004e9135636cfa2654d93fb57bc8f2ec43418e0763e33ac271301868a9ef43c83736edd10639a144e70350cf203c4d33b33b1193e0e44971b85fc941a7bb79c40728e599", 0xc7) add_key(&(0x7f00000001c0)='dns_resolver\x00', &(0x7f0000000640)={'syz', 0x3}, &(0x7f00000007c0)="f86127133cb374e363d89049035ed7986d5b3a0bc867f6efa92ae88bcbe4106606a0fcb67e129a6e4966ca4a2d01b61909394f51afdd7f707f713a274d8a5e78abcd1521d39d85932df75a7b15233d06dcb4303f915c172797e1fafd3076a96f4124cd06fdcdbdb57650d271e945f05be35aae4c9a3456c8703630163a009f718f480884db1a29f4ec5aade5741d5e03470ec06103c4fe26eb36675ae4d469035d04947a4ebcc807f0133ba1f80d34b307ebe32038d045d5eb97c57383102a961fb97c3d1555ec231ca3631e4ee95e3704994f5b09157c6dd57acf28177778367bea73156b37a2b15790c4757125", 0xee, r6) keyctl$KEYCTL_MOVE(0x1e, r0, r7, r3, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000000ac0)={0x17412c500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x42) [ 1680.958683] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1680.967293] FAULT_INJECTION: forcing a failure. [ 1680.967293] name failslab, interval 1, probability 0, space 0, times 0 [ 1680.969942] CPU: 0 PID: 10593 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 1680.971498] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1680.973405] Call Trace: [ 1680.974003] dump_stack+0x107/0x167 [ 1680.974827] should_fail.cold+0x5/0xa [ 1680.975685] ? create_object.isra.0+0x3a/0xa20 [ 1680.976721] should_failslab+0x5/0x20 [ 1680.977572] kmem_cache_alloc+0x5b/0x310 [ 1680.978482] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 1680.979719] create_object.isra.0+0x3a/0xa20 [ 1680.980705] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1680.981850] kmem_cache_alloc+0x159/0x310 [ 1680.982789] security_file_alloc+0x34/0x170 [ 1680.983753] __alloc_file+0xb7/0x320 [ 1680.984602] alloc_empty_file+0x6d/0x170 [ 1680.985523] path_openat+0xe6/0x2770 [ 1680.986355] ? __lock_acquire+0x1657/0x5b00 [ 1680.987335] ? path_lookupat+0x860/0x860 [ 1680.988253] ? perf_trace_lock+0xac/0x490 [ 1680.989187] ? SOFTIRQ_verbose+0x10/0x10 [ 1680.990112] ? __lockdep_reset_lock+0x180/0x180 [ 1680.991166] do_filp_open+0x190/0x3e0 [ 1680.992095] ? may_open_dev+0xf0/0xf0 [ 1680.992956] ? alloc_fd+0x2e7/0x670 [ 1680.993777] ? lock_downgrade+0x6d0/0x6d0 [ 1680.994706] ? do_raw_spin_lock+0x121/0x260 [ 1680.995674] ? rwlock_bug.part.0+0x90/0x90 [ 1680.996644] ? lock_chain_count+0x20/0x20 [ 1680.997583] ? stack_trace_save+0x8c/0xc0 [ 1680.998537] ? _raw_spin_unlock+0x1a/0x30 [ 1680.999483] ? alloc_fd+0x2e7/0x670 [ 1681.000331] io_openat2+0x24d/0xb80 [ 1681.001154] ? io_send+0x780/0x780 [ 1681.001964] ? perf_trace_lock+0xac/0x490 [ 1681.002911] ? SOFTIRQ_verbose+0x10/0x10 [ 1681.003841] io_issue_sqe+0x2cd/0x77b0 [ 1681.004718] ? lock_acquire+0x197/0x470 [ 1681.005609] ? find_held_lock+0x2c/0x110 [ 1681.006529] ? __virt_addr_valid+0x346/0x5d0 [ 1681.007515] ? io_connect+0x610/0x610 [ 1681.008378] ? __might_fault+0xd3/0x180 [ 1681.009276] ? lock_downgrade+0x6d0/0x6d0 [ 1681.010212] ? __virt_addr_valid+0x170/0x5d0 [ 1681.011204] ? __check_object_size+0x319/0x440 [ 1681.012238] __io_queue_sqe+0x90/0x9d0 [ 1681.013116] ? io_issue_sqe+0x77b0/0x77b0 [ 1681.014052] ? getname+0x96/0xd0 [ 1681.014826] io_submit_sqes+0x44aa/0x8610 [ 1681.015800] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1681.016914] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1681.018000] ? find_held_lock+0x2c/0x110 [ 1681.018916] ? io_submit_sqes+0x8610/0x8610 [ 1681.019894] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1681.020990] ? wait_for_completion_io+0x270/0x270 [ 1681.022071] ? rcu_read_lock_any_held+0x75/0xa0 [ 1681.023106] ? vfs_write+0x354/0xb10 [ 1681.023951] ? fput_many+0x2f/0x1a0 [ 1681.024771] ? ksys_write+0x1a9/0x260 [ 1681.025622] ? __ia32_sys_read+0xb0/0xb0 [ 1681.026546] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1681.027722] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1681.028883] do_syscall_64+0x33/0x40 [ 1681.029716] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1681.030865] RIP: 0033:0x7faee6584b19 [ 1681.031701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1681.035820] RSP: 002b:00007faee3afa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1681.037528] RAX: ffffffffffffffda RBX: 00007faee6697f60 RCX: 00007faee6584b19 [ 1681.039118] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1681.040716] RBP: 00007faee3afa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1681.042305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1681.043904] R13: 00007fff102f569f R14: 00007faee3afa300 R15: 0000000000022000 08:42:24 executing program 3: mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x80071, 0xffffffffffffffff, 0x8000000) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0x3, 0x400, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) clone3(&(0x7f0000000200)={0x4000, &(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000140), {0x5}, &(0x7f0000000400)=""/4096, 0x1000, &(0x7f0000000180)=""/58, &(0x7f00000001c0)=[r0, r0, r0, r0, r0, r0, r0, r0, r0, r0], 0xa}, 0x58) r2 = syz_open_procfs(r1, &(0x7f0000000040)='timers\x00') readv(r2, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/231, 0xe7}], 0x1) 08:42:24 executing program 7: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x80464c453f) (fail_nth: 12) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x10, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3ab", 0x6f}], 0x1, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @tclass={{0x14}}, @hoplimit={{0x14}}], 0x58}, 0x4000) 08:42:24 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000daf4655fdaf4655f0100ffff53ef010001000000d9f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed41000000080000d9f4655fdaf2655fdaf4655f000000000000060004", 0x1d, 0x2200}], 0x0, &(0x7f00000005c0)=ANY=[]) chroot(&(0x7f0000000180)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0}, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x20042, 0x0) pwritev(r4, &(0x7f0000000080)=[{&(0x7f0000001180)}], 0x1, 0xff7, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x10010, r4, 0x39) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000340)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0xa, 0x2, 0x0, 0x40, 0x0, 0x1, {0x0, r6}}, 0x1f) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x110, r3, 0x8000000) syz_io_uring_setup(0x3a7b, &(0x7f0000000480), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(0x0, r7, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) syz_io_uring_submit(r2, r7, &(0x7f0000001440)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r0, 0x7fff, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0, {0x3}}, 0x800) 08:42:24 executing program 0: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x2, &(0x7f0000001980)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',posixacl,loose,version=9p2000.u,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',version=9p2000,fowner=', @ANYRESDEC=0x0, @ANYBLOB="2c646566636f6e746578743d756e636f6e66696e65645f752c736d61636b66736861743d272c27412c7365636c6162656c2c7063723d30303030303030303030303030303030303035312c646566636f6e746578743d757365725f752c61707072616973652c004ee806c3"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast1}, 0x10) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000003, 0x10, r0, 0x10000000) socket$inet6_udp(0xa, 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="179b054534f878ffffff0000000000000000"], 0x1c}}, 0x0) 08:42:24 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x58, 0x1, 0x1, 0x3, 0xf000000, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0xffffffffffffff90, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) 08:42:24 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) pread64(r0, &(0x7f0000000180)=""/199, 0xc7, 0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4008040) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fcntl$setstatus(r2, 0x4, 0xf0ac3d2370543000) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x5}, 0x1c705, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x4052, r4, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000140)={0x2, 0x3, 0xffff, 0x3}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000001d00020000000000000010000400020008001200", @ANYRES32=r5, @ANYBLOB="8e2afb567c5049dab9732cf28484b893fcfd880ab5baea589e57661b1636f8952dae03129ab89e4e7a135718433900cf3d4ff0ae317eeacc91e3da5a28218297aff7a03d9c33fea62687074915caa746f95b"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0xa, 0x4e21, 0x81, @private0, 0xdf}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3abf5375c3866c0afd7148bb0dbf63d6a303e9125d9ad676bffcd27b2c53e52bcf1a1ce477ea55f678c2ed40464e3474c6156a7f6eaca23d80e426209b43d6d6818277a8e2f463ee217205a30440776e59857fc14fc2572251bbb80eaee7edc46e42abe63c1ba32adb2fdb60513e80fde", 0xde}], 0x1, &(0x7f00000005c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x80000001}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x33, 0x0, '\x00', [@pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0xffff}}, @hopopts={{0x50, 0x29, 0x36, {0xff, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0xef}, @calipso={0x7, 0x28, {0x3, 0x8, 0x8, 0x4, [0xfffffffffffffeff, 0x6, 0x8, 0x1]}}, @ra={0x5, 0x2, 0x6}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @rthdr={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x2, 0x1f, 0x0, [@remote]}}}], 0x138}, 0x4000) 08:42:24 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x20042, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x10010, r0, 0x39) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200080, 0x23456}, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f0000000340)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 31) [ 1694.980989] hpet_rtc_timer_reinit: 26 callbacks suppressed [ 1694.981143] hpet: Lost 1 RTC interrupts [ 1694.987638] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1694.989913] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 08:42:24 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0xc02, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) pipe2(&(0x7f00000001c0), 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x58, 0x1, 0x1, 0x3, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) 08:42:24 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) pread64(r0, &(0x7f0000000180)=""/199, 0xc7, 0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4008040) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fcntl$setstatus(r2, 0x4, 0xf0ac3d2370543000) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x5}, 0x1c705, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x4052, r4, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000140)={0x2, 0x3, 0xffff, 0x3}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000001d00020000000000000010000400020008001200", @ANYRES32=r5, @ANYBLOB="8e2afb567c5049dab9732cf28484b893fcfd880ab5baea589e57661b1636f8952dae03129ab89e4e7a135718433900cf3d4ff0ae317eeacc91e3da5a28218297aff7a03d9c33fea62687074915caa746f95b"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0xa, 0x4e21, 0x81, @private0, 0xdf}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3abf5375c3866c0afd7148bb0dbf63d6a303e9125d9ad676bffcd27b2c53e52bcf1a1ce477ea55f678c2ed40464e3474c6156a7f6eaca23d80e426209b43d6d6818277a8e2f463ee217205a30440776e59857fc14fc2572251bbb80eaee7edc46e42abe63c1ba32adb2fdb60513e80fde", 0xde}], 0x1, &(0x7f00000005c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x80000001}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x33, 0x0, '\x00', [@pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0xffff}}, @hopopts={{0x50, 0x29, 0x36, {0xff, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0xef}, @calipso={0x7, 0x28, {0x3, 0x8, 0x8, 0x4, [0xfffffffffffffeff, 0x6, 0x8, 0x1]}}, @ra={0x5, 0x2, 0x6}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @rthdr={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x2, 0x1f, 0x0, [@remote]}}}], 0x138}, 0x4000) [ 1695.015123] FAULT_INJECTION: forcing a failure. [ 1695.015123] name failslab, interval 1, probability 0, space 0, times 0 [ 1695.018337] CPU: 0 PID: 10623 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 1695.020136] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1695.022217] Call Trace: [ 1695.022895] dump_stack+0x107/0x167 [ 1695.023818] should_fail.cold+0x5/0xa [ 1695.024795] ? getname_flags.part.0+0x50/0x4f0 [ 1695.025951] should_failslab+0x5/0x20 [ 1695.026913] kmem_cache_alloc+0x5b/0x310 [ 1695.027964] getname_flags.part.0+0x50/0x4f0 [ 1695.029077] getname+0x8e/0xd0 [ 1695.029885] __io_openat_prep+0x228/0x4c0 [ 1695.030933] io_submit_sqes+0xacc/0x8610 [ 1695.032008] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1695.033263] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1695.034508] ? find_held_lock+0x2c/0x110 [ 1695.035543] ? io_submit_sqes+0x8610/0x8610 [ 1695.036684] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1695.037929] ? wait_for_completion_io+0x270/0x270 [ 1695.039176] ? rcu_read_lock_any_held+0x75/0xa0 [ 1695.040395] ? vfs_write+0x354/0xb10 [ 1695.041364] ? fput_many+0x2f/0x1a0 [ 1695.042313] ? ksys_write+0x1a9/0x260 [ 1695.043307] ? __ia32_sys_read+0xb0/0xb0 [ 1695.044424] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1695.045665] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1695.046881] do_syscall_64+0x33/0x40 [ 1695.047753] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1695.048958] RIP: 0033:0x7faee6584b19 [ 1695.049829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1695.054136] RSP: 002b:00007faee3afa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1695.055929] RAX: ffffffffffffffda RBX: 00007faee6697f60 RCX: 00007faee6584b19 [ 1695.057597] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1695.059265] RBP: 00007faee3afa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1695.060940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1695.062607] R13: 00007fff102f569f R14: 00007faee3afa300 R15: 0000000000022000 [ 1695.064520] hpet: Lost 2 RTC interrupts [ 1695.065410] FAULT_INJECTION: forcing a failure. [ 1695.065410] name failslab, interval 1, probability 0, space 0, times 0 [ 1695.066923] CPU: 1 PID: 10636 Comm: syz-executor.7 Not tainted 5.10.237 #1 [ 1695.067739] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1695.068739] Call Trace: [ 1695.069053] dump_stack+0x107/0x167 [ 1695.069487] should_fail.cold+0x5/0xa [ 1695.069943] ? create_object.isra.0+0x3a/0xa20 [ 1695.070485] should_failslab+0x5/0x20 [ 1695.070940] kmem_cache_alloc+0x5b/0x310 [ 1695.071429] create_object.isra.0+0x3a/0xa20 [ 1695.071957] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1695.072560] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1695.073170] ? sk_stream_alloc_skb+0x109/0xc30 [ 1695.073714] __alloc_skb+0xb1/0x5b0 [ 1695.074151] sk_stream_alloc_skb+0x109/0xc30 [ 1695.074679] do_tcp_sendpages+0x9d6/0x1b80 [ 1695.075196] ? lock_release+0x680/0x680 [ 1695.075680] ? lock_downgrade+0x6d0/0x6d0 [ 1695.076182] ? tcp_send_mss+0x2b0/0x2b0 [ 1695.076649] ? mark_held_locks+0x9e/0xe0 [ 1695.077094] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1695.077665] ? __local_bh_enable_ip+0x9d/0x100 [ 1695.078205] tcp_sendpage+0x80/0xd0 [ 1695.078616] ? tcp_sendpage_locked+0xc0/0xc0 [ 1695.079119] inet_sendpage+0xc9/0x130 [ 1695.079532] kernel_sendpage.part.0+0x146/0x290 [ 1695.080074] sock_sendpage+0xe5/0x140 [ 1695.080597] ? __sock_recv_ts_and_drops+0x430/0x430 [ 1695.081283] pipe_to_sendpage+0x2af/0x380 [ 1695.081894] ? propagate_umount+0x1550/0x1550 [ 1695.082570] ? splice_from_pipe_next.part.0+0x166/0x520 [ 1695.083328] __splice_from_pipe+0x43d/0x890 [ 1695.083942] ? propagate_umount+0x1550/0x1550 [ 1695.084515] generic_splice_sendpage+0xd5/0x140 [ 1695.085152] ? __do_sys_vmsplice+0x8d0/0x8d0 [ 1695.085781] ? security_file_permission+0xb1/0xe0 [ 1695.086456] ? __do_sys_vmsplice+0x8d0/0x8d0 [ 1695.087068] direct_splice_actor+0x10f/0x170 [ 1695.087688] splice_direct_to_actor+0x387/0x980 [ 1695.088341] ? pipe_to_sendpage+0x380/0x380 [ 1695.088950] ? do_splice_to+0x160/0x160 [ 1695.089495] ? security_file_permission+0xb1/0xe0 [ 1695.090167] do_splice_direct+0x1c4/0x290 [ 1695.090750] ? splice_direct_to_actor+0x980/0x980 [ 1695.091421] ? security_file_permission+0xb1/0xe0 [ 1695.092109] do_sendfile+0x553/0x11e0 [ 1695.092657] ? do_pwritev+0x270/0x270 [ 1695.093185] ? wait_for_completion_io+0x270/0x270 [ 1695.093854] ? rcu_read_lock_any_held+0x75/0xa0 [ 1695.094500] ? vfs_write+0x354/0xb10 [ 1695.095024] __x64_sys_sendfile64+0x1d1/0x210 [ 1695.095635] ? __ia32_sys_sendfile+0x220/0x220 [ 1695.096288] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1695.097086] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1695.097810] do_syscall_64+0x33/0x40 [ 1695.098318] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1695.099027] RIP: 0033:0x7efca6f2bb19 [ 1695.099540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1695.102087] RSP: 002b:00007efca4480188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1695.103142] RAX: ffffffffffffffda RBX: 00007efca703f020 RCX: 00007efca6f2bb19 [ 1695.104135] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 1695.105125] RBP: 00007efca44801d0 R08: 0000000000000000 R09: 0000000000000000 [ 1695.106103] R10: 00000080464c453f R11: 0000000000000246 R12: 0000000000000002 [ 1695.107085] R13: 00007ffdba8bcc9f R14: 00007efca4480300 R15: 0000000000022000 08:42:40 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x58, 0x1, 0x1, 0x3, 0x10000000, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0xffffffffffffff90, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) [ 1710.373560] FAULT_INJECTION: forcing a failure. [ 1710.373560] name failslab, interval 1, probability 0, space 0, times 0 [ 1710.375220] CPU: 1 PID: 10651 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 1710.376206] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1710.377327] Call Trace: [ 1710.377757] dump_stack+0x107/0x167 [ 1710.378341] should_fail.cold+0x5/0xa [ 1710.378877] ? create_object.isra.0+0x3a/0xa20 [ 1710.379552] should_failslab+0x5/0x20 [ 1710.380082] kmem_cache_alloc+0x5b/0x310 [ 1710.380639] create_object.isra.0+0x3a/0xa20 [ 1710.381219] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1710.381939] kmem_cache_alloc+0x159/0x310 [ 1710.382518] getname_flags.part.0+0x50/0x4f0 [ 1710.383119] getname+0x8e/0xd0 [ 1710.383561] __io_openat_prep+0x228/0x4c0 [ 1710.384147] io_submit_sqes+0xacc/0x8610 [ 1710.384703] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1710.385390] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1710.386054] ? find_held_lock+0x2c/0x110 [ 1710.386594] ? io_submit_sqes+0x8610/0x8610 [ 1710.387159] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1710.387805] ? wait_for_completion_io+0x270/0x270 [ 1710.388497] ? rcu_read_lock_any_held+0x75/0xa0 [ 1710.389135] ? vfs_write+0x354/0xb10 [ 1710.389634] ? fput_many+0x2f/0x1a0 [ 1710.390132] ? ksys_write+0x1a9/0x260 [ 1710.390646] ? __ia32_sys_read+0xb0/0xb0 [ 1710.391214] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1710.391956] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1710.392706] do_syscall_64+0x33/0x40 [ 1710.393245] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1710.393947] RIP: 0033:0x7faee6584b19 [ 1710.394487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1710.397036] RSP: 002b:00007faee3afa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1710.398091] RAX: ffffffffffffffda RBX: 00007faee6697f60 RCX: 00007faee6584b19 [ 1710.399049] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1710.399995] RBP: 00007faee3afa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1710.400980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1710.402018] R13: 00007fff102f569f R14: 00007faee3afa300 R15: 0000000000022000 [ 1710.436734] hpet: Lost 3 RTC interrupts 08:42:40 executing program 3: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x1000000, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11410, 0x84b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = pkey_alloc(0x0, 0x2) r2 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r2) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x9, r1) gettid() r3 = getpid() perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xdf, 0x3, 0x8, 0x0, 0x0, 0x4, 0x1001c, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x800000, 0x2, @perf_config_ext={0x4, 0x7f}, 0x11a4, 0x1, 0x6, 0x9, 0x80000001, 0xa30, 0x8, 0x0, 0x9}, r3, 0xf, r0, 0x3) munlock(&(0x7f0000ff2000/0x3000)=nil, 0x3000) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) pkey_mprotect(&(0x7f0000ff1000/0x1000)=nil, 0x1000, 0x2000009, r2) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000010, 0xffffffffffffffff) process_vm_readv(r3, &(0x7f00000004c0)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)=""/235, 0xeb}, {&(0x7f0000000200)=""/231, 0xe7}, {&(0x7f0000000300)=""/53, 0x35}, {&(0x7f0000000340)=""/193, 0xc1}, {&(0x7f0000000440)=""/96, 0x60}], 0x6, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/141, 0x8d}, {&(0x7f0000000600)=""/125, 0x7d}, {&(0x7f0000000680)=""/4, 0x4}], 0x3, 0x0) fallocate(r4, 0x0, 0x0, 0x8800000) 08:42:40 executing program 7: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x80464c453f) (fail_nth: 13) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x10, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3ab", 0x6f}], 0x1, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @tclass={{0x14}}, @hoplimit={{0x14}}], 0x58}, 0x4000) 08:42:40 executing program 4: openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000100)=ANY=[@ANYBLOB="caa420916e71e8e80d9f0154e43e8a31f5e12107fa9540e7e0b253d8fbe8e4fd64da19acad5975033b401a736f0bf0bc9f4c39d041cf1b1ad9c901318f816e4704", @ANYRESHEX, @ANYRESHEX, @ANYRESDEC, @ANYRES16, @ANYRES32=r0]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r2) sendmsg$nl_generic(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x14, 0x1d, 0x301, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0xfffffffffffffe57, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x5e, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000280), 0x8) io_submit(0x0, 0x1, &(0x7f00000006c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000280), 0x8) io_submit(0x0, 0x1, &(0x7f00000006c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0}]) openat(r4, &(0x7f0000000080)='./file0\x00', 0x6a000, 0x16e) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000000)=0x3) 08:42:40 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) pread64(r0, &(0x7f0000000180)=""/199, 0xc7, 0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4008040) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fcntl$setstatus(r2, 0x4, 0xf0ac3d2370543000) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x5}, 0x1c705, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x4052, r4, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000140)={0x2, 0x3, 0xffff, 0x3}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000001d00020000000000000010000400020008001200", @ANYRES32=r5, @ANYBLOB="8e2afb567c5049dab9732cf28484b893fcfd880ab5baea589e57661b1636f8952dae03129ab89e4e7a135718433900cf3d4ff0ae317eeacc91e3da5a28218297aff7a03d9c33fea62687074915caa746f95b"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0xa, 0x4e21, 0x81, @private0, 0xdf}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3abf5375c3866c0afd7148bb0dbf63d6a303e9125d9ad676bffcd27b2c53e52bcf1a1ce477ea55f678c2ed40464e3474c6156a7f6eaca23d80e426209b43d6d6818277a8e2f463ee217205a30440776e59857fc14fc2572251bbb80eaee7edc46e42abe63c1ba32adb2fdb60513e80fde", 0xde}], 0x1, &(0x7f00000005c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x80000001}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x33, 0x0, '\x00', [@pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0xffff}}, @hopopts={{0x50, 0x29, 0x36, {0xff, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0xef}, @calipso={0x7, 0x28, {0x3, 0x8, 0x8, 0x4, [0xfffffffffffffeff, 0x6, 0x8, 0x1]}}, @ra={0x5, 0x2, 0x6}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @rthdr={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x2, 0x1f, 0x0, [@remote]}}}], 0x138}, 0x4000) 08:42:40 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x20042, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x10010, r0, 0x39) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200080, 0x23456}, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f0000000340)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 32) 08:42:40 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) pread64(r0, &(0x7f0000000180)=""/199, 0xc7, 0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4008040) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fcntl$setstatus(r2, 0x4, 0xf0ac3d2370543000) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x5}, 0x1c705, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x4052, r4, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000140)={0x2, 0x3, 0xffff, 0x3}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000001d00020000000000000010000400020008001200", @ANYRES32=r5, @ANYBLOB="8e2afb567c5049dab9732cf28484b893fcfd880ab5baea589e57661b1636f8952dae03129ab89e4e7a135718433900cf3d4ff0ae317eeacc91e3da5a28218297aff7a03d9c33fea62687074915caa746f95b"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0xa, 0x4e21, 0x81, @private0, 0xdf}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3abf5375c3866c0afd7148bb0dbf63d6a303e9125d9ad676bffcd27b2c53e52bcf1a1ce477ea55f678c2ed40464e3474c6156a7f6eaca23d80e426209b43d6d6818277a8e2f463ee217205a30440776e59857fc14fc2572251bbb80eaee7edc46e42abe63c1ba32adb2fdb60513e80fde", 0xde}], 0x1, &(0x7f00000005c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x80000001}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x33, 0x0, '\x00', [@pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0xffff}}, @hopopts={{0x50, 0x29, 0x36, {0xff, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0xef}, @calipso={0x7, 0x28, {0x3, 0x8, 0x8, 0x4, [0xfffffffffffffeff, 0x6, 0x8, 0x1]}}, @ra={0x5, 0x2, 0x6}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @rthdr={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x2, 0x1f, 0x0, [@remote]}}}], 0x138}, 0x4000) 08:42:40 executing program 0: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000500)={{0x0, 0x101, 0x3f, 0x8000, 0x29, 0x10000, 0xff, 0xfe6, 0x100, 0x5, 0x1, 0xbd, 0x10000, 0x100000000, 0x100000001}, 0x40, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = syz_io_uring_setup(0x149e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x3af, 0x0, r1}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = socket$inet(0x2, 0xa, 0x1) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e22, @loopback}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c1823", 0x12}, {0x0}], 0x2}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r2, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x80101) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) syz_open_dev$rtc(&(0x7f0000000380), 0x0, 0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) ftruncate(r6, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r6, 0x40086602, &(0x7f00000001c0)={0x0, 0x0, 0xfffffffd, 0x8000, 0xffffff24}) read(0xffffffffffffffff, 0x0, 0x0) write$binfmt_elf64(r6, &(0x7f00000001c0)=ANY=[], 0xfdef) [ 1710.460742] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1710.461974] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1710.473755] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1710.542437] FAULT_INJECTION: forcing a failure. [ 1710.542437] name failslab, interval 1, probability 0, space 0, times 0 [ 1710.544112] CPU: 0 PID: 10652 Comm: syz-executor.7 Not tainted 5.10.237 #1 [ 1710.545121] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1710.546278] Call Trace: [ 1710.546667] dump_stack+0x107/0x167 [ 1710.547177] should_fail.cold+0x5/0xa [ 1710.547666] ? __alloc_skb+0x6d/0x5b0 [ 1710.548212] should_failslab+0x5/0x20 [ 1710.548725] kmem_cache_alloc_node+0x55/0x330 [ 1710.549388] __alloc_skb+0x6d/0x5b0 [ 1710.549920] __tcp_send_ack.part.0+0x67/0x650 [ 1710.550618] tcp_send_ack+0x7d/0xa0 [ 1710.551411] __tcp_ack_snd_check+0x152/0xa20 [ 1710.552034] tcp_rcv_established+0x97a/0x1e00 [ 1710.552673] ? tcp_check_space+0x6c0/0x6c0 [ 1710.553263] ? __release_sock+0xd0/0x3b0 [ 1710.553848] tcp_v6_do_rcv+0xb8a/0x1590 [ 1710.554407] ? trace_hardirqs_on+0x5b/0x180 [ 1710.555041] __release_sock+0x139/0x3b0 [ 1710.555614] release_sock+0x54/0x1b0 [ 1710.556138] tcp_sendpage+0x90/0xd0 [ 1710.556640] ? tcp_sendpage_locked+0xc0/0xc0 [ 1710.557237] inet_sendpage+0xc9/0x130 [ 1710.557733] kernel_sendpage.part.0+0x146/0x290 [ 1710.558387] sock_sendpage+0xe5/0x140 [ 1710.558967] ? __sock_recv_ts_and_drops+0x430/0x430 [ 1710.559630] pipe_to_sendpage+0x2af/0x380 [ 1710.560238] ? propagate_umount+0x1550/0x1550 [ 1710.560826] ? splice_from_pipe_next.part.0+0x166/0x520 [ 1710.561518] __splice_from_pipe+0x43d/0x890 [ 1710.562075] ? propagate_umount+0x1550/0x1550 [ 1710.562669] generic_splice_sendpage+0xd5/0x140 [ 1710.563300] ? __do_sys_vmsplice+0x8d0/0x8d0 [ 1710.563935] ? security_file_permission+0xb1/0xe0 [ 1710.564621] ? __do_sys_vmsplice+0x8d0/0x8d0 [ 1710.565253] direct_splice_actor+0x10f/0x170 [ 1710.565871] splice_direct_to_actor+0x387/0x980 [ 1710.566508] ? pipe_to_sendpage+0x380/0x380 [ 1710.567223] ? do_splice_to+0x160/0x160 [ 1710.567783] ? security_file_permission+0xb1/0xe0 [ 1710.568485] do_splice_direct+0x1c4/0x290 [ 1710.569085] ? splice_direct_to_actor+0x980/0x980 [ 1710.569749] ? security_file_permission+0xb1/0xe0 [ 1710.570450] do_sendfile+0x553/0x11e0 [ 1710.571008] ? do_pwritev+0x270/0x270 [ 1710.571543] ? wait_for_completion_io+0x270/0x270 [ 1710.572317] ? rcu_read_lock_any_held+0x75/0xa0 [ 1710.573008] ? vfs_write+0x354/0xb10 [ 1710.573509] __x64_sys_sendfile64+0x1d1/0x210 [ 1710.574114] ? __ia32_sys_sendfile+0x220/0x220 [ 1710.574785] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1710.575569] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1710.576318] do_syscall_64+0x33/0x40 [ 1710.576807] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1710.577485] RIP: 0033:0x7efca6f2bb19 [ 1710.578027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1710.580708] RSP: 002b:00007efca44a1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1710.581727] RAX: ffffffffffffffda RBX: 00007efca703ef60 RCX: 00007efca6f2bb19 [ 1710.582822] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 1710.583796] RBP: 00007efca44a11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1710.584851] R10: 00000080464c453f R11: 0000000000000246 R12: 0000000000000002 [ 1710.585887] R13: 00007ffdba8bcc9f R14: 00007efca44a1300 R15: 0000000000022000 [ 1710.587096] hpet: Lost 2 RTC interrupts ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, &(0x7f0000017980)=ANY=[@ANYBLOB="6e0e0000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000da1e1f3e588f45e8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001ebdf8c17a582b776de72a02e9fb041aa2a99f927348bcb2ebb801ff9d97d1edcef61088067184f0b79238ba54aa81dad02940e631233b29300d063a4caba352b1dd76fcf60f9bf46e16bba6d46bf4df3e18cf4a8dc4ce241224aa5eda8fdf5e2a2adc1860b4e699b6f6cfaa34bac4b0134c70fdb00b3e609f7f3de145832113c8e64d17a0892aa20b0b3ca570500a58a56077fc1948f4a95b10a4b4ef292f2a5453df8c5884380c4f27e7358360b87d271181ac0a10c3e029bacb4f402502c30f3b66592645cdeb27034fe5d4bd0a737152398465923497b85b9f3548eb99ac5425634419aec9d7810466c76f72a936480a2b63c127144321d062e886e2119f15577"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 08:42:40 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x58, 0x1, 0x1, 0x3, 0x11000000, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0xffffffffffffff90, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) 08:42:40 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, 0xffffffffffffffff) ioctl$HIDIOCINITREPORT(0xffffffffffffffff, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd_index=0x5, 0x0, 0x0, 0x1ff, 0xa, 0x1}, 0x9) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000300)={0x7, 0x4, 0xfffffff8, 0x4, 0x1, 0x2}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x541b, 0x0) read$snapshot(r3, &(0x7f0000000080), 0x0) r4 = mq_open(&(0x7f0000000100)='wfdno', 0x801, 0x83, &(0x7f0000000200)={0x6, 0x4, 0xb0}) write$binfmt_elf64(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/607], 0x25f) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) r5 = syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r5, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="2e2f67696cf48516633e0b5c333eb509653000"]) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) dup2(r8, r8) connect$inet6(r8, &(0x7f00000002c0)={0xa, 0x4e23, 0xffffffff, @mcast2, 0x6c40}, 0x1c) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB="2c7766646e6fc1", @ANYRESHEX=r7, @ANYBLOB=',\x00']) [ 1710.624875] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1710.626213] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1710.633974] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1710.638477] 9pnet: Insufficient options for proto=fd 08:42:40 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x20042, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x10010, r0, 0x39) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200080, 0x23456}, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f0000000340)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 33) 08:42:40 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) pread64(r0, &(0x7f0000000180)=""/199, 0xc7, 0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4008040) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fcntl$setstatus(r2, 0x4, 0xf0ac3d2370543000) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x5}, 0x1c705, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x4052, r4, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000140)={0x2, 0x3, 0xffff, 0x3}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000001d00020000000000000010000400020008001200", @ANYRES32=r5, @ANYBLOB="8e2afb567c5049dab9732cf28484b893fcfd880ab5baea589e57661b1636f8952dae03129ab89e4e7a135718433900cf3d4ff0ae317eeacc91e3da5a28218297aff7a03d9c33fea62687074915caa746f95b6bb5d48248ca"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0xa, 0x4e21, 0x81, @private0, 0xdf}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3abf5375c3866c0afd7148bb0dbf63d6a303e9125d9ad676bffcd27b2c53e52bcf1a1ce477ea55f678c2ed40464e3474c6156a7f6eaca23d80e426209b43d6d6818277a8e2f463ee217205a30440776e59857fc14fc2572251bbb80eaee7edc46e42abe63c1ba32adb2fdb60513e80fde", 0xde}], 0x1, &(0x7f00000005c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x80000001}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x33, 0x0, '\x00', [@pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0xffff}}, @hopopts={{0x50, 0x29, 0x36, {0xff, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0xef}, @calipso={0x7, 0x28, {0x3, 0x8, 0x8, 0x4, [0xfffffffffffffeff, 0x6, 0x8, 0x1]}}, @ra={0x5, 0x2, 0x6}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @rthdr={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x2, 0x1f, 0x0, [@remote]}}}], 0x138}, 0x4000) [ 1710.714423] FAULT_INJECTION: forcing a failure. [ 1710.714423] name failslab, interval 1, probability 0, space 0, times 0 [ 1710.716102] CPU: 0 PID: 10675 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 1710.717055] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1710.718114] Call Trace: [ 1710.718459] dump_stack+0x107/0x167 [ 1710.718958] should_fail.cold+0x5/0xa [ 1710.719464] ? create_object.isra.0+0x3a/0xa20 [ 1710.720091] should_failslab+0x5/0x20 [ 1710.720607] kmem_cache_alloc+0x5b/0x310 [ 1710.721160] create_object.isra.0+0x3a/0xa20 [ 1710.721788] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1710.722523] kmem_cache_alloc+0x159/0x310 [ 1710.723099] getname_flags.part.0+0x50/0x4f0 [ 1710.723687] getname+0x8e/0xd0 [ 1710.724136] __io_openat_prep+0x228/0x4c0 [ 1710.724694] io_submit_sqes+0xacc/0x8610 [ 1710.725276] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1710.725951] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1710.726575] ? find_held_lock+0x2c/0x110 [ 1710.727124] ? io_submit_sqes+0x8610/0x8610 [ 1710.727732] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1710.728433] ? wait_for_completion_io+0x270/0x270 [ 1710.729087] ? rcu_read_lock_any_held+0x75/0xa0 [ 1710.729689] ? vfs_write+0x354/0xb10 [ 1710.730189] ? fput_many+0x2f/0x1a0 [ 1710.730657] ? ksys_write+0x1a9/0x260 [ 1710.731151] ? __ia32_sys_read+0xb0/0xb0 [ 1710.731707] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1710.732443] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1710.733134] do_syscall_64+0x33/0x40 [ 1710.733616] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1710.734318] RIP: 0033:0x7faee6584b19 [ 1710.734801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1710.737361] RSP: 002b:00007faee3afa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1710.738419] RAX: ffffffffffffffda RBX: 00007faee6697f60 RCX: 00007faee6584b19 [ 1710.739399] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1710.740559] RBP: 00007faee3afa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1710.741579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1710.742574] R13: 00007fff102f569f R14: 00007faee3afa300 R15: 0000000000022000 [ 1710.743846] hpet: Lost 1 RTC interrupts 08:42:56 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) pread64(r0, &(0x7f0000000180)=""/199, 0xc7, 0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4008040) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fcntl$setstatus(r2, 0x4, 0xf0ac3d2370543000) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x5}, 0x1c705, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x4052, r4, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000140)={0x2, 0x3, 0xffff, 0x3}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000001d00020000000000000010000400020008001200", @ANYRES32=r5, @ANYBLOB="8e2afb567c5049dab9732cf28484b893fcfd880ab5baea589e57661b1636f8952dae03129ab89e4e7a135718433900cf3d4ff0ae317eeacc91e3da5a28218297aff7a03d9c33fea62687074915caa746f95b"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0xa, 0x4e21, 0x81, @private0, 0xdf}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3abf5375c3866c0afd7148bb0dbf63d6a303e9125d9ad676bffcd27b2c53e52bcf1a1ce477ea55f678c2ed40464e3474c6156a7f6eaca23d80e426209b43d6d6818277a8e2f463ee217205a30440776e59857fc14fc2572251bbb80eaee7edc46e42abe63c1ba32adb2fdb60513e80fde", 0xde}], 0x1, &(0x7f00000005c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x80000001}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x33, 0x0, '\x00', [@pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0xffff}}, @hopopts={{0x50, 0x29, 0x36, {0xff, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0xef}, @calipso={0x7, 0x28, {0x3, 0x8, 0x8, 0x4, [0xfffffffffffffeff, 0x6, 0x8, 0x1]}}, @ra={0x5, 0x2, 0x6}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @rthdr={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x2, 0x1f, 0x0, [@remote]}}}], 0x138}, 0x4000) 08:42:56 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x20042, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x10010, r0, 0x39) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200080, 0x23456}, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f0000000340)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 34) 08:42:56 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x58, 0x1, 0x1, 0x3, 0x48000000, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0xffffffffffffff90, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) 08:42:56 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_readv(r0, &(0x7f0000001a40)=[{&(0x7f00000018c0)=""/31, 0x1f}, {&(0x7f0000001b40)=""/124, 0x7a}, {&(0x7f0000001980)=""/161, 0xa1}], 0x3, &(0x7f0000001ec0)=[{&(0x7f0000001a80)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xffffffbc}, {&(0x7f0000001bc0)=""/122, 0x7a}, {&(0x7f0000001c40)=""/163, 0xa3}, {&(0x7f0000001d00)=""/231, 0xe7}, {&(0x7f0000001e00)}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/46, 0x2e}], 0x8, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[], 0xfdef) creat(&(0x7f0000000180)='./file0\x00', 0x1ea) ftruncate(r1, 0x2) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x1a1c01, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000001540)=ANY=[@ANYBLOB="e0000002ac141429000000000600000000000000000000ef5c4b9bbcff704b3bcc13c54a35007f000001e00000010a010101"], 0x28) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x14, 0x1, 0x1, 0x3, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) readv(r3, &(0x7f0000000580)=[{&(0x7f0000000080)=""/174, 0xae}, {&(0x7f00000001c0)=""/71, 0x47}, {&(0x7f00000002c0)=""/254, 0xfe}, {&(0x7f00000003c0)=""/142, 0x8e}, {&(0x7f0000000480)=""/233, 0xe9}], 0x5) 08:42:56 executing program 4: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000280), 0x8) io_submit(0x0, 0x1, &(0x7f00000006c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) r1 = openat(0xffffffffffffffff, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x88800, 0x28) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x39e8, &(0x7f0000000040)={0x0, 0x0, 0x10, 0x2, 0x137, 0x0, r1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f0000000100)) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqn(r2, 0x0, 0xc8, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) creat(0x0, 0x0) r3 = open(&(0x7f00000000c0)='./cgroup.cpu/cpuset.cpus\x00', 0x180, 0x14) r4 = syz_open_procfs$userns(0x0, &(0x7f0000000140)) fcntl$setlease(r4, 0x400, 0x1) fcntl$setlease(r3, 0x400, 0x1) [ 1726.218200] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1726.219601] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1726.230248] FAULT_INJECTION: forcing a failure. [ 1726.230248] name failslab, interval 1, probability 0, space 0, times 0 [ 1726.232115] CPU: 0 PID: 10686 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 1726.233098] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1726.234253] Call Trace: 08:42:56 executing program 0: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)}) io_cancel(0x0, 0x0, 0x0) 08:42:56 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) pread64(r0, &(0x7f0000000180)=""/199, 0xc7, 0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4008040) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fcntl$setstatus(r2, 0x4, 0xf0ac3d2370543000) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x5}, 0x1c705, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x4052, r4, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000140)={0x2, 0x3, 0xffff, 0x3}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000001d00020000000000000010000400020008001200", @ANYRES32=r5, @ANYBLOB="8e2afb567c5049dab9732cf28484b893fcfd880ab5baea589e57661b1636f8952dae03129ab89e4e7a135718433900cf3d4ff0ae317eeacc91e3da5a28218297aff7a03d9c33fea62687074915caa746f95b6bb5d48248ca"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0xa, 0x4e21, 0x81, @private0, 0xdf}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3abf5375c3866c0afd7148bb0dbf63d6a303e9125d9ad676bffcd27b2c53e52bcf1a1ce477ea55f678c2ed40464e3474c6156a7f6eaca23d80e426209b43d6d6818277a8e2f463ee217205a30440776e59857fc14fc2572251bbb80eaee7edc46e42abe63c1ba32adb2fdb60513e80fde", 0xde}], 0x1, &(0x7f00000005c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x80000001}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x33, 0x0, '\x00', [@pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0xffff}}, @hopopts={{0x50, 0x29, 0x36, {0xff, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0xef}, @calipso={0x7, 0x28, {0x3, 0x8, 0x8, 0x4, [0xfffffffffffffeff, 0x6, 0x8, 0x1]}}, @ra={0x5, 0x2, 0x6}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @rthdr={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x2, 0x1f, 0x0, [@remote]}}}], 0x138}, 0x4000) 08:42:56 executing program 7: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x80464c453f) (fail_nth: 14) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x10, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3ab", 0x6f}], 0x1, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @tclass={{0x14}}, @hoplimit={{0x14}}], 0x58}, 0x4000) [ 1726.234659] dump_stack+0x107/0x167 [ 1726.235632] should_fail.cold+0x5/0xa [ 1726.236154] ? __alloc_file+0x21/0x320 [ 1726.236694] should_failslab+0x5/0x20 [ 1726.237204] kmem_cache_alloc+0x5b/0x310 [ 1726.237825] ? SOFTIRQ_verbose+0x10/0x10 [ 1726.238404] __alloc_file+0x21/0x320 [ 1726.238900] alloc_empty_file+0x6d/0x170 [ 1726.239484] path_openat+0xe6/0x2770 [ 1726.240001] ? __lock_acquire+0x1657/0x5b00 [ 1726.240639] ? path_lookupat+0x860/0x860 [ 1726.241213] ? perf_trace_lock+0xac/0x490 [ 1726.241798] ? SOFTIRQ_verbose+0x10/0x10 [ 1726.242356] ? __lockdep_reset_lock+0x180/0x180 [ 1726.242969] do_filp_open+0x190/0x3e0 [ 1726.243464] ? may_open_dev+0xf0/0xf0 [ 1726.244007] ? alloc_fd+0x2e7/0x670 [ 1726.244533] ? lock_downgrade+0x6d0/0x6d0 [ 1726.245111] ? do_raw_spin_lock+0x121/0x260 [ 1726.245719] ? rwlock_bug.part.0+0x90/0x90 [ 1726.246305] ? lock_chain_count+0x20/0x20 [ 1726.246878] ? stack_trace_save+0x8c/0xc0 [ 1726.247462] ? _raw_spin_unlock+0x1a/0x30 [ 1726.248051] ? alloc_fd+0x2e7/0x670 [ 1726.248590] io_openat2+0x24d/0xb80 [ 1726.249097] ? io_send+0x780/0x780 [ 1726.249558] ? perf_trace_lock+0xac/0x490 [ 1726.250112] ? SOFTIRQ_verbose+0x10/0x10 [ 1726.250689] io_issue_sqe+0x2cd/0x77b0 [ 1726.251241] ? lock_acquire+0x197/0x470 [ 1726.251864] ? find_held_lock+0x2c/0x110 [ 1726.252457] ? __virt_addr_valid+0x346/0x5d0 [ 1726.253040] ? io_connect+0x610/0x610 [ 1726.253553] ? __might_fault+0xd3/0x180 [ 1726.254118] ? lock_downgrade+0x6d0/0x6d0 [ 1726.254641] ? __virt_addr_valid+0x170/0x5d0 [ 1726.255203] ? __check_object_size+0x319/0x440 [ 1726.255850] __io_queue_sqe+0x90/0x9d0 [ 1726.256398] ? io_issue_sqe+0x77b0/0x77b0 [ 1726.256935] ? getname+0x96/0xd0 [ 1726.257395] io_submit_sqes+0x44aa/0x8610 [ 1726.257957] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1726.258625] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1726.259246] ? find_held_lock+0x2c/0x110 [ 1726.259803] ? io_submit_sqes+0x8610/0x8610 [ 1726.260382] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1726.261015] ? wait_for_completion_io+0x270/0x270 [ 1726.261635] ? rcu_read_lock_any_held+0x75/0xa0 [ 1726.262206] ? vfs_write+0x354/0xb10 [ 1726.262685] ? fput_many+0x2f/0x1a0 [ 1726.263134] ? ksys_write+0x1a9/0x260 [ 1726.263627] ? __ia32_sys_read+0xb0/0xb0 [ 1726.264160] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1726.264854] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1726.265593] do_syscall_64+0x33/0x40 [ 1726.266120] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1726.266870] RIP: 0033:0x7faee6584b19 [ 1726.267413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1726.270414] RSP: 002b:00007faee3afa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1726.271470] RAX: ffffffffffffffda RBX: 00007faee6697f60 RCX: 00007faee6584b19 [ 1726.272485] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1726.273501] RBP: 00007faee3afa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1726.274496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1726.275428] R13: 00007fff102f569f R14: 00007faee3afa300 R15: 0000000000022000 [ 1726.276666] hpet: Lost 2 RTC interrupts [ 1726.296678] FAULT_INJECTION: forcing a failure. [ 1726.296678] name failslab, interval 1, probability 0, space 0, times 0 [ 1726.298351] CPU: 1 PID: 10698 Comm: syz-executor.7 Not tainted 5.10.237 #1 [ 1726.299309] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1726.300640] Call Trace: [ 1726.301015] dump_stack+0x107/0x167 [ 1726.301527] should_fail.cold+0x5/0xa [ 1726.302058] ? create_object.isra.0+0x3a/0xa20 [ 1726.302708] should_failslab+0x5/0x20 [ 1726.303245] kmem_cache_alloc+0x5b/0x310 [ 1726.303810] create_object.isra.0+0x3a/0xa20 [ 1726.304448] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1726.305168] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 1726.305872] ? sk_stream_alloc_skb+0x109/0xc30 [ 1726.306506] __alloc_skb+0xb1/0x5b0 [ 1726.307037] sk_stream_alloc_skb+0x109/0xc30 [ 1726.307648] do_tcp_sendpages+0x9d6/0x1b80 [ 1726.308274] ? lock_release+0x680/0x680 [ 1726.308835] ? lock_downgrade+0x6d0/0x6d0 [ 1726.309423] ? tcp_send_mss+0x2b0/0x2b0 [ 1726.309974] ? mark_held_locks+0x9e/0xe0 [ 1726.310548] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1726.311284] ? __local_bh_enable_ip+0x9d/0x100 [ 1726.311955] tcp_sendpage+0x80/0xd0 [ 1726.312475] ? tcp_sendpage_locked+0xc0/0xc0 [ 1726.313098] inet_sendpage+0xc9/0x130 [ 1726.313634] kernel_sendpage.part.0+0x146/0x290 [ 1726.314284] sock_sendpage+0xe5/0x140 [ 1726.314823] ? __sock_recv_ts_and_drops+0x430/0x430 [ 1726.315495] pipe_to_sendpage+0x2af/0x380 [ 1726.316232] ? propagate_umount+0x1550/0x1550 [ 1726.316899] ? splice_from_pipe_next.part.0+0x166/0x520 [ 1726.317676] __splice_from_pipe+0x43d/0x890 [ 1726.318268] ? propagate_umount+0x1550/0x1550 [ 1726.318908] generic_splice_sendpage+0xd5/0x140 [ 1726.319566] ? __do_sys_vmsplice+0x8d0/0x8d0 [ 1726.320202] ? security_file_permission+0xb1/0xe0 [ 1726.320915] ? __do_sys_vmsplice+0x8d0/0x8d0 [ 1726.321524] direct_splice_actor+0x10f/0x170 [ 1726.322141] splice_direct_to_actor+0x387/0x980 [ 1726.322804] ? pipe_to_sendpage+0x380/0x380 [ 1726.323413] ? do_splice_to+0x160/0x160 [ 1726.323975] ? security_file_permission+0xb1/0xe0 [ 1726.324682] do_splice_direct+0x1c4/0x290 [ 1726.325271] ? splice_direct_to_actor+0x980/0x980 [ 1726.326002] ? security_file_permission+0xb1/0xe0 [ 1726.326721] do_sendfile+0x553/0x11e0 [ 1726.327263] ? do_pwritev+0x270/0x270 [ 1726.327841] ? wait_for_completion_io+0x270/0x270 [ 1726.328560] ? rcu_read_lock_any_held+0x75/0xa0 [ 1726.329230] ? vfs_write+0x354/0xb10 [ 1726.329762] __x64_sys_sendfile64+0x1d1/0x210 [ 1726.330389] ? __ia32_sys_sendfile+0x220/0x220 [ 1726.331027] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1726.331927] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1726.332706] do_syscall_64+0x33/0x40 [ 1726.333231] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1726.333992] RIP: 0033:0x7efca6f2bb19 [ 1726.334522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1726.337193] RSP: 002b:00007efca44a1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1726.338300] RAX: ffffffffffffffda RBX: 00007efca703ef60 RCX: 00007efca6f2bb19 [ 1726.339313] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 1726.340369] RBP: 00007efca44a11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1726.341360] R10: 00000080464c453f R11: 0000000000000246 R12: 0000000000000002 [ 1726.342359] R13: 00007ffdba8bcc9f R14: 00007efca44a1300 R15: 0000000000022000 [ 1726.427051] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1726.428312] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1726.432844] hpet: Lost 2 RTC interrupts 08:42:56 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x9}, {0x34bd, 0x40, 0x7, 0x81}, {0x400, 0x9, 0x80, 0x5}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x104) mq_open(0x0, 0x800, 0x0, 0x0) 08:42:56 executing program 0: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r1, 0x0, 0x0, 0x1000002) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r4, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee01}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {r4, r5}}, './file1\x00'}) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='.\x00', 0x2000003) finit_module(0xffffffffffffffff, &(0x7f0000000140)='([\x00', 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f00002d7000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x58, 0x1, 0x1, 0x3, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) mmap(&(0x7f0000459000/0x3000)=nil, 0x3000, 0x1000003, 0x10, r6, 0x206f9000) mknod$loop(&(0x7f0000000180)='./file1\x00', 0x40, 0x0) 08:42:56 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x58, 0x1, 0x1, 0x3, 0x4c000000, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0xffffffffffffff90, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) 08:42:56 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) pread64(r0, &(0x7f0000000180)=""/199, 0xc7, 0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4008040) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fcntl$setstatus(r2, 0x4, 0xf0ac3d2370543000) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x5}, 0x1c705, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x4052, r4, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000140)={0x2, 0x3, 0xffff, 0x3}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000001d00020000000000000010000400020008001200", @ANYRES32=r5, @ANYBLOB="8e2afb567c5049dab9732cf28484b893fcfd880ab5baea589e57661b1636f8952dae03129ab89e4e7a135718433900cf3d4ff0ae317eeacc91e3da5a28218297aff7a03d9c33fea62687074915caa746f95b6bb5d48248ca"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0xa, 0x4e21, 0x81, @private0, 0xdf}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3abf5375c3866c0afd7148bb0dbf63d6a303e9125d9ad676bffcd27b2c53e52bcf1a1ce477ea55f678c2ed40464e3474c6156a7f6eaca23d80e426209b43d6d6818277a8e2f463ee217205a30440776e59857fc14fc2572251bbb80eaee7edc46e42abe63c1ba32adb2fdb60513e80fde", 0xde}], 0x1, &(0x7f00000005c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x80000001}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x33, 0x0, '\x00', [@pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0xffff}}, @hopopts={{0x50, 0x29, 0x36, {0xff, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0xef}, @calipso={0x7, 0x28, {0x3, 0x8, 0x8, 0x4, [0xfffffffffffffeff, 0x6, 0x8, 0x1]}}, @ra={0x5, 0x2, 0x6}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @rthdr={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x2, 0x1f, 0x0, [@remote]}}}], 0x138}, 0x4000) 08:42:56 executing program 3: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) fadvise64(r1, 0x100000000, 0x0, 0x0) pread64(r0, &(0x7f00000010c0)=""/4080, 0xff0, 0x1) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x7f}}, './file0\x00'}) mkdirat$cgroup(r2, &(0x7f00000000c0)='syz0\x00', 0x1ff) 08:42:56 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x58, 0x1, 0x1, 0x3, 0x630d0000, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0xffffffffffffff90, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) [ 1726.516511] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1726.517844] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 08:42:56 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x20042, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x10010, r0, 0x39) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200080, 0x23456}, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f0000000340)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 35) 08:42:56 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x40, 0x2, &(0x7f0000000100)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = memfd_create(&(0x7f0000000480)='\x04\xe8\xebC\xd7_\xbf\x7f\xd8\xbd\x89\xd4\xed\xf9e\xe7\x19M\x10\xb4\xaf\xdb\x1a\xcf\x1a\xba<\x93\"\xfe\xf3\xc6\xf4\x1b\x97\x1c\xf9\xf2R\x9bf\xdcJ\x87\x8d\x96\x86\xe1\xf2\xda\xa4^Jd=\x12\x9e\x82\xe62\x8a\x13\xb3GO\x97\x96V\x98\xcb\xab5\xbe\x13\xe7\xca\xe3\xe4\x17}\x19.\'I)\xf8\x17\xa5\xcf\xa7R\xf5H\"\xa6\xca\fa\x90Id\x88\xc8\x95\xf9?H\x0e\xf1\xa1\xb1)@J\x162.\xed\xda\xefZ\xfej\xa2\xbb2\x85\xe4j\x8dq{\x1cv\xa64\xce\x7f\xdb\x91@\xc4\xdb\x99\x9e[,\xeb\xe2H!\xc0V\x82bBX\xe2\xbe2\xa8\x90P7\xf2\xf59@q\xb2S\x8d', 0x5) pwritev2(r0, &(0x7f0000000440)=[{&(0x7f00000002c0)="81", 0x1}], 0x1, 0x7ffd, 0x0, 0x0) fcntl$addseals(r0, 0x409, 0xe) fallocate(r0, 0x0, 0x0, 0x4) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x81, 0x0, 0x0, 0x0, 0x5c, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rename(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file2\x00') chroot(&(0x7f0000000280)='./file2\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x28c042, 0x18) r2 = openat(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0x509441, 0x18e) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) write(r2, &(0x7f00000003c0)="0289819eecd945439d8a8b16bf2bf2b67eefb591f4cf4db9ead300c6ac8ba94f7d4a804292338b2abd8472d8beffa0ce3669f0087fe6e41dd4cf60d158da85532ae8", 0x42) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreq(r4, 0x0, 0x4, 0x0, &(0x7f0000000340)) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x3f, 0x5, 0x34, 0x7, 0x0, 0x1, 0x10000, 0xb, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x4, @perf_config_ext={0x0, 0x33f3}, 0x18140, 0xe81, 0x3, 0x4, 0x0, 0x4, 0x4, 0x0, 0xe9a6, 0x0, 0x4000000000004}, 0x0, 0x1, r1, 0x3) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreq(r5, 0x0, 0x4, 0x0, &(0x7f0000000340)) fcntl$dupfd(r4, 0x0, r4) sendfile(r1, r3, 0x0, 0x100000001) [ 1726.595898] FAULT_INJECTION: forcing a failure. [ 1726.595898] name failslab, interval 1, probability 0, space 0, times 0 [ 1726.597856] CPU: 0 PID: 10719 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 1726.598995] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1726.600113] Call Trace: [ 1726.600535] dump_stack+0x107/0x167 [ 1726.601037] should_fail.cold+0x5/0xa [ 1726.601590] ? create_object.isra.0+0x3a/0xa20 [ 1726.602233] should_failslab+0x5/0x20 [ 1726.602780] kmem_cache_alloc+0x5b/0x310 [ 1726.603343] create_object.isra.0+0x3a/0xa20 [ 1726.603925] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1726.604675] kmem_cache_alloc+0x159/0x310 [ 1726.605291] ? SOFTIRQ_verbose+0x10/0x10 [ 1726.605856] __alloc_file+0x21/0x320 [ 1726.606394] alloc_empty_file+0x6d/0x170 [ 1726.606945] path_openat+0xe6/0x2770 [ 1726.607478] ? __lock_acquire+0x1657/0x5b00 [ 1726.608070] ? path_lookupat+0x860/0x860 [ 1726.608667] ? perf_trace_lock+0xac/0x490 [ 1726.609242] ? SOFTIRQ_verbose+0x10/0x10 [ 1726.609793] ? __lockdep_reset_lock+0x180/0x180 [ 1726.610409] do_filp_open+0x190/0x3e0 [ 1726.610887] ? may_open_dev+0xf0/0xf0 [ 1726.611399] ? alloc_fd+0x2e7/0x670 [ 1726.611860] ? lock_downgrade+0x6d0/0x6d0 [ 1726.612388] ? do_raw_spin_lock+0x121/0x260 [ 1726.612963] ? rwlock_bug.part.0+0x90/0x90 [ 1726.613522] ? lock_chain_count+0x20/0x20 [ 1726.614071] ? stack_trace_save+0x8c/0xc0 [ 1726.614638] ? _raw_spin_unlock+0x1a/0x30 [ 1726.615202] ? alloc_fd+0x2e7/0x670 [ 1726.615699] io_openat2+0x24d/0xb80 [ 1726.616165] ? io_send+0x780/0x780 [ 1726.616631] ? perf_trace_lock+0xac/0x490 [ 1726.617208] ? SOFTIRQ_verbose+0x10/0x10 [ 1726.617755] io_issue_sqe+0x2cd/0x77b0 [ 1726.618283] ? lock_acquire+0x197/0x470 [ 1726.618837] ? find_held_lock+0x2c/0x110 [ 1726.619373] ? __virt_addr_valid+0x346/0x5d0 [ 1726.619910] ? io_connect+0x610/0x610 [ 1726.620410] ? __might_fault+0xd3/0x180 [ 1726.620977] ? lock_downgrade+0x6d0/0x6d0 [ 1726.621602] ? __virt_addr_valid+0x170/0x5d0 [ 1726.622177] ? __check_object_size+0x319/0x440 [ 1726.622761] __io_queue_sqe+0x90/0x9d0 [ 1726.623299] ? io_issue_sqe+0x77b0/0x77b0 [ 1726.623889] ? getname+0x96/0xd0 [ 1726.624388] io_submit_sqes+0x44aa/0x8610 [ 1726.625007] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1726.625767] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1726.626464] ? find_held_lock+0x2c/0x110 [ 1726.627061] ? io_submit_sqes+0x8610/0x8610 [ 1726.627626] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1726.628272] ? wait_for_completion_io+0x270/0x270 [ 1726.628902] ? rcu_read_lock_any_held+0x75/0xa0 [ 1726.629560] ? vfs_write+0x354/0xb10 [ 1726.630078] ? fput_many+0x2f/0x1a0 [ 1726.630606] ? ksys_write+0x1a9/0x260 [ 1726.631083] ? __ia32_sys_read+0xb0/0xb0 [ 1726.631604] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1726.632358] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1726.633136] do_syscall_64+0x33/0x40 [ 1726.633822] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1726.634637] RIP: 0033:0x7faee6584b19 [ 1726.635108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1726.637636] RSP: 002b:00007faee3afa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1726.638899] RAX: ffffffffffffffda RBX: 00007faee6697f60 RCX: 00007faee6584b19 [ 1726.639984] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1726.641002] RBP: 00007faee3afa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1726.641998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1726.642944] R13: 00007fff102f569f R14: 00007faee3afa300 R15: 0000000000022000 [ 1726.644155] hpet: Lost 2 RTC interrupts [ 1726.657352] loop3: detected capacity change from 0 to 33559552 08:43:12 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x20042, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x10010, r0, 0x39) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200080, 0x23456}, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f0000000340)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 36) 08:43:12 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) pread64(r0, &(0x7f0000000180)=""/199, 0xc7, 0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4008040) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fcntl$setstatus(r2, 0x4, 0xf0ac3d2370543000) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x5}, 0x1c705, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x4052, r4, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000140)={0x2, 0x3, 0xffff, 0x3}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000001d00020000000000000010000400020008001200", @ANYRES32=r5, @ANYBLOB="8e2afb567c5049dab9732cf28484b893fcfd880ab5baea589e57661b1636f8952dae03129ab89e4e7a135718433900cf3d4ff0ae317eeacc91e3da5a28218297aff7a03d9c33fea62687074915caa746f95b6bb5d48248caaff636"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0xa, 0x4e21, 0x81, @private0, 0xdf}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3abf5375c3866c0afd7148bb0dbf63d6a303e9125d9ad676bffcd27b2c53e52bcf1a1ce477ea55f678c2ed40464e3474c6156a7f6eaca23d80e426209b43d6d6818277a8e2f463ee217205a30440776e59857fc14fc2572251bbb80eaee7edc46e42abe63c1ba32adb2fdb60513e80fde", 0xde}], 0x1, &(0x7f00000005c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x80000001}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x33, 0x0, '\x00', [@pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0xffff}}, @hopopts={{0x50, 0x29, 0x36, {0xff, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0xef}, @calipso={0x7, 0x28, {0x3, 0x8, 0x8, 0x4, [0xfffffffffffffeff, 0x6, 0x8, 0x1]}}, @ra={0x5, 0x2, 0x6}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @rthdr={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x2, 0x1f, 0x0, [@remote]}}}], 0x138}, 0x4000) 08:43:12 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) pread64(r0, &(0x7f0000000180)=""/199, 0xc7, 0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4008040) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fcntl$setstatus(r2, 0x4, 0xf0ac3d2370543000) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x5}, 0x1c705, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x4052, r4, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000140)={0x2, 0x3, 0xffff, 0x3}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000001d00020000000000000010000400020008001200", @ANYRES32=r5, @ANYBLOB="8e2afb567c5049dab9732cf28484b893fcfd880ab5baea589e57661b1636f8952dae03129ab89e4e7a135718433900cf3d4ff0ae317eeacc91e3da5a28218297aff7a03d9c33fea62687074915caa746f95b"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0xa, 0x4e21, 0x81, @private0, 0xdf}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3abf5375c3866c0afd7148bb0dbf63d6a303e9125d9ad676bffcd27b2c53e52bcf1a1ce477ea55f678c2ed40464e3474c6156a7f6eaca23d80e426209b43d6d6818277a8e2f463ee217205a30440776e59857fc14fc2572251bbb80eaee7edc46e42abe63c1ba32adb2fdb60513e80fde", 0xde}], 0x1, &(0x7f00000005c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x80000001}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x33, 0x0, '\x00', [@pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0xffff}}, @hopopts={{0x50, 0x29, 0x36, {0xff, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0xef}, @calipso={0x7, 0x28, {0x3, 0x8, 0x8, 0x4, [0xfffffffffffffeff, 0x6, 0x8, 0x1]}}, @ra={0x5, 0x2, 0x6}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @rthdr={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x2, 0x1f, 0x0, [@remote]}}}], 0x138}, 0x4000) [ 1742.318520] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1742.320010] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1742.342843] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4123 sclass=netlink_route_socket pid=10747 comm=syz-executor.0 [ 1742.349930] FAULT_INJECTION: forcing a failure. [ 1742.349930] name failslab, interval 1, probability 0, space 0, times 0 [ 1742.351874] CPU: 0 PID: 10741 Comm: syz-executor.6 Not tainted 5.10.237 #1 [ 1742.353214] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1742.354352] Call Trace: [ 1742.354714] dump_stack+0x107/0x167 [ 1742.355215] should_fail.cold+0x5/0xa [ 1742.355748] ? security_file_alloc+0x34/0x170 [ 1742.356343] should_failslab+0x5/0x20 [ 1742.356871] kmem_cache_alloc+0x5b/0x310 [ 1742.357398] security_file_alloc+0x34/0x170 [ 1742.357985] __alloc_file+0xb7/0x320 [ 1742.358481] alloc_empty_file+0x6d/0x170 [ 1742.359015] path_openat+0xe6/0x2770 [ 1742.359493] ? __lock_acquire+0x1657/0x5b00 [ 1742.360061] ? path_lookupat+0x860/0x860 [ 1742.360373] FAULT_INJECTION: forcing a failure. [ 1742.360373] name failslab, interval 1, probability 0, space 0, times 0 [ 1742.360625] ? perf_trace_lock+0xac/0x490 [ 1742.362716] ? SOFTIRQ_verbose+0x10/0x10 [ 1742.363301] ? __lockdep_reset_lock+0x180/0x180 [ 1742.363899] do_filp_open+0x190/0x3e0 [ 1742.364402] ? may_open_dev+0xf0/0xf0 [ 1742.364916] ? alloc_fd+0x2e7/0x670 [ 1742.365407] ? lock_downgrade+0x6d0/0x6d0 [ 1742.365941] ? do_raw_spin_lock+0x121/0x260 [ 1742.366538] ? rwlock_bug.part.0+0x90/0x90 [ 1742.367137] ? lock_chain_count+0x20/0x20 [ 1742.367656] ? stack_trace_save+0x8c/0xc0 [ 1742.368198] ? _raw_spin_unlock+0x1a/0x30 [ 1742.368819] ? alloc_fd+0x2e7/0x670 [ 1742.369322] io_openat2+0x24d/0xb80 [ 1742.369836] ? io_send+0x780/0x780 [ 1742.370382] ? perf_trace_lock+0xac/0x490 [ 1742.371066] ? SOFTIRQ_verbose+0x10/0x10 [ 1742.371748] io_issue_sqe+0x2cd/0x77b0 [ 1742.372256] ? lock_acquire+0x197/0x470 [ 1742.372801] ? find_held_lock+0x2c/0x110 [ 1742.373369] ? __virt_addr_valid+0x346/0x5d0 [ 1742.373975] ? io_connect+0x610/0x610 [ 1742.374540] ? __might_fault+0xd3/0x180 [ 1742.375127] ? lock_downgrade+0x6d0/0x6d0 [ 1742.375712] ? __virt_addr_valid+0x170/0x5d0 [ 1742.376322] ? __check_object_size+0x319/0x440 [ 1742.376987] __io_queue_sqe+0x90/0x9d0 [ 1742.377569] ? io_issue_sqe+0x77b0/0x77b0 [ 1742.378179] ? getname+0x96/0xd0 [ 1742.378677] io_submit_sqes+0x44aa/0x8610 [ 1742.379287] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1742.379988] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1742.380644] ? find_held_lock+0x2c/0x110 [ 1742.381203] ? io_submit_sqes+0x8610/0x8610 [ 1742.381818] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1742.382484] ? wait_for_completion_io+0x270/0x270 [ 1742.383193] ? rcu_read_lock_any_held+0x75/0xa0 [ 1742.383903] ? vfs_write+0x354/0xb10 [ 1742.384441] ? fput_many+0x2f/0x1a0 [ 1742.384962] ? ksys_write+0x1a9/0x260 [ 1742.385479] ? __ia32_sys_read+0xb0/0xb0 [ 1742.386024] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1742.386728] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1742.387447] do_syscall_64+0x33/0x40 [ 1742.387966] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1742.388741] RIP: 0033:0x7faee6584b19 [ 1742.389275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1742.391756] RSP: 002b:00007faee3afa188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1742.392817] RAX: ffffffffffffffda RBX: 00007faee6697f60 RCX: 00007faee6584b19 [ 1742.393846] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000004 [ 1742.394793] RBP: 00007faee3afa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1742.395810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1742.396775] R13: 00007fff102f569f R14: 00007faee3afa300 R15: 0000000000022000 [ 1742.397819] CPU: 1 PID: 10748 Comm: syz-executor.7 Not tainted 5.10.237 #1 [ 1742.398197] hpet: Lost 2 RTC interrupts [ 1742.399107] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1742.399120] Call Trace: [ 1742.401524] dump_stack+0x107/0x167 [ 1742.402048] should_fail.cold+0x5/0xa [ 1742.402852] should_failslab+0x5/0x20 08:43:12 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000003) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r2 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x3) r3 = signalfd(0xffffffffffffffff, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)=ANY=[@ANYBLOB="01006375006300"/17, @ANYBLOB="ff9d23b4c39731527e0042108d35000012"]) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f000004cc80)={{0x0, 0x2, 0xfffffffffffffff9, 0x6d, 0xa6, 0x0, 0x4e4, 0xe49f, 0x4, 0x7fffffff, 0x5, 0x2, 0xe6b, 0x0, 0x20}}) fallocate(r4, 0xa, 0x800, 0x3) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f000004dc80)) lseek(r0, 0x9, 0x3) lseek(r1, 0x0, 0x2) r10 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x128) copy_file_range(r10, 0x0, r1, 0x0, 0x200f5ef, 0x0) 08:43:12 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x58, 0x1, 0x1, 0x3, 0x640d0000, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0xffffffffffffff90, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) 08:43:12 executing program 3: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2000, 0x2a5e, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000340)={0x67, 0x7, '\x00', [@generic={0x0, 0x36, "e24b37cac1e3d21bd5bdb1ea1f932202e2bd199cc66c21c7dc27b16635657c6d7911995531ef2bc907440370f5d8aab7c484503b7482"}]}, 0x40) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85", 0x3}], 0x1}}, 0x0) syz_open_procfs(0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000004780)={0x0, 0x0, &(0x7f0000004680)=[{0x0}, {&(0x7f0000003540)=""/134, 0x86}, {0x0}], 0x3, &(0x7f0000004700)=""/96, 0x60}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x80000001) openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x204000, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x2, 0x0, 0x0) 08:43:12 executing program 7: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x80464c453f) (fail_nth: 15) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x10, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3ab", 0x6f}], 0x1, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @tclass={{0x14}}, @hoplimit={{0x14}}], 0x58}, 0x4000) 08:43:12 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x28, 0x101b, 0x8, 0x0, 0x0, {}, [@generic="06de42f2157bb9bf2ba6", @typed={0x8, 0x8d, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x2b}}]}, 0x28}}, 0x0) bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000), 0x14) getpeername$netlink(r0, &(0x7f0000000040), &(0x7f0000000100)=0xc) [ 1742.403556] __kmalloc_node_track_caller+0x74/0x3b0 [ 1742.404752] ? __tcp_send_ack.part.0+0x67/0x650 [ 1742.405442] __alloc_skb+0xb1/0x5b0 [ 1742.405966] __tcp_send_ack.part.0+0x67/0x650 [ 1742.406587] tcp_send_ack+0x7d/0xa0 [ 1742.407079] __tcp_ack_snd_check+0x152/0xa20 [ 1742.407724] tcp_rcv_established+0x97a/0x1e00 [ 1742.408358] ? tcp_check_space+0x6c0/0x6c0 [ 1742.408995] ? __release_sock+0xd0/0x3b0 [ 1742.409576] tcp_v6_do_rcv+0xb8a/0x1590 [ 1742.410132] ? trace_hardirqs_on+0x5b/0x180 [ 1742.410742] __release_sock+0x139/0x3b0 [ 1742.411345] release_sock+0x54/0x1b0 [ 1742.411873] tcp_sendpage+0x90/0xd0 sendmsg$nl_generic(r0, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000940)={0x1278, 0x21, 0x2, 0x70bd2d, 0x25dfdbfc, {0x19}, [@nested={0x4, 0x44}, @typed={0xc, 0x92, 0x0, 0x0, @u64=0x294}, @nested={0x1254, 0x17, 0x0, 0x1, [@typed={0x8, 0x71, 0x0, 0x0, @u32}, @typed={0x14, 0x86, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @generic="c7693e198a51d01f313253ee94c24f03c7473d0a48445ad0316109cf5f352a25618b47a3f758bf9e55f46d67a16056ead24084994e6066d5513bdb422b45a067768664f7a2c3cf90c3d8aa9dc27316dc7eabadc495eb2a6e7a8a33ce8c86335ed892b69139b4a4cb0d36394803f9a0d3a1073a8b4aee66597587657d2fa5b4f2fad5fc8dee758a8c9c51eca8ce4ff278213f9b62275f3f15e0a1f986d81b9f108f77bf8ce29ce77ac2a47edbf5989ca577133b9bee7ef2c02dd650ad69ad1f6063d005df4880e2592dbadf3a9fc6847994e351ea6326e1a4f2204a590cecd1d8544134e1b2bdb06892c72be3d68c61d9dacff41f947c1798e792a9081a41ae783bc238258028f021c1d7e0308be992b6208db1bf6beca6b7988b27951731c7571ac95395a4541fae6cd5b154265065f1525c0b64830a7480168fcd6e077641cbd760c351310675a7dd4b6fb64e152a1069a22e2ca8386cafe2bd13a0900f74cb9c9435887e2e91ada628efec25e902fb5e062cdefddac52b2ba2c810d06de2a1ddff63553cb32e05b249994f28a18d181dde7bf41631842f767f44b1a2e9ced27aa3ee9a259433e579859c62a1adc1a76245df0fd1fec2cdf24919661a60bb80258af4e1f6badb04bfe4719c3bf7f6ee250ba545a29df513d8423e367c3a8257682f78f36a36ed6c6335e72734059e7ca1452206a5a6c903ed22ce8fb127056f79d826f1610302b6c979ee9485aa979e40597b80762a527e94d43bdef6cd23f926928445b0b4008b02dc16f53ac7d0033dab2c95b8b61aeb2df89d8faad2e0989410d431fb8c1a5b2e982bfb36caffc78022522845e0bdeb9ece4e471258d7f27aa8bbb97e79589de135aba763df123b13da9f7dcdd9ffc30faff74f22500e6386a6aa2337bc791a1f99096a702658b5e26198b1b5a3897f408d8bc594c909039e82d51db8e5c14807201c0725b9c64d7d286884854f03ad6fad5428e8d50b9a3a18d718c375c9d0042b921d5fbb335d875f163ecf5d14508c2462a041f0eaf1c4219994bb2c2a9165c5eb0c856eb3a3960391a053a94ccd0d5cbcc042d4152ef461d204a28d218ca76cfdc3274ecc7d83b473146f53c3308c1a275741a50bfb6e4539c40059837f38730fdaa47b47b8dd787ce76b9159f2ab4d3622e20ca02545718cdf52691eadb259dc741c0bacba67892f69ad122402eed8a0453ce4423a89b847d35135017fc27ffed930a50ff77f2b6827a62530f02908cac3d82a372c05666f43d2ec886b99c1031ea0874160c0920b2d2eac3d8faaed0810e1b2f22f15a5b3cab82b4a67cbaf44dadabfd972a6ccae7e562494a3061ac0ac16998463e1b3b1e6b217fda9d55e997911ead06aa167f7d5f389a1f572cc3c628b425d105ceab553f2fd62c69a25738a42ce0807cf3f15afc5405ba010a9768ef654402e47849eb734868ec553a9be5d6d047b7873d470a302645a13d5c0d21824e3cff10877956acf4b588214fdb6634f38933006148bdb61f56d5bc276aa8b1527d2afe7566be61e59fdbc2893746b288189416a677732851c6c0cd080e88e9b227b25928d7a916cafc9ee7cdc6c26f0d48382940538befda3b39654fe5ef5a7549e3589047118dca6b033cd3ffe058ba92e74d831fc28faedd8b5643650adf1801fd67194c307b949076b27d5e83edae07a725268cef8aa7516e83519f75733b1b2541b61862cf7afc275d9b1c2248c28d5973d81307ec0b1da0d58cdadbbc91f4d57104b8a2f926ca4c08f7b36ad89e3f83f72f49c6bf67b7da35425eb08534bd2a68aa55dce94868963c02cb19c47bda1be57af0924073734fe73a7d2a732799fb6904bed3419cc345f3e67de32d3574156511fb665c7e39ce4a7769ef853392a58519fa847088b86d220ae822ffac9cb68b279f6be906a260b19e453b73f3eaf7ea23d6c19bfa6a81378cd4410dd679ffeda06a2eae42fe05608a434aecbfbcff2c8cdca38178023ec0a63d90370ef0c7cad06ebdca935995c800361e0112bcf73e664104e91199a8b0e41aa6db99d3b8760a1fe701ade4bf543c81b24231d1b042a993c1f2eacf4d96833f327fc42a8317f83892c51289fec7ea4759b4fc455dafeadc4026b491d73ce5cec4d430b800ee91c79b9dbcffc4fad978c175f7b130ee525bf549641e248529800c5c82dbe78733823b4f3292a8f7d81d9c735cc2083710996bb3c04e00a5c0c20e49103e3401d8820e1bebac2a62b7aca697531689d410772a86329a9360a1b00e0c75b41fa98674e6d87642b977c973c79833bf813ed51302a451f3079b5d841c1bcbbb6235313e06f7e1ab97dd44ae569f4ac59a776707071353db2f454bf0783e65f2bd50654a92b2e84dce662b4efee2a429ef3d219ed0936a7f1c1f0f46e8a619b6c39db5d97966afd256b0cf7d0468f34c3cd14da326a20e3ccc7d2b0ee0cf8a6a0af0a625839c3e24248d7c6289b7c9b773235f09c65d3025b6c2b7ca900457d392d0cfad5beef44ff82aa1f0addce62e2f2a3ad233202e23b232596d567f8daed6576b41e69c9ad29176149ef33767a81d9daf9651b63b69f034140a566f00b645e04a187576d171238d80ac8ea04df5af38ca8b7b24e627b51226228534c6d70da92de726924e0ccfd5cf524542c9902cb9ff636e3f410c7ecc42d33833625fa4fc2f6763762791da321877f743a5b71466e4047fa3cb379f8e5b37db9c03503abc62dd53754d122596bf2b75bbd11b77d74af9bb2b6b556fd94e5e4eab8f6aa516dc8d87e745cb20aa644acadc810190f774777573c12119d385107adae2e339dd4b7c4179a0039d56b065eb907c899697dd49b6fbae6ce4cabb0c9998a8817253821cd459a6c5fdb708d5cbb2b14f11f921d4967d88ad00ec3558cc37b09ea4293a11e3d114dd87fec41baf98413de17ffb2d34d16be86924b5571ec751fac005d6426b74403a21da8b6dbf42b46e5620cc9a4f3a18a8be195c4580cf685ed4310056192824ab229e8af7987ce607b56ff523209aa06291f965cbaec81ea127504c3aa290d1e9f456d9df5694f57a86b5859b2b23c42837ab0416c11771d9c8fcf8e2205b4fe5aa573af1cf2ea28d345b239d63961fe082c756cd27eb6ff0b50e5c31c2316e24dd294d05e6825b00998a29df31e9da4d668e3e80568687e336c2257b6f671f590e6e81ebafb5a07d6a90d4429fa544df58d94738a4518339d9fbd26ffcaf397cc31019b9ff4db287cea3f262b03ed8c2e4fd0de17be57984ecc7d2ab3b465fdf5dd05939b1bf83ed7fe1dc50c3e20de15aa2fdb4db3a024c2e97a57ec972f58065e5874f0ed87ed52e2f1f9c9f9ba9f70cd9952b620726474f25de1889338a00c35019fa2276fd87790f133386475bd6ed7bfbe167162bcc5f20a1ebbfcb6d41e8a69868f316702c4ed6f6adf0ddfac22e0861304e675b3b5ac0de0b01fc94f7b5b85792c70f0d11129378641706830507c079b0369605b03652325a2fa192dfc652199c0fe18b9cbab461ba71134dece1100c854958d1fffcc8f18d55697bb47f8ef625c40c3d9c5a2ad6952f2a9ebed769966d87b315db39dd6e37b7ecc76a761804cce4856d0b1124e59d9b6804a946116e58558ea8679e9b218a49f60a097d4937c8bdfcf70a8c513f481efc7769a2d2f0c41494a2bdbabb6e1dda73f5ab381b18e94547b398d40bd15c6a77efea5b20f220d7b769f138a03bf3f6466197be05bf60de2356383070fa749601d09aed08a8d631d30591b0a320f7049b14d3c5b187ab79b8540d3c4a5de6bd1ba3d6669e0db720551130322529622231181c9cb9761072f2c5a16c176b2d451aa54301120de8522f5de15212e9918c3bb1a59382b8123d2c9dcb203b7552f4d01434d92c1dc8542e92b2ed06ef044b530d4243caff532a3ed368b582541cb12981b36f8395c73d45e60699430cf6f06f103906126b658c2a404a265d6ac1cdc7cd4a31ccd53ca8548622096d66b7df099cd1d2931754eab08f41e1c87a636424437087abc99e5f45d02ddca1dcaeaf2e5585d834cea089b5121d4e9efdfdb32f435e848f43bd3ad8819d84b66bde0ba3e4b2fa74eaf16e8a3f28952b12fc32cf095684cbe72b4647b832f0131c25bae5d13e6b36326a95b5c075838cf3e4e9128c7f76c36652d57bf472a4e1c92759a2ac19cbfded1c9faf2a3f5f51b1b90dcc3814f631d4e827994a14c74a3fe450df2b78931b0c205f4fb6c6f075567fd8d8129f219f742f3858e8fcfbc217352e6211fceb719510eed45ae199e3a4efe246152b5aa4fb3dba757a2e39938d66194611477bb7166cc64a66f89a01a7240d736418098fc2920b91ea76ac68b79a6360a7939c5b58e51e33e130d66b27e7db1ce68de1df2850bdbca08c0ae355dfccefd8c2ff8dc19d9a9cd22a58a346fbd94ded3cef7e9246539f804beabcc6b5ea7a99b966895c3842a7e392b27a540746005d3ac458dd307016f1ddc3c6a55cf23cd886afcc94a5284d5234943f5b2b12325f84116c0a56ff48738b30e1aade58decdc48a8facbbaa9904d87e864e239f399d074abe1eb4c3f99052ef9b45b7ff6f63e61aa5a2b30b7dd17a85c1bec5e6316a08714bf14e0354d1676a116c6b1afdabe840a93afdd78c66253749b8c450d238789ae928b565f0048d06b345c710fa62b1d4c0c57e308026e64594b0d280be89125989af688c143bc91b83a3335fbf1907aac191ffbe996d1aa221bbac6a879580cfba13bd03b0f6de37c57f733ad85f3a48d132529f8125660e6ef006f95ea3484695450ee370937b7d559a376ae976e34f4ad42e70a3e9b6a9557e947da7c4cb764bb5f48cc8d9ed0029322300d2d22fddebbdb7e0ff68e3a63e2a197135bd5022795ae3eaf87b2ee660de0a5977b827b8d00c940c0155c21a2eef6dfdac3d4243de4ce7842c26998eea5449d783ec877c25af8d4f0312358df297888708c5f8a201d0f8fac3b0d18d91e769abb76fd54eb3a69703c3da54f46e06457d976d22aba70c1079dc0f0b06f06112770cebf46687f5b864803f63eeb87c4393491f58f3a9a8ed177a94fe20857911a1ac372c3d65b9feb832eb2c3e71f37c0b624e3aa71ee0ca48978658dcc966ea0e8c8470f254db02815e9280c1dca561b95ff3a9df341efcc819bf5f099bc5195d0aa61f0f6cf20b494a793d7d1489a7bacef1707301dcdfb06b2a861f50ffe1f5254b6116cf20d4387df9a05828010d3ff750b40f063c6b74917b73c70c0df6f959f8bcddf416f570cd22c3c23d5cb74836a497964b1650339c4d407ee0e4c9e8875593cb90069f9f67cee913d2f1aa4a34ceb0d049661fa430e0e5fc335f89b55f8f75b536a6f9365d084500e8cd099bfb4b7131490aa5df774f0b46af3c5f243b5bf7b25862b6a98ea48d814524004c040436b2853cb9a204e31f0f34607bb2f73f2a0e965cb46ae8f52abfdf5b5f530bb4a8683ea3bd5399aa454d9add0e79b75a9ee3d21cc856aebccd92959db7bc46f52f5a1b0a410285eb994407a3c65c1c11d87a94a24f7cfefff4e3ca6e55c7d62cffa8aec58e2f850394b12047d956c3d6ac3205019b791d75cca7dafd6a699aa60b2b3a7c34852f4c3165c79b4bd59f21a9854158dbec9a0779d2b71307559ca24f422302fa66143890196c74b790cf29e3d27a7997041d42f6a5fd856271bd42dbdf819493586954cf0245f5f27d2c549c9c9df1570f0d148714264cd0cf72afb1ef102a81e1a18bfeb5eef316715422f4513ded16a73539693a2", @generic="b518dafd60f4fe6e2d0183377e58f0b94389b805c52028bbcc43a611196bce77488efe12bdf8f57781bba82bc97490716b2e0f35c1ec5b7712dee9eb343e04aa5d6e9f645eff2869455b9b3ce03a814c4a83b6ba75fd37ed131f9ca51b05b370f7b7515821381c9ca11ed108a6cdc1ff20ef26a6552ad8db10aa13206b49c534ba50e7dcb22df4a330f6652960eb50be6fe0ba85ff63d0d8327b01e1e1b294", @generic="900eda43e20e59be91115a7c06001fbbba1ac442e5c34ef41b5b4a3042f86924f9cf5bf5a29f22e93624795df8a87bd1e69ab0055dd015219acf7035335e9ddd06392d8f975e88a70db93222d362ac82f8da606059b4f14654e2c12963b4d25ebc94f679e10a2f475b84a1efff5b150f5594fdc9edf5ea1b93c06698fd93052f97bc9b261b6cc9daa36946120723703fe9527c2c", @generic="060cb7b79a0e5025234124c66b4a52ec039353dffa30485f1deac4ea8a6ac0538e33af8e213f428c8deede0e4098573b450f90eb22c0e2e4e9573bbeed7eca2bf3c9cefd5cc2f1bb", @generic="9190ff1175b5ffedcd3c3061a9633e25fd7eb25f8efcd08e823c67142ec1d65b36a474f837ec10415b1d18560bdb1c3a59fe3bb1fd590dcdb73fd98363efb545071c25dd1487402d5fc8c6af36d3e7191f75ac34767fb3b3d44f049153db849942734eb0c5d938f64825f38d51b8765a4fba4e60ff0045392a62972d2dd1771a0a8f07baf77b48ebaa0da370a6709ce33b90e922df5eb2ba5cf7171a2f42cd4dae46ff748a370bb820", @typed={0x8, 0x4, 0x0, 0x0, @pid}, @typed={0x8, 0x24, 0x0, 0x0, @uid=0xee00}]}]}, 0x1278}, 0x1, 0x0, 0x0, 0x8880}, 0x4c000) r1 = syz_io_uring_setup(0x68d2, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000540)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, r0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x4, 0x3, 0x3, 0x2, {0xa, 0x4e23, 0x2a4acc5c, @mcast2, 0x80}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000003c0)="7c26c775674c83a4df7892e652554968c2", 0x11}, {&(0x7f0000000400)="9bf99c8cf4098426d9040c283ffe7a4e9bfbbe418d449983baa74dd514bc91ec45ef2748f423743c47876602003ca03651b1176ff0b7b8bfb345798670887a96727e358b2cbebad4ddbd659950766432f160", 0x52}, {&(0x7f0000000480)="4d9493aa7ffb76406fc4e78f5e7a0c1127304cac6ac4eca77e5dc57519ac366351e7977faa", 0x25}], 0x3}, 0x0, 0x40, 0x0, {0x0, r6}}, 0xef96) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x58, 0x1, 0x1, 0x3, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) write$binfmt_elf64(r7, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x1, 0x3f, 0x1, 0x5, 0x2, 0x6, 0x4, 0x31, 0x40, 0xeb, 0x400, 0x101, 0x38, 0x1, 0x4, 0x36e, 0x1f}, [{0x7, 0x3, 0x3f, 0x745, 0x9, 0x10001, 0x1, 0xff}, {0x7, 0x2d8b, 0x7, 0x100000000, 0xe0, 0xfffffffffffffffd, 0xffffffffffff0000, 0x1}], "d4a60852b6674f441b25e6778775e83f6a23e48013e0a55bcb5d"}, 0xca) [ 1742.412709] ? tcp_sendpage_locked+0xc0/0xc0 [ 1742.413448] inet_sendpage+0xc9/0x130 [ 1742.413996] kernel_sendpage.part.0+0x146/0x290 [ 1742.414701] sock_sendpage+0xe5/0x140 [ 1742.415262] ? __sock_recv_ts_and_drops+0x430/0x430 [ 1742.415969] pipe_to_sendpage+0x2af/0x380 [ 1742.416595] ? propagate_umount+0x1550/0x1550 [ 1742.417249] ? splice_from_pipe_next.part.0+0x166/0x520 [ 1742.417911] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4123 sclass=netlink_route_socket pid=10747 comm=syz-executor.0 [ 1742.417991] __splice_from_pipe+0x43d/0x890 [ 1742.420180] ? propagate_umount+0x1550/0x1550 [ 1742.420819] generic_splice_sendpage+0xd5/0x140 [ 1742.421486] ? __do_sys_vmsplice+0x8d0/0x8d0 [ 1742.422118] ? security_file_permission+0xb1/0xe0 [ 1742.422809] ? __do_sys_vmsplice+0x8d0/0x8d0 [ 1742.423424] direct_splice_actor+0x10f/0x170 [ 1742.424071] splice_direct_to_actor+0x387/0x980 [ 1742.424720] ? pipe_to_sendpage+0x380/0x380 [ 1742.425300] ? do_splice_to+0x160/0x160 [ 1742.425976] ? security_file_permission+0xb1/0xe0 [ 1742.426655] do_splice_direct+0x1c4/0x290 [ 1742.427248] ? splice_direct_to_actor+0x980/0x980 [ 1742.427978] ? security_file_permission+0xb1/0xe0 [ 1742.428698] do_sendfile+0x553/0x11e0 [ 1742.429232] ? do_pwritev+0x270/0x270 [ 1742.429764] ? wait_for_completion_io+0x270/0x270 [ 1742.430448] ? rcu_read_lock_any_held+0x75/0xa0 [ 1742.431116] ? vfs_write+0x354/0xb10 [ 1742.431653] __x64_sys_sendfile64+0x1d1/0x210 [ 1742.432270] ? __ia32_sys_sendfile+0x220/0x220 [ 1742.432955] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1742.433695] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1742.434415] do_syscall_64+0x33/0x40 [ 1742.434910] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1742.435618] RIP: 0033:0x7efca6f2bb19 [ 1742.436142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1742.438672] RSP: 002b:00007efca44a1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1742.439681] RAX: ffffffffffffffda RBX: 00007efca703ef60 RCX: 00007efca6f2bb19 [ 1742.440628] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 1742.441756] RBP: 00007efca44a11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1742.442687] R10: 00000080464c453f R11: 0000000000000246 R12: 0000000000000002 [ 1742.443616] R13: 00007ffdba8bcc9f R14: 00007efca44a1300 R15: 0000000000022000 08:43:12 executing program 0: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x4b68, 0x0) fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) timer_settime(0x0, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001600014d00000000000000003e4e3967a4ce41fd8183bf014d8d5614385c288f019d57e10d6ee26ce5a304197eca36a908e1d873289d07a0051d594b180a8f0ffa88c535c58f76dab5afe75663af207e44e5b20000000012f61f4a094f749d4c7e4d9e8dd05fc4c2e86606ac94faa93dad859a439c825d0495b0e57a24a47544c137f8227bffc3bfd2bb9572e84ff55e96092a4b1eb30fcf8f4c90a717f5a5b4b26cca405fcf4fedd81feb8a13193891a243c057c8d2ba688c606f6b"], 0x14}}, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000100)) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x80049367, &(0x7f0000000080)) timer_settime(0x0, 0x1, &(0x7f0000000400)={{}, {0x77359400}}, &(0x7f0000000440)) syz_io_uring_complete(0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x113703, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) 08:43:12 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x58, 0x1, 0x1, 0x3, 0x68000000, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0xffffffffffffff90, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) [ 1742.521990] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1742.523195] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 08:43:12 executing program 4: syz_mount_image$msdos(&(0x7f0000004040), &(0x7f0000004080)='./file0\x00', 0x0, 0x0, &(0x7f0000005100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6e66733d6e6f7374616c655f726f2c6e6f646f74732c736d618e55922074e1160b8cf4899c7d1dcd636b66736465663d002c00f83d54e6dce348ece03787b780e6c6c1a7087a494872f96f5974c244c38eb26660115aef4fc9790fa7872c0fbe751180f7f4db3dabffb6360f8b3e52e5e30304b5f9077ee591e2ada958ea4a693997c597232edeb0e5a2cdeb756cd3a8f57c5181872a7e628046f568c88f12a6aa228931"]) lsetxattr$security_evm(0x0, &(0x7f00000052c0), 0x0, 0x0, 0x0) 08:43:12 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) pread64(r0, &(0x7f0000000180)=""/199, 0xc7, 0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4008040) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fcntl$setstatus(r2, 0x4, 0xf0ac3d2370543000) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x5}, 0x1c705, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x4052, r4, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000140)={0x2, 0x3, 0xffff, 0x3}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000001d00020000000000000010000400020008001200", @ANYRES32=r5, @ANYBLOB="8e2afb567c5049dab9732cf28484b893fcfd880ab5baea589e57661b1636f8952dae03129ab89e4e7a135718433900cf3d4ff0ae317eeacc91e3da5a28218297aff7a03d9c33fea62687074915caa746f95b6bb5d48248caaff636"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0xa, 0x4e21, 0x81, @private0, 0xdf}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3abf5375c3866c0afd7148bb0dbf63d6a303e9125d9ad676bffcd27b2c53e52bcf1a1ce477ea55f678c2ed40464e3474c6156a7f6eaca23d80e426209b43d6d6818277a8e2f463ee217205a30440776e59857fc14fc2572251bbb80eaee7edc46e42abe63c1ba32adb2fdb60513e80fde", 0xde}], 0x1, &(0x7f00000005c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x80000001}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x33, 0x0, '\x00', [@pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0xffff}}, @hopopts={{0x50, 0x29, 0x36, {0xff, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0xef}, @calipso={0x7, 0x28, {0x3, 0x8, 0x8, 0x4, [0xfffffffffffffeff, 0x6, 0x8, 0x1]}}, @ra={0x5, 0x2, 0x6}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @rthdr={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x2, 0x1f, 0x0, [@remote]}}}], 0x138}, 0x4000) 08:43:12 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x58, 0x1, 0x1, 0x3, 0x6c000000, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0xffffffffffffff90, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) [ 1742.603588] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1742.605010] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 08:43:12 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x46e2, 0x102) execveat(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000840)=[&(0x7f0000000140)=']\x00', &(0x7f00000002c0)='\x00', &(0x7f0000000300)='security.capability\x00', &(0x7f0000000340)='security.capability\x00', &(0x7f00000003c0)='wlan0\x00', &(0x7f0000000440)='\xd7,+[-&@\x00'], &(0x7f0000000440), 0x1000) fallocate(0xffffffffffffffff, 0x78, 0x0, 0x0) ftruncate(r0, 0x1000003) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000640)=""/177, 0xb1}, {&(0x7f0000000b80)=""/145, 0x91}, {&(0x7f0000000b00)=""/108, 0x6c}], 0x3, 0x1, 0x8) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x73, 0x0, @perf_bp={0x0}, 0x8, 0x2, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000a00)={{{@in6=@empty}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000540)={{{@in=@remote, @in=@remote}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000180)=0xe8) clone3(&(0x7f0000000740)={0x40092340, &(0x7f0000000480)=0xffffffffffffffff, &(0x7f00000004c0), &(0x7f0000000500), {0x34}, 0x0, 0x0, 0x0, &(0x7f0000000700)}, 0x58) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000007c0)={0xfffffffd, 0x81, 0x667, 0x3f, 0x8}) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f00000008c0)=@v3={0x3000000, [{}, {0x1ff, 0x7f}]}, 0x18, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="3c0100001a00010000000000000000007f000001000000000000000000000000fc00000000000000000000003ddc000000000000000000000000000000000000761708b6c5f54afca11191ba2c7891e2a4d83da8af3f74aa36bde124610a3646ed2e7626d328bc31979f19bd60f66519ee1d31f5dadd12260c634850c860dda343374aa9029feec3dd5f3714eee9b6c4eef504247be6010f4998032b3cb7e98168ec3d93f954bdafdf2be8b5f65d117d89ad37ec29eede51c63563d1c965", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="6401010000000000000000000000000000000000320000007f000001000000000000000000000000ff030000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000033500000a00000000000000000000004c001200726663343130362867636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000"], 0x13c}}, 0x8004) fdatasync(r2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'veth1_to_bridge\x00'}) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x1, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) 08:43:12 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x58, 0x1, 0x1, 0x3, 0x74000000, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0xffffffffffffff90, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) [ 1742.706481] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1742.707878] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1742.718919] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1742.793535] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. 08:43:28 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x20040, 0x4) r0 = syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x0, 0x8, &(0x7f0000000740)=[{&(0x7f00000002c0)="b1cb871b5cbde2735b91533bb9b0c19e00bc4c101f285b6f6f238e0ecf31a6d0ef02a9de294d4c3ff2be0362f2ce4a4cd5b4c1e9c0d99c3550b7962aee12139c0c21e8b8288b2f8574f6915e9cb67951ef368fd1d623b74d2ac6387c26160720747acd28f1c7453a1e3a814a40a1c8e4ad053f462b380ba7a34864c47e8c2afb92e9d856303de497a2c44f161c336afafda07ea0a15d33c621f598ddf38faa51b634946431a38684b4e77a832eb5e2471bcf33", 0xb3, 0x1}, {&(0x7f0000000380)="86292b898e872382c069caeac2e2b5efefb3d7e66d1599d3799d718e2046e9baa6d58bb9af225855980aec323d4b21346e66927aeeda7571e49611afd878b6001fb2ae96a82801d6ccdb3d6a85f6369f2ffbde1af094a79eb03ce491c23e5d09ed46fb59274927de5c7ee620e876df416907dd2f821b298595107573ad716d8429e92e6cebff729810c512080e7404f3857ebfebab6e2544d086babe6c7bed79df93751aff331afd9390d06604b3c35c54e86b227da5b8e1055142b40c640601d99405cbc11cbc2ea280f3dd6adfe225eb1034247bd72626265f74c9e835e0", 0xdf, 0x7af47890}, {&(0x7f0000000480)="1f5875236083b0cee77787d23c3e6a98680f5cd11e21987357615da4a367656da38a96a8a936c36cd8a6cb5bcbc9a4f3b75dd26383802ce84e29e0ac3a8d809b18d39776bf5a69e8268d0b7b53bf4de77b404e997d878fea23ace36c0c9dd5ef34710a064698602f115d97757864a5c9f1cfc0e61b116d97e3133c9e8748b56888af0579b2a0b4fbd716c835", 0x8c, 0x9}, {&(0x7f0000000000)="adad48d6ac6c0e2639aa37740c586c104f233cdf1519ca3f2c25b264c1", 0x1d, 0xffff}, {&(0x7f0000000540)="a69f5c39ac5f2d449c32c80c41b5984436b800ef670db3b82bd573d7526a231a11f36ca861bf2f9e8ef3fe230964cc634f1897d17d18625a8f13bb96784fda2247c188f90fdf4eeaa44e5c2c72adce4362aa29d5ca", 0x55, 0x52}, {&(0x7f00000005c0)="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", 0xff, 0x6}, {&(0x7f00000000c0)="695bc5eeb48969fb3e816af8629350dd525ba9106c12507ce53472a5d73b02394b63a16f118e", 0x26, 0x9}, {&(0x7f00000006c0)="dac9836b02959e1ad2d5c45a6080a256575f01ff464c7a6e6ffa3c1b271fd4ffa31cff1b808c8de7d3e224196b611ffeaa9767a1aefd5cbbf3a4dea9399a3384fbb0849c2c85ce861735f703f2136e5efd6362f39cfef98e1eb54a9d419ccec1028cdfd8c09e64971a71c67106d2160ac7f5397f", 0x74, 0x1}], 0x10018c6, &(0x7f0000000200)=ANY=[]) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000280), 0x8) io_submit(0x0, 0x1, &(0x7f00000006c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) readlinkat(r1, &(0x7f0000000840)='./file1\x00', &(0x7f0000000880)=""/96, 0x60) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[{0x0, 0x0, 0x10009ff}], 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) openat(r0, &(0x7f0000000800)='./file1\x00', 0x400001, 0x100) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/188, 0xbc, 0x0) sendfile(r2, r3, 0x0, 0x100000001) 08:43:28 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) pread64(r0, &(0x7f0000000180)=""/199, 0xc7, 0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4008040) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fcntl$setstatus(r2, 0x4, 0xf0ac3d2370543000) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x5}, 0x1c705, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x4052, r4, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000140)={0x2, 0x3, 0xffff, 0x3}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000001d00020000000000000010000400020008001200", @ANYRES32=r5, @ANYBLOB="8e2afb567c5049dab9732cf28484b893fcfd880ab5baea589e57661b1636f8952dae03129ab89e4e7a135718433900cf3d4ff0ae317eeacc91e3da5a28218297aff7a03d9c33fea62687074915caa746f95b6bb5d48248caaff636"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0xa, 0x4e21, 0x81, @private0, 0xdf}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3abf5375c3866c0afd7148bb0dbf63d6a303e9125d9ad676bffcd27b2c53e52bcf1a1ce477ea55f678c2ed40464e3474c6156a7f6eaca23d80e426209b43d6d6818277a8e2f463ee217205a30440776e59857fc14fc2572251bbb80eaee7edc46e42abe63c1ba32adb2fdb60513e80fde", 0xde}], 0x1, &(0x7f00000005c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x80000001}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x33, 0x0, '\x00', [@pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0xffff}}, @hopopts={{0x50, 0x29, 0x36, {0xff, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0xef}, @calipso={0x7, 0x28, {0x3, 0x8, 0x8, 0x4, [0xfffffffffffffeff, 0x6, 0x8, 0x1]}}, @ra={0x5, 0x2, 0x6}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @rthdr={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x2, 0x1f, 0x0, [@remote]}}}], 0x138}, 0x4000) [ 1758.487455] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1758.488901] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 08:43:28 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000200)=0x7, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$sock_timeval(r1, 0x1, 0x43, &(0x7f0000000040)={0x0, 0xea60}, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) setsockopt$inet6_tcp_int(r2, 0x6, 0x3, &(0x7f00000001c0)=0x8000, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f00000000c0)=0x6, 0x4) sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x31, &(0x7f0000000540)=[{&(0x7f0000000100)=':\x00', 0xfffffdef}], 0x1}, 0x10044001) 08:43:28 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x20042, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x10010, r0, 0x39) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200080, 0x23456}, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f0000000340)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 37) 08:43:28 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x58, 0x1, 0x1, 0x3, 0x7a000000, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0xffffffffffffff90, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) 08:43:28 executing program 7: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x80464c453f) (fail_nth: 16) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x10, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3ab", 0x6f}], 0x1, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @tclass={{0x14}}, @hoplimit={{0x14}}], 0x58}, 0x4000) 08:43:28 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="580000000101030000000000000000000a0000004400028006000340000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac1414bb0c00028005000100005a0000"], 0x58}}, 0x200400c4) ftruncate(r0, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, 0x0, 0x7, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xe4}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x3}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x20044045) 08:43:28 executing program 0: setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f00000006c0)=ANY=[@ANYBLOB="2c1e000000000000c2040000000008ea4a1f55fe2f8587b0421e52399f3544411cf471ede419932450411d7c1213395cea49cb0a8a9f34d2abec013dee06e6f2fd7cc1fb3955adc54727858ef8b989cdf69a7c420ff43b5be44db61a286c40c2a737dd8480641fc2604d9be2cd39ec98f1d8efe1b4723da1e662ed4b2c7e31141b57c2fc3080132c20a1447cfe60bc90566ff26511d4a45c5d28539162bff25fc440a06d48de7662139b9023b5d8c682335942ab9d8d270c0071463ab3474e8d0b5e9f4eadb529a07947d8f3498c0943d405aeff0a5c623f6ea6568a3039ae16136fe2fbc35f2ea666c7782c18a534b90cad3b6e0443a590bc1a000000000000132bba922c148cc04dd162680fb5d59e9ffe3657485b9bda7dfabe2005d2b967b3a9e80183bc33c81fc3dc1de05a5e250d94b968f033bfc4060cfaae5ecbfc291b6b1c9f64c9084e2eca34bba4f758d397656ba558ba06cf45281914f9e8c4a2f3a8f3e978f1785fd076bb61be0e4af33b6996b4753ac61367374f2af4256dc952de976072bee3999f0eb7add6524c92c411aca22428de96786297a296bdbc8ef3d280a17b3a8b54984251d2604d27e76450fbd75eb32469fae18bf5b96d7ceacfb808c2c79ac465b5632923ecb9d4389f6a04336fe963642314f8edffbb6ded6cece64f8ff8716fab601b835e2999299b53b88211ba99e365a2"], 0x100) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f0000000340)={0x1, 0x81, 0x0, 0x6, 0x5}) readv(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000080), 0x4000) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x25, &(0x7f00000002c0), 0x4) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') preadv(r1, &(0x7f0000002400)=[{&(0x7f0000000140)=""/203, 0xcb}], 0x1, 0x7ff, 0x0) ioctl$KDENABIO(r1, 0x4b36) fdatasync(0xffffffffffffffff) poll(&(0x7f0000000140), 0x0, 0x8) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f00000000c0)) unshare(0x48020200) [ 1758.549159] hpet: Lost 1 RTC interrupts 08:43:28 executing program 3: perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1ff}, 0x907, 0x3, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0xfce1, 0x2, 0xfffffffe, 0xa2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000100)=0x0) io_uring_enter(0xffffffffffffffff, 0x5946, 0xaa06, 0x0, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001700), 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000", @ANYRES16=r5, @ANYBLOB="0b0b000000000000000001000000040001800312a7678b6efc8abce0c57463771f5f"], 0x18}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r6, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000200)=ANY=[@ANYBLOB=', \x00\x00', @ANYRESHEX=r3, @ANYRESHEX=r4, @ANYRES32=r8, @ANYBLOB="0c0002800800038004000280"], 0x2c}, 0x1, 0x0, 0x0, 0x10004010}, 0x0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000240)=ANY=[@ANYBLOB="24a1604ed85ec9004000", @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000040001800c0002800800038004000280"], 0x24}}, 0x0) 08:43:28 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x58, 0x1, 0x1, 0x3, 0x9effffff, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0xffffffffffffff90, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) [ 1758.563742] FAULT_INJECTION: forcing a failure. [ 1758.563742] name failslab, interval 1, probability 0, space 0, times 0 [ 1758.565328] CPU: 1 PID: 10800 Comm: syz-executor.7 Not tainted 5.10.237 #1 [ 1758.566394] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1758.567536] Call Trace: [ 1758.567895] dump_stack+0x107/0x167 [ 1758.568374] should_fail.cold+0x5/0xa [ 1758.568936] ? create_object.isra.0+0x3a/0xa20 [ 1758.569576] should_failslab+0x5/0x20 [ 1758.570149] kmem_cache_alloc+0x5b/0x310 [ 1758.570756] create_object.isra.0+0x3a/0xa20 [ 1758.571411] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1758.572170] kmem_cache_alloc_node+0x169/0x330 [ 1758.572828] __alloc_skb+0x6d/0x5b0 [ 1758.573442] __tcp_send_ack.part.0+0x67/0x650 [ 1758.574156] tcp_send_ack+0x7d/0xa0 [ 1758.574712] __tcp_ack_snd_check+0x152/0xa20 [ 1758.575387] tcp_rcv_established+0x97a/0x1e00 [ 1758.576130] ? tcp_check_space+0x6c0/0x6c0 [ 1758.576746] ? __release_sock+0xd0/0x3b0 [ 1758.577328] tcp_v6_do_rcv+0xb8a/0x1590 [ 1758.577926] ? trace_hardirqs_on+0x5b/0x180 [ 1758.578579] __release_sock+0x139/0x3b0 [ 1758.579159] release_sock+0x54/0x1b0 [ 1758.579724] tcp_sendpage+0x90/0xd0 [ 1758.580250] ? tcp_sendpage_locked+0xc0/0xc0 [ 1758.580954] inet_sendpage+0xc9/0x130 [ 1758.581513] kernel_sendpage.part.0+0x146/0x290 [ 1758.582319] sock_sendpage+0xe5/0x140 [ 1758.582879] ? __sock_recv_ts_and_drops+0x430/0x430 [ 1758.583549] pipe_to_sendpage+0x2af/0x380 [ 1758.584118] ? propagate_umount+0x1550/0x1550 [ 1758.584774] ? splice_from_pipe_next.part.0+0x166/0x520 [ 1758.585543] __splice_from_pipe+0x43d/0x890 [ 1758.586150] ? propagate_umount+0x1550/0x1550 [ 1758.586808] generic_splice_sendpage+0xd5/0x140 [ 1758.587462] ? __do_sys_vmsplice+0x8d0/0x8d0 [ 1758.588114] ? security_file_permission+0xb1/0xe0 [ 1758.588844] ? __do_sys_vmsplice+0x8d0/0x8d0 [ 1758.589458] direct_splice_actor+0x10f/0x170 [ 1758.590063] splice_direct_to_actor+0x387/0x980 [ 1758.590756] ? pipe_to_sendpage+0x380/0x380 [ 1758.591336] ? do_splice_to+0x160/0x160 [ 1758.591869] ? security_file_permission+0xb1/0xe0 [ 1758.592566] do_splice_direct+0x1c4/0x290 [ 1758.593134] ? splice_direct_to_actor+0x980/0x980 [ 1758.593846] ? security_file_permission+0xb1/0xe0 [ 1758.594543] do_sendfile+0x553/0x11e0 [ 1758.595070] ? do_pwritev+0x270/0x270 [ 1758.595624] ? wait_for_completion_io+0x270/0x270 [ 1758.596291] ? rcu_read_lock_any_held+0x75/0xa0 [ 1758.596963] ? vfs_write+0x354/0xb10 [ 1758.597614] __x64_sys_sendfile64+0x1d1/0x210 [ 1758.598257] ? __ia32_sys_sendfile+0x220/0x220 [ 1758.598914] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1758.599693] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1758.600391] do_syscall_64+0x33/0x40 [ 1758.600963] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1758.601730] RIP: 0033:0x7efca6f2bb19 [ 1758.602242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1758.604703] RSP: 002b:00007efca4480188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1758.605750] RAX: ffffffffffffffda RBX: 00007efca703f020 RCX: 00007efca6f2bb19 [ 1758.606728] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 1758.607625] RBP: 00007efca44801d0 R08: 0000000000000000 R09: 0000000000000000 [ 1758.608627] R10: 00000080464c453f R11: 0000000000000246 R12: 0000000000000002 [ 1758.609606] R13: 00007ffdba8bcc9f R14: 00007efca4480300 R15: 0000000000022000 08:43:28 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x20042, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x10010, r0, 0x39) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200080, 0x23456}, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f0000000340)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1758.665048] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1758.666475] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 08:43:28 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) pread64(r0, &(0x7f0000000180)=""/199, 0xc7, 0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4008040) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fcntl$setstatus(r2, 0x4, 0xf0ac3d2370543000) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x5}, 0x1c705, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x4052, r4, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000140)={0x2, 0x3, 0xffff, 0x3}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000001d00020000000000000010000400020008001200", @ANYRES32=r5, @ANYBLOB="8e2afb567c5049dab9732cf28484b893fcfd880ab5baea589e57661b1636f8952dae03129ab89e4e7a135718433900cf3d4ff0ae317eeacc91e3da5a28218297aff7a03d9c33fea62687074915caa746f95b6bb5d48248caaff63665"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0xa, 0x4e21, 0x81, @private0, 0xdf}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3abf5375c3866c0afd7148bb0dbf63d6a303e9125d9ad676bffcd27b2c53e52bcf1a1ce477ea55f678c2ed40464e3474c6156a7f6eaca23d80e426209b43d6d6818277a8e2f463ee217205a30440776e59857fc14fc2572251bbb80eaee7edc46e42abe63c1ba32adb2fdb60513e80fde", 0xde}], 0x1, &(0x7f00000005c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x80000001}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x33, 0x0, '\x00', [@pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0xffff}}, @hopopts={{0x50, 0x29, 0x36, {0xff, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0xef}, @calipso={0x7, 0x28, {0x3, 0x8, 0x8, 0x4, [0xfffffffffffffeff, 0x6, 0x8, 0x1]}}, @ra={0x5, 0x2, 0x6}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @rthdr={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x2, 0x1f, 0x0, [@remote]}}}], 0x138}, 0x4000) 08:43:28 executing program 4: ioctl$PTP_PEROUT_REQUEST(0xffffffffffffffff, 0x40383d03, &(0x7f00000000c0)={{}, {0x800, 0x3d3}, 0x3, 0x1}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0xc00000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000500), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x3a7b, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./mnt\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x58, 0x1, 0x1, 0x3, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) fstatfs(r7, &(0x7f0000000180)=""/34) r8 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(r8, 0x25, &(0x7f0000000600)={0x1}) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r8, 0x8008f511, &(0x7f0000000140)) lsetxattr$system_posix_acl(&(0x7f0000000080)='./mnt\x00', &(0x7f0000000400)='system.posix_acl_default\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="020000000100000000000000040000000000000010000000000000005a6cc9bd02000070ceb166a64094646cbbd46d858a1ca63df30ba87dbe900b0ab4c32a"], 0x24, 0x0) syz_io_uring_setup(0x1dd, &(0x7f00000002c0)={0x0, 0x8546, 0x2, 0x1, 0x1fa, 0x0, r6}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000000340), &(0x7f0000000400)) clone3(&(0x7f0000000000)={0x1242100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_setup(0x62d1, &(0x7f0000000200)={0x0, 0xb916, 0x1, 0x1, 0x338, 0x0, r5}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000280), &(0x7f0000000380)) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 08:43:28 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x58, 0x1, 0x1, 0x3, 0xdb000000, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0xffffffffffffff90, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) 08:43:28 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000068c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)=""/233, 0xe9}, {&(0x7f0000000900)=""/104, 0x68}], 0x2, &(0x7f0000000480)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000980)=@abs, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000a00)=""/185, 0xb9}, {&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000000500)=""/23, 0x17}], 0x3, &(0x7f0000001ac0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000001b00), 0x6e, &(0x7f0000002fc0)=[{&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/180, 0xb4}, {&(0x7f0000001c40)=""/179, 0xb3}, {&(0x7f0000002e00)=""/142, 0x8e}, {&(0x7f0000001d00)=""/93, 0x5d}, {&(0x7f0000002ec0)=""/163, 0xa3}, {&(0x7f0000002f80)}], 0x7}}, {{&(0x7f0000003040)=@abs, 0x6e, &(0x7f0000004340)=[{&(0x7f00000030c0)=""/4096, 0x1000}, {&(0x7f00000040c0)=""/238, 0xee}, {&(0x7f00000041c0)=""/107, 0x6b}, {&(0x7f0000004240)=""/108, 0x6c}, {&(0x7f00000042c0)=""/52, 0x34}, {&(0x7f0000004300)=""/53, 0x35}], 0x6, &(0x7f00000043c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}], 0xb8}}, {{&(0x7f0000004480), 0x6e, &(0x7f0000006640)=[{&(0x7f0000004500)=""/4096, 0x1000}, {&(0x7f0000005500)=""/92, 0x5c}, {&(0x7f0000005580)=""/4096, 0x1000}, {&(0x7f0000006580)=""/183, 0xb7}], 0x4, &(0x7f0000006680)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f00000066c0)=@abs, 0x6e, &(0x7f0000006780)=[{&(0x7f0000006740)}], 0x1, &(0x7f00000067c0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x100}}], 0x6, 0x40010140, &(0x7f0000006a40)) sendmsg$nl_generic(r5, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000007b40)=ANY=[@ANYBLOB="54f07ead0aeb42357bfc384f680ff38c4203d70f19e44cf393a222df2b73d3465fc99ba561dfb667d0807a6e83f4e93adaaf29bef7e52e542cac818d4ad4794ae63461213ac417b4aad6dc4c8033ad098f7f43401c75a729eb4d501d2ba9a81fb101adab836a11", @ANYRES32=r2, @ANYRES16, @ANYRESHEX=r6, @ANYRES32=r3, @ANYRES32=r4], 0x98}}, 0x440d0) close_range(r1, r0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000003c0)=""/4, 0x0) fcntl$addseals(r1, 0x409, 0x8) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000440)=0x7, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd_index=0x3, 0x8, &(0x7f0000000140)="ef3003e7d4d5730dd9bc0d2116cbd2ec2d4cef0397c67262d0882d05da47c1147ab3a8e1b3dfac797791d00529f0be39c7c3024d4751fcbfb4d3ec4b", 0x3c, 0x0, 0x1}, 0x9) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) r7 = add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffffc) request_key(&(0x7f00000002c0)='id_legacy\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380)='\x00', r7) r8 = add_key(&(0x7f0000000200)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, &(0x7f0000000540)="18726d0eed55eaa57fc580dc3a0b12e0a5ee08da294ac8119c4c73f93694f2a935d17a81959d084839f846dca8739131e4a9c45c6509af44529537eae3b5a4793a9a0aacfd7a75f2b566b874939829b82a35d20d1985a92c5d7ba971251e89286f64438db33a7f05fb0d1707fd3fa27a56032a79c1d09558fbbfcb2e5f36d3e7e1c749ad35c2064fa087cf6359507a36eb69853e0cdd920cbb7586aedf5a2e5a9a1a6b8d11c08a14918b01d07c92179dfae1ef58835b5fa4be28fbd3b3eac1c9f3cf74fbe25748c55d23902439133eecfafb2e0f", 0xd4, 0xfffffffffffffffa) add_key(0x0, 0x0, 0x0, 0x0, r8) unshare(0x4c000200) add_key$keyring(&(0x7f00000007c0), 0x0, 0x0, 0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000640)=[&(0x7f0000000240)='\x00', 0x0], &(0x7f0000000780)=[&(0x7f00000006c0)=':\'!!.\x00', &(0x7f0000000700)='keyring\x00', &(0x7f0000000740)=']%.+-+$&\x00'], 0x400) [ 1758.770463] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1758.771817] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 08:43:43 executing program 3: syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd_index=0x3, 0x2, 0x0, 0x0, 0x1d, 0x1, {0x0, r1}}, 0x0) r2 = syz_io_uring_setup(0x68d2, &(0x7f00000002c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x1, 0x2004, @fd_index=0x5, 0x0, 0x0, 0x0, 0x4, 0x1, {0x2}}, 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000000)='./file1\x00', 0x1, 0x400000, 0x12345, {0x0, r6}}, 0x40) syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x0, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) fdatasync(r8) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="7472616e733d0900000066646e6f320604000000448eda3e1b1a3d", @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB="2c63616368653d6d6d61702c756e616d653ddc2e3a2dbd2c00"]) [ 1773.683565] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1773.684724] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 08:43:43 executing program 2: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ocfs2_parent={0x18, 0x2, {{0x20000}}}, 0x0) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r2 = openat(r0, &(0x7f0000000780)='./file0\x00', 0x0, 0x11) openat$cgroup_ro(r2, &(0x7f00000007c0)='blkio.bfq.dequeue\x00', 0x0, 0x0) preadv2(r1, &(0x7f00000006c0)=[{&(0x7f0000000080)=""/41, 0x29}, {&(0x7f0000000100)=""/1, 0x1}, {&(0x7f0000000140)=""/104, 0x68}, {&(0x7f00000001c0)=""/229, 0xe5}, {&(0x7f00000002c0)=""/94, 0x5e}, {&(0x7f0000000340)=""/169, 0xa9}, {&(0x7f0000000400)=""/224, 0xe0}, {&(0x7f0000000500)=""/210, 0xd2}, {&(0x7f0000000600)=""/158, 0x9e}], 0x9, 0x6, 0x1ffe, 0x15) 08:43:43 executing program 7: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x80464c453f) (fail_nth: 17) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x10, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3ab", 0x6f}], 0x1, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @tclass={{0x14}}, @hoplimit={{0x14}}], 0x58}, 0x4000) 08:43:43 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x58, 0x1, 0x1, 0x3, 0xf0ffffff, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0xffffffffffffff90, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) 08:43:43 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) pread64(r0, &(0x7f0000000180)=""/199, 0xc7, 0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4008040) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fcntl$setstatus(r2, 0x4, 0xf0ac3d2370543000) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x5}, 0x1c705, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x4052, r4, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000140)={0x2, 0x3, 0xffff, 0x3}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000001d00020000000000000010000400020008001200", @ANYRES32=r5, @ANYBLOB="8e2afb567c5049dab9732cf28484b893fcfd880ab5baea589e57661b1636f8952dae03129ab89e4e7a135718433900cf3d4ff0ae317eeacc91e3da5a28218297aff7a03d9c33fea62687074915caa746f95b6bb5d48248caaff63665"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0xa, 0x4e21, 0x81, @private0, 0xdf}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3abf5375c3866c0afd7148bb0dbf63d6a303e9125d9ad676bffcd27b2c53e52bcf1a1ce477ea55f678c2ed40464e3474c6156a7f6eaca23d80e426209b43d6d6818277a8e2f463ee217205a30440776e59857fc14fc2572251bbb80eaee7edc46e42abe63c1ba32adb2fdb60513e80fde", 0xde}], 0x1, &(0x7f00000005c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x80000001}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x33, 0x0, '\x00', [@pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0xffff}}, @hopopts={{0x50, 0x29, 0x36, {0xff, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0xef}, @calipso={0x7, 0x28, {0x3, 0x8, 0x8, 0x4, [0xfffffffffffffeff, 0x6, 0x8, 0x1]}}, @ra={0x5, 0x2, 0x6}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @rthdr={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x2, 0x1f, 0x0, [@remote]}}}], 0x138}, 0x4000) 08:43:43 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x20042, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x10010, r0, 0x39) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200080, 0x23456}, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f0000000340)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 08:43:43 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1773.709451] hpet: Lost 1 RTC interrupts 08:43:43 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x10, 0x0, 0x5e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) pidfd_open(0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'macsec0\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000001000000030015c1e10000030000000220000001dee8fc13d94fbd813ba2a42000008068fb93f20624d998bb2383fbef2e605d20efd13ad8020454fe726d5ec46065bf6e5c2fd748a85e11257f7bcb5e353e437833e23493d0a2c56f32fb109b319f39c136029ed17373306bbe1bd7397563e3f4f4bb0399927dc534dec66e57"]}) r1 = dup(0xffffffffffffffff) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x28, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xff}]}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0xe4, r2, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x74}}}}, [@NL80211_ATTR_CQM={0x40, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x598}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xfffff67e}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x5}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x401, 0xf68c]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x1ff}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x8}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x81}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x2]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x39}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x509}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xfffffff7}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x62}]}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xffffff3d}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7f}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x62c}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xf}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40800}, 0x20000004) close(0xffffffffffffffff) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000340)={0x20000004}}, 0x81) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x8010, r0, 0x8000000) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/attr/sockcreate\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) unshare(0x48020200) 08:43:43 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x58, 0x1, 0x1, 0x3, 0xffffe000, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0xffffffffffffff90, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) [ 1773.779581] 9pnet: Could not find request transport: [ 1773.784643] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1773.786180] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 08:43:43 executing program 0: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000", 0x1a, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}, 0x0, 0x0, 0x472c, 0x0, 0x40, 0x0, 0x2, 0x0, 0x3}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000140)=0x5) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xc0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) poll(&(0x7f0000000040)=[{}], 0x1, 0x5) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f00000001c0)) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000180), 0x40800, 0x0) mq_timedsend(r2, &(0x7f0000000140), 0x0, 0x20, &(0x7f0000000340)={r5, r6+60000000}) copy_file_range(0xffffffffffffffff, 0x0, r4, &(0x7f0000000280)=0x10000, 0xc3a, 0x0) readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) mknodat$null(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0x5f1a33b91ca1aaee, 0x103) fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000002c0), 0x0, 0x0, 0x1) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x400) [ 1773.831441] FAULT_INJECTION: forcing a failure. [ 1773.831441] name failslab, interval 1, probability 0, space 0, times 0 [ 1773.833191] CPU: 1 PID: 10840 Comm: syz-executor.7 Not tainted 5.10.237 #1 [ 1773.834085] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1773.835145] Call Trace: [ 1773.835489] dump_stack+0x107/0x167 [ 1773.835963] should_fail.cold+0x5/0xa [ 1773.836458] ? __alloc_skb+0x6d/0x5b0 [ 1773.836968] should_failslab+0x5/0x20 [ 1773.837462] kmem_cache_alloc_node+0x55/0x330 [ 1773.838049] __alloc_skb+0x6d/0x5b0 [ 1773.838528] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1773.839217] sk_stream_alloc_skb+0x109/0xc30 [ 1773.839797] do_tcp_sendpages+0x9d6/0x1b80 [ 1773.840352] ? lock_release+0x680/0x680 [ 1773.840884] ? lock_downgrade+0x6d0/0x6d0 [ 1773.841422] ? tcp_send_mss+0x2b0/0x2b0 [ 1773.841952] ? mark_held_locks+0x9e/0xe0 [ 1773.842520] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1773.843258] tcp_sendpage+0x80/0xd0 [ 1773.843747] ? tcp_sendpage_locked+0xc0/0xc0 [ 1773.844334] inet_sendpage+0xc9/0x130 [ 1773.844855] kernel_sendpage.part.0+0x146/0x290 [ 1773.844864] 9pnet: Could not find request transport: [ 1773.846135] sock_sendpage+0xe5/0x140 [ 1773.846635] ? __sock_recv_ts_and_drops+0x430/0x430 [ 1773.847279] pipe_to_sendpage+0x2af/0x380 [ 1773.847972] ? propagate_umount+0x1550/0x1550 [ 1773.848558] ? splice_from_pipe_next.part.0+0x166/0x520 [ 1773.849269] __splice_from_pipe+0x43d/0x890 [ 1773.849835] ? propagate_umount+0x1550/0x1550 [ 1773.850421] generic_splice_sendpage+0xd5/0x140 [ 1773.851030] ? __do_sys_vmsplice+0x8d0/0x8d0 [ 1773.851609] ? security_file_permission+0xb1/0xe0 [ 1773.852235] ? __do_sys_vmsplice+0x8d0/0x8d0 [ 1773.852866] direct_splice_actor+0x10f/0x170 [ 1773.853462] splice_direct_to_actor+0x387/0x980 [ 1773.854069] ? pipe_to_sendpage+0x380/0x380 [ 1773.854635] ? do_splice_to+0x160/0x160 [ 1773.855156] ? security_file_permission+0xb1/0xe0 [ 1773.855830] do_splice_direct+0x1c4/0x290 [ 1773.856415] ? splice_direct_to_actor+0x980/0x980 [ 1773.857064] ? security_file_permission+0xb1/0xe0 [ 1773.857711] do_sendfile+0x553/0x11e0 [ 1773.858215] ? do_pwritev+0x270/0x270 [ 1773.858711] ? wait_for_completion_io+0x270/0x270 [ 1773.859338] ? rcu_read_lock_any_held+0x75/0xa0 [ 1773.859954] ? vfs_write+0x354/0xb10 [ 1773.860441] __x64_sys_sendfile64+0x1d1/0x210 [ 1773.861032] ? __ia32_sys_sendfile+0x220/0x220 [ 1773.861628] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1773.862314] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1773.862992] do_syscall_64+0x33/0x40 [ 1773.863669] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1773.864334] RIP: 0033:0x7efca6f2bb19 [ 1773.864837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1773.867209] RSP: 002b:00007efca44a1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1773.868196] RAX: ffffffffffffffda RBX: 00007efca703ef60 RCX: 00007efca6f2bb19 [ 1773.869134] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 1773.870053] RBP: 00007efca44a11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1773.870971] R10: 00000080464c453f R11: 0000000000000246 R12: 0000000000000002 [ 1773.871894] R13: 00007ffdba8bcc9f R14: 00007efca44a1300 R15: 0000000000022000 08:43:43 executing program 4: ioctl$BTRFS_IOC_FS_INFO(0xffffffffffffffff, 0x8400941f, &(0x7f0000000240)) syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000080)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0175ffff53ef010001000000dff4655f000000000000000001000000000000000b275206bb33373bec496cf0", 0x43, 0x400}], 0x0, &(0x7f00000004c0)=ANY=[]) 08:43:43 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) pread64(r0, &(0x7f0000000180)=""/199, 0xc7, 0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4008040) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fcntl$setstatus(r2, 0x4, 0xf0ac3d2370543000) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x5}, 0x1c705, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x4052, r4, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000140)={0x2, 0x3, 0xffff, 0x3}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000001d00020000000000000010000400020008001200", @ANYRES32=r5, @ANYBLOB="8e2afb567c5049dab9732cf28484b893fcfd880ab5baea589e57661b1636f8952dae03129ab89e4e7a135718433900cf3d4ff0ae317eeacc91e3da5a28218297aff7a03d9c33fea62687074915caa746f95b6bb5d48248caaff63665"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0xa, 0x4e21, 0x81, @private0, 0xdf}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3abf5375c3866c0afd7148bb0dbf63d6a303e9125d9ad676bffcd27b2c53e52bcf1a1ce477ea55f678c2ed40464e3474c6156a7f6eaca23d80e426209b43d6d6818277a8e2f463ee217205a30440776e59857fc14fc2572251bbb80eaee7edc46e42abe63c1ba32adb2fdb60513e80fde", 0xde}], 0x1, &(0x7f00000005c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x80000001}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x33, 0x0, '\x00', [@pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0xffff}}, @hopopts={{0x50, 0x29, 0x36, {0xff, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0xef}, @calipso={0x7, 0x28, {0x3, 0x8, 0x8, 0x4, [0xfffffffffffffeff, 0x6, 0x8, 0x1]}}, @ra={0x5, 0x2, 0x6}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @rthdr={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x2, 0x1f, 0x0, [@remote]}}}], 0x138}, 0x4000) 08:43:43 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x58, 0x1, 0x1, 0x3, 0xfffff000, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0xffffffffffffff90, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) 08:43:43 executing program 3: perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_complete(0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0xff, 0x0, 0x3, 0x0, 0x9, 0x10000, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x88, 0x0, @perf_config_ext={0x8, 0x8}, 0x40000, 0x2, 0x0, 0x2, 0xdd, 0x6, 0x3, 0x0, 0x80000001, 0x0, 0x15b}, 0xffffffffffffffff, 0x3, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r1, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, &(0x7f0000000000)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[], 0xfdef) creat(&(0x7f0000000040)='./file0\x00', 0x0) 08:43:43 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x20042, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x10010, r0, 0x39) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200080, 0x23456}, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f0000000340)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x2, 0x0, 0x0, 0x0) [ 1773.990003] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1773.991127] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 08:43:43 executing program 4: syz_io_uring_setup(0x0, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x78b08c3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x890c, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@private0, 0x0, r5}) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x9, 0x2, 0x1, 0x8, 0x6, 0x7}, 0x20) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/418], 0x190) r7 = dup(r6) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r7, 0x8936, &(0x7f0000000080)={@local, 0x78, r9}) ioctl$sock_inet6_SIOCDIFADDR(r7, 0x8916, &(0x7f0000000000)={@remote, 0x0, r9}) 08:43:43 executing program 7: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x80464c453f) (fail_nth: 18) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x10, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3ab", 0x6f}], 0x1, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @tclass={{0x14}}, @hoplimit={{0x14}}], 0x58}, 0x4000) [ 1774.112480] FAULT_INJECTION: forcing a failure. [ 1774.112480] name failslab, interval 1, probability 0, space 0, times 0 [ 1774.114547] CPU: 0 PID: 10887 Comm: syz-executor.7 Not tainted 5.10.237 #1 [ 1774.115411] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1774.116448] Call Trace: [ 1774.116799] dump_stack+0x107/0x167 [ 1774.117259] should_fail.cold+0x5/0xa [ 1774.117803] ? create_object.isra.0+0x3a/0xa20 [ 1774.118551] should_failslab+0x5/0x20 [ 1774.119083] kmem_cache_alloc+0x5b/0x310 [ 1774.119595] create_object.isra.0+0x3a/0xa20 [ 1774.120144] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1774.120854] kmem_cache_alloc_node+0x169/0x330 [ 1774.121478] __alloc_skb+0x6d/0x5b0 [ 1774.121944] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1774.122595] sk_stream_alloc_skb+0x109/0xc30 [ 1774.123155] do_tcp_sendpages+0x9d6/0x1b80 [ 1774.123706] ? lock_release+0x680/0x680 [ 1774.124198] ? lock_downgrade+0x6d0/0x6d0 [ 1774.124775] ? tcp_send_mss+0x2b0/0x2b0 [ 1774.125324] ? mark_held_locks+0x9e/0xe0 [ 1774.125885] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1774.126562] tcp_sendpage+0x80/0xd0 [ 1774.127013] ? tcp_sendpage_locked+0xc0/0xc0 [ 1774.127567] inet_sendpage+0xc9/0x130 [ 1774.128045] kernel_sendpage.part.0+0x146/0x290 [ 1774.128629] sock_sendpage+0xe5/0x140 [ 1774.129188] ? __sock_recv_ts_and_drops+0x430/0x430 [ 1774.129826] pipe_to_sendpage+0x2af/0x380 [ 1774.130354] ? propagate_umount+0x1550/0x1550 [ 1774.130954] ? splice_from_pipe_next.part.0+0x166/0x520 [ 1774.131665] __splice_from_pipe+0x43d/0x890 [ 1774.132240] ? propagate_umount+0x1550/0x1550 [ 1774.132872] generic_splice_sendpage+0xd5/0x140 [ 1774.133484] ? __do_sys_vmsplice+0x8d0/0x8d0 [ 1774.134054] ? security_file_permission+0xb1/0xe0 [ 1774.134674] ? __do_sys_vmsplice+0x8d0/0x8d0 [ 1774.135236] direct_splice_actor+0x10f/0x170 [ 1774.135801] splice_direct_to_actor+0x387/0x980 [ 1774.136399] ? pipe_to_sendpage+0x380/0x380 [ 1774.136957] ? do_splice_to+0x160/0x160 [ 1774.137466] ? security_file_permission+0xb1/0xe0 [ 1774.138082] do_splice_direct+0x1c4/0x290 [ 1774.138615] ? splice_direct_to_actor+0x980/0x980 [ 1774.139234] ? security_file_permission+0xb1/0xe0 [ 1774.139860] do_sendfile+0x553/0x11e0 [ 1774.140360] ? do_pwritev+0x270/0x270 [ 1774.140860] ? wait_for_completion_io+0x270/0x270 [ 1774.141477] ? rcu_read_lock_any_held+0x75/0xa0 [ 1774.142066] ? vfs_write+0x354/0xb10 [ 1774.142545] __x64_sys_sendfile64+0x1d1/0x210 [ 1774.143108] ? __ia32_sys_sendfile+0x220/0x220 [ 1774.143692] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1774.144360] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1774.145033] do_syscall_64+0x33/0x40 [ 1774.145534] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1774.146183] RIP: 0033:0x7efca6f2bb19 [ 1774.146672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1774.149054] RSP: 002b:00007efca44a1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1774.150007] RAX: ffffffffffffffda RBX: 00007efca703ef60 RCX: 00007efca6f2bb19 [ 1774.150828] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 1774.151695] RBP: 00007efca44a11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1774.152568] R10: 00000080464c453f R11: 0000000000000246 R12: 0000000000000002 [ 1774.153470] R13: 00007ffdba8bcc9f R14: 00007efca44a1300 R15: 0000000000022000 [ 1774.154564] hpet: Lost 1 RTC interrupts 08:43:59 executing program 7: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x80464c453f) (fail_nth: 19) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x10, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3ab", 0x6f}], 0x1, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @tclass={{0x14}}, @hoplimit={{0x14}}], 0x58}, 0x4000) 08:43:59 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x20042, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x10010, r0, 0x39) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200080, 0x23456}, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f0000000340)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x4, 0x0, 0x0, 0x0) [ 1789.133023] FAULT_INJECTION: forcing a failure. [ 1789.133023] name failslab, interval 1, probability 0, space 0, times 0 [ 1789.134663] CPU: 1 PID: 10899 Comm: syz-executor.7 Not tainted 5.10.237 #1 [ 1789.135620] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1789.137005] Call Trace: [ 1789.137390] dump_stack+0x107/0x167 [ 1789.137909] should_fail.cold+0x5/0xa 08:43:59 executing program 4: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000e40)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lseek(r1, 0x0, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000040)='.\x00', 0x2000003) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_default\x00', 0x0, 0x54, 0x3) r4 = syz_io_uring_setup(0x49c6, &(0x7f0000000380)={0x0, 0x5265, 0x2, 0xffffffff, 0x11b}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000), &(0x7f00000002c0)=0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x58, 0x1, 0x1, 0x3, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) lseek(0xffffffffffffffff, 0x22, 0x0) dup(r4) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, r4, 0x8000000) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000340)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x889c7cb2ceb4d95c, 0x0, 0x0, 0x1, {0x0, r6}}, 0x101) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x505200, 0x9b, 0x1}, &(0x7f0000000180)='./file1\x00', 0x18, 0x0, 0x23456, {0x0, r6}}, 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITE={0x17, 0x4, 0x0, @fd, 0x7, 0x0, 0x0, 0x12, 0x1, {0x0, r6}}, 0x9) sendfile(r1, r2, 0x0, 0x100000001) 08:43:59 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x58, 0x1, 0x1, 0x3, 0xffffff7f, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0xffffffffffffff90, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) 08:43:59 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0xfffffffffffffdd1, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) stat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r0, 0x0) llistxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x58, 0x1, 0x1, 0x3, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) sendmsg$sock(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="d53762161dc9d3a7beb571789577baedb3b91b3da9c1d50b6d4b3f4058ac7107a7270acbc1d5e767c5e7e0ad0ca87d61f6ad00e4ba932127fea6620ef19c88c772e235344ae3deac0caa172aa1821fef4d0e4bc6f0a96fa3a39851e141", 0x5d}, {&(0x7f0000000940)="602b121ca90e65cc05c6cabdc591864d4f0f4393b8691b1d902f5c1bd52ecccd170050412a1a6e2b8f749ff5ecfa53d72b319f6596cc7f40348efafb34b5a198439f0f858024f3acd2c3b37058ad0c615b18419a17feac0f42bbd512b05ca154a8a387c1f7a08768fb19da20b55b89d034d2608e5deecc92081229b841cc5eab9faba48950e4ce7cb4911d2ffd0553a73d5e626f2f27f81219e0017f9bfba6c77fc464e6326fe0b94c93d94d6bea1e9cbd3918e47218e247b14830eadf5d05988ab54d35812a5af4020efbef3fdde2f51d6f8b33d8bf78bbcd55ea0b8b3678821cba4bd2fbb58cfda8f96346edd588b56a3e45f4623303b6c456cb2295c4e10146a1d3e65a551a753b7ce272b1eb56aab8e36ccaa9e0300669650dedc52a72d32fa28e383dc9a13e9b8a290ee5df242d0ad92def616c1463af262b631d706ee5ec73c41374f3c5388fa091e4ea614f1c386184916921b8fc998cc193d594dd33c545953c97c727d6244343f59e5bf2728656b97140a9d7f7907f6fa20a79791efaafb1955612526472712d7ed066bbf317eea1aadb92005dda0f7d076d41964d13dc753af808a552ceeca46fc1b20a53882208a6c97cc307cfd0c820dab867a3be3c21ca5982ad9dbc99a04e0c2905aa8fa48bef677ede0f311fc4aed5a88d724c59db45cdcf9894d81c9aaf4aa0044cd58cea8c3de6546fdc3dd2669c9f335eedcc5463be36dac16c35ce619a4fb195ba62df7da82f6187c17abc3a1e22f2fdd1c2af2ea09148f6ee49121996438c6880308749cc5ef1a0e4fd981aab6da796103f0e77d23f19210dc750cde53c5fbbf3383ab5bde39769d1e082d24e98a4b0474a7d2da0cfeebec3644987255ce22d4208d84ea5b2e4b805805f18246a290a72d698e48bafd5676b30745b9c5d50a4509a154861d55387f36c6c623372feff92267421cfcf3fd2208e7fd6b479a2f26655768c38a417e70da3fe55cc6207b3f60fe4004651e4bf20a9f07d7c63889c751eca7eb92615b6afe552e21a6bd4a555342edbd436fb92a14e4ec2b3284fcad0afc90b6dc6e2b174da9c36abf16783103a721cfb1d9fa002b58a3d51bb3bf09705b1c77ca17d8c099c1faebf9fe73c4b089761a702236396bc69fb180017106c5cf687ed194c154bd8559e500ec6a923cc0282fe585c9999484385f0342311d5553471abd5f6dd77d9e9e691c73ea65dc71f940ad759d2e5b35333bda5425c93b415270ed1d55823d0510fb2982f12d0d140161847f180422f8f44f8489833e4a0c6f950a013848e979391cc0b433d1815ad893c260ee228845157c3838e376016b8dd4387cbd85ee221546b92ad6837fc910e54607b3c2b50989db1bfd58d09af8125a91e48753e904cfbf7f582834c27b420900b8b8728dd632348d55eec93f6df096ed493d5a21e56bc034a7563a645e9c1131218b09d194a5de8b644efa619e03c98bf256f71cbd664f5b85efa2db8cf0b4a2a3e3926aaea2cd7c44977e0d6f7ffdf861255825b6b3ea3a672646948a2c45785ad2532e688a03e545b9b350e59406952c738d66bafe025239210de29b9f2a786976313463b8335425cf9083c44c7c46b5e1a4ca1ed7256b0a3141f43e2b5b856c7c3a236eae8523e00b042571a0c7509e7d67ddb493ab2a0dfa873f217983869c2214bdf6479ce2cc7367652ca6b6cd38fdfc3ab579fef6834d681dd4458ad32468f3ca86a47b14dbfef70104a37c0391881bc8a69bc08dac94864a1940cd47e85b4a6b2ece8594899d31d617016f6e3937ef4953f979546d4f1130818aed8ada7b46421f40a35a63cdcb81dd222662bf926539c6e16bff0693bff8a19278e7d7e4618624952c87e55d418f73789315fe1ee1f788c0598ac699fab0eb2cb35da19b3a3d11d1e67f370431333530f8b393722ffce1c3492a5d86bd5a82a555e09f3caee60a9009b60142a1690f135942413a10033f5fa231d7ea8019f9deccae8cff5d6b69d06736dc0107116cad0ce056c139bf7d53bf618e8247d44da1864d1a3801ec1613a6ed6b2b4fea764c26e2f4739fa35c5f5400cd324fe95e7d542c5a5759217de154532c4c78b97055229828a69608eb71cdfe05f8fc1b027627eb2b95bb04bcf6205a00eade82a9be5ade702134c3a44b9f49c85b1e8cbeaac3d04c6bc0345ec031b247d3408cbe65c36a48505978576609ce30e74d84a2b2683e1672577ec3a1fd5957d73eb80b0c246d7f3bcd7645d40474a02a1fbcd18c795bce709cc839bd4dbf698fd968a17209fc9b0bbd2fa8e2069dc561789fdf56622a3e9d53c4a2b05ead7957f84b6e5c31484786595c4c59eb9f95a41e3e69b3b60d25e394bea5fccbf6d955f7ef89f7d72dc3d515042f541ace6d22a5814da21567c2a9ef92498139052b31d32d685436b2c0a7aeccda1865d00e690deb79a0b4906925a8036b8fb389d05db61425cab40a1e0f216808934c6e847e40b6d4cbea8f1462ca04a76095be091a1e7dbbd9c6c66883637fa868102e44881a0ffc3d34e6f084ef2b0b312e6bbd3fb04b3365780cde38a675be5dc6b4ffbff124c24938e7c33c2ad02cd27ad5cd27e852381ec5f9c6223afe1a842fa9edde2157f8c8441cb8b9a6fc44db688e11e1f026ce30eab283bdc9e0c1a311bb0e8ab05ae39f0cd467d14ddc704c3c7a6b90f355b205b921cca3c72aa60ebf55312940a9dde734193ca90c7de168d1d0ece73391a6fcc9b41c17db1d8f0f778280c406d30c4d4578b90e1236d615c341d29e55dab23655a8d9f2a6d16582ab968bd89c65d2be34d5ff6f8da95ce3de7712bfd20cfed2e305ca7928d7530dc19b745077bff2e26930f96b6a8b387fca286f8b8fad53e1bc31504e22475866d2143050fe6c1f4226e0fe7a6f89834f458b499462804c2320295a80383b8a6f41fb9dfd190eb89791d254276a245702b0e30178696189e4e1518e69351651eac080dec942fac86009e18f7136f7f43ade2084cc50cb0643a6c44dfd8d4b37d41530e9307ebec18201372e53e228a10365599e4f077ec0a6f94534c159a5327a1a7d51a915a6182a33df9414228acca368073c7fd14ba60244a354fa2f5241f5ed81fafca4151e20489834a8e004dadcbee1126a2cb8551649d084762dbb18eca398b35b3e3521246094462db74991c42014ee84240ab214067c5c48bbda034873741b20ee4bc0b4d018e95f27ded42ef49ae16c4ff1a7ca103d061e6f99ef533e274b150ccd4f79498eeb4fe06bc8916bfd56138e66b055f4e7989d3749a1e91f53e4577fec3100b3895f029393cb3df9125944113ed96ca1afd1858f72b7a3613561422f4e3d7473f5b4586dec76e7a8d9aafd36fec49f266264f2e0df50145922a8aecc5d083b3a97592d18887c663fd260a97bb224398edf7fd4c9908667c865198f73c9b7f99ecc816fa17677bd5fe7a53a0b5db4de140a01df124d1eec5d55d55dc7da13fa1f0d6cfbf6643dba840f73fb13624608e2dc460e99a1b7ec87bd6bd2c5105761eab1b1c242ae0755570f29b6a0e04aea562d480d486d485129614e3f2df1e1e63d331568b6ad42e519505b5eb285389a78fc30c47cb6de5bb1855ef84f5c4eed42d93b185545afa29500c5a0ffcf03a5221371821145ee7427f7c5f2795124e52bf4472646842d70603203c6647ebf14168df277e9f6a18cc96d72c104042132ad9b1b3c10c7e281cbd0b0e0ff832ff9a5d443d69fc643590bd92a99695630eb7024dcd47c741ea59fa2b71b3f187028649527816892f7be61cddf79b83449b60be306da0920a3375ac9ed72f10dbea94b1d25b675f361483e2ea0e834d3bdcebfa37b38d70677fd0ce2123628ce2dcabe5cfaea373e3852eb6d3fe2b9e4f45730112038373aa52d46260c734185b740a71f731b77851821c2b8b84f5cb91a8eb9fa317a981510b05855d12f8ac3f42689823d44bb08a33077145cff63d0b58122bd9510d947839d4cc3ff8ba0a46288cdc74f68c37e32433b586bf3e620f36439684128cba31a1e99167bf9fd2b752b61783d02f059dc90f47b62f20225339f2d0fdd2a46ce15a627bad9b2c2abde316fa3b97ac5f01b20b916f5cdbe3f0c6978911424426857af4651eca8f019ac35d308c2141e1e6d3e0983fa36f7602933b1b397bb2523d0f0d0bb11e0b88190eb55dd68965cb0d4147cbc1c1cc13e72329f0f7593a2fceb0a11e92be7d6f962e43124966c08371ad11fb580ee8320f95852077a0372a39478254c16bb94de1e7336aff5f9c8bda26d825fb5803d097f461d387f2481ef32780967e2b39d11972e88bbd943b7a6f16e063db398f9aebe1333f68e23a8e8b3273feb1f6051b9e9986d78bc3ec281341b5ab896b49c08064d3a8f998206cad38942551f0ce4210b59818175898613f4337fd75599ebdf11a26e86d0e3b0333ee5f15fda25874abfbc9b5dc449d12519d72b86a3290f0199111aaabc1ec06592b0317eb7e59cc1e43e8cea13257a20dc8f971c4465fa250ec82a2a3f18984b9ecd601d4a6eb5b6843fb1a43b81b1c6b0aa6e438c15e4d9c43e867119795e4f42afe53dad0bafe1282806e2e61559f645e6e33c72853e17e4e3190e0902d026dcaa83d6c0c00703596dfd7998d2a66a620645f4c5ceefde942a663d89ff1a7bf50d376fd2a68deba2ca6342fef527e32770a6ba5027874ad056c203e4a04a2fa40e401863ec5727697c602ed0b551d14bae946fddc955560119b99da0f36967be7a31572be84a5358bd6cbd9b01072eeca631faa47bc5febfc543c2fc1d9ea6c45c9950f6d06de005ab349bcb9bfc5363b60a4e5f4df63cdbe26a307ead9164c2669b2b0253dd618a56e85a038f8cf2b8ce189d62ae0690361da6ce12eed8844f75a6130631817f407040572d2f6264dc9348d30f5c83f955a13f9ede824fd76cd86537f65eb1b31b33e24febef69796ffbb6dafb5b4aac5a90b91b07288da1a59c48dfd572aeda4db7fbdb2217214d54d63e8e1dc82020370b219524ce06876b32c157e57e4080c9f9f7ded3e6bfee8061c9438c93d4f02e41d9e8d691e202fd4959c2a22710fa3f117b686ffcd76500c3c3d106f70d507fbb83ea324368f65960eaab1b62a763c947c9af8779b11bd530d9e6e758e1c9a965f5ebd22cf04996f61e24be318d5d1d38711d06a3c49004ca9a4ce9f08f2bf33991b2cf6484af8aa3a129beb0f7dfd5496b266f313ec5701d1f31efae5be3bec4e681ec0a4a608c0b23379a46cf11e9c7af1c47a8f2dcb7bf4cfbbcf210a311bef7114aed62a15adde312f8869743a5e10f03e8bfa759ae985f186105505ad425de9e5ebc550c39916a7ec0982d2edad78adc4081595a214cb88d35df97bda277d22af3ba62c00ac4e378ecd37ea45ff8bf5d16e694b731c9764d7dca5804cf406b11582225f29e659f665f2c84fd282524bffe209837e9d075dc57d04ef5dd482f846b4023b41f84aa94910dfa66ce7d252ccce8bddafc9f65b06a0b413b9e3f85439ea1e5a6291ca0ac9d654494841ca8e4d0fa0027ba3db06e4c458c6db3ef4c65cd50d368ae54e30e294117e898635862782145c04e2f037ee3040708f98ed71c19d8a8ed4fb1744b1a29f1a4a11b727192f3293706ce05d7a360457ed73d8a9b29e64fc739511043cc1ae2164e565ab2bd3730d667652c3250fec3733610118da17a1479c049b3616c3e76eab1cc8fd21debbf0dca422edd1cc738534c81959dbb2905a8dfd75fcecec75ee82de2df0f5a662f3f534397f2d570c", 0x1000}, {&(0x7f0000000140)="f879def56be019f96f17c9c3f8d7338a1905700b1ab85fe45409ac199c8df9dd1402be87bd23dd422a05b5ef6ba9cbdd92341ab9c9d889a4e12b85cc12e3171e00259eac360190dbdf74b2eba8c1b35960e592a4e907617e25", 0x59}], 0x3, &(0x7f0000000380)=[@txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0x9ba}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x6}}], 0x60}, 0x4004090) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x58, 0x1, 0x1, 0x3, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x1, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r3}}, 0x27) 08:43:59 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) pread64(r0, &(0x7f0000000180)=""/199, 0xc7, 0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4008040) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fcntl$setstatus(r2, 0x4, 0xf0ac3d2370543000) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x5}, 0x1c705, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x4052, r4, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000140)={0x2, 0x3, 0xffff, 0x3}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000001d00020000000000000010000400020008001200", @ANYBLOB="8e2afb567c5049dab9732cf28484b893fcfd880ab5baea589e57661b1636f8952dae03129ab89e4e7a135718433900cf3d4ff0ae317eeacc91e3da5a28218297aff7a03d9c33fea62687074915caa746f95b6bb5d48248caaff63665c7"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0xa, 0x4e21, 0x81, @private0, 0xdf}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3abf5375c3866c0afd7148bb0dbf63d6a303e9125d9ad676bffcd27b2c53e52bcf1a1ce477ea55f678c2ed40464e3474c6156a7f6eaca23d80e426209b43d6d6818277a8e2f463ee217205a30440776e59857fc14fc2572251bbb80eaee7edc46e42abe63c1ba32adb2fdb60513e80fde", 0xde}], 0x1, &(0x7f00000005c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x80000001}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x33, 0x0, '\x00', [@pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0xffff}}, @hopopts={{0x50, 0x29, 0x36, {0xff, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0xef}, @calipso={0x7, 0x28, {0x3, 0x8, 0x8, 0x4, [0xfffffffffffffeff, 0x6, 0x8, 0x1]}}, @ra={0x5, 0x2, 0x6}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @rthdr={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x2, 0x1f, 0x0, [@remote]}}}], 0x138}, 0x4000) [ 1789.138692] should_failslab+0x5/0x20 [ 1789.139513] __kmalloc_node_track_caller+0x74/0x3b0 [ 1789.140220] ? sk_stream_alloc_skb+0x109/0xc30 [ 1789.140887] __alloc_skb+0xb1/0x5b0 [ 1789.141416] sk_stream_alloc_skb+0x109/0xc30 [ 1789.142046] do_tcp_sendpages+0x9d6/0x1b80 [ 1789.142695] ? lock_release+0x680/0x680 [ 1789.143292] ? lock_downgrade+0x6d0/0x6d0 [ 1789.143892] ? tcp_send_mss+0x2b0/0x2b0 [ 1789.144502] ? mark_held_locks+0x9e/0xe0 [ 1789.145196] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 08:43:59 executing program 2: syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="014344303031", 0x6, 0x8000}], 0x0, &(0x7f0000011700)=ANY=[@ANYBLOB=' ']) set_thread_area(&(0x7f0000000540)={0x1000, 0x100000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000280), 0x8) io_submit(0x0, 0x1, &(0x7f00000006c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) r1 = syz_mount_image$nfs4(&(0x7f0000000780), &(0x7f00000007c0)='./file0\x00', 0xa51e, 0x1, &(0x7f0000000840)=[{&(0x7f0000000800)="046a57028d7661a2ab7738b499fcff4499f2298512454f3de46fa82ae79b7f1d9d5d4ff91b5cd7deab06d743", 0x2c, 0x10001}], 0x0, &(0x7f0000000880)={[{'#'}, {'{\\'}, {}, {'ext3\x00'}, {'$'}, {}, {'nfs\x00'}], [{@fsmagic={'fsmagic', 0x3d, 0xfe85}}, {@euid_lt={'euid<', 0xee00}}, {@permit_directio}, {@seclabel}, {@uid_lt}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000900)={{0x1, 0x1, 0x18, r1, {0xfffffffa}}, './file0\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000004c0), 0xffffffffffffffff) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a80), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x14, r3, 0x1}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x3ff}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xffff}]}, 0x24}}, 0x40000000) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000180)={0x64, r3, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x5}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7f}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "45d82550a5863e3a0169d63bb9e3e18ee68eb74d04f5410cc54be92121c122ca"}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xff}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000090}, 0x880) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e1f4655f000000000000000001000000000000000b0000000004000008000000d2", 0x61, 0x400}], 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0060a126798e2e66e19f461b18073e8a936791af08e03107bba41deb8485bede209df939afe0ff4aaa703a33bc93fecc42ec37f80dfb45d140334346afbf654cba77b1fa17a48531716aa185dcb98d1b0f626c36e55a4146d7d7a4a0f48002a142ea0a60f5caa23a05f4da9b6402852c818ac641d6fbbf8a6328d105785f6db497a43f39f3c8dcc5ae73549ebcdadb2f76290b4dd83fa7cd36af283c42b9bfd4da96ead973b3e2fb76c8f96973ceec7762ee06a0958266a945c536aa8969e09f17e8e6a834b37252ebc245240a177c7919b8baf60cba835529"]) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000004c0), r5) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r5, &(0x7f0000000a40)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x48, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x488a1}, 0x10) syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0xffff, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000240)="7d405c4ea72724a9fd86d59c60ca6421393f33fb0538875ea29359dc3399a003d4dad8d3a0552d241e6aeda2f0ee4e6daa834e7220d124c907bbc96bdd1e14c107b22e1e5318d2dc7805821fd1501b603cb5b1f6fc1d91f37eb36be5a47451b706159955495acb7b351b6de0c8cf9bde15f76328a75a67b6f9f6ad3e4aa9cb2fd1d43d120ba65bd03fbbb2e9f9bbcee1516b3ef412bd90281bd42633b678ca7312a9b3e548fc7fdfc6edd55aeb1650ccffca99841ddbadadab38d42a1b582a85e21bcab2", 0xc4}], 0x10a0810, &(0x7f0000000340)=ANY=[@ANYBLOB="27249d24242c65787433002c646f6e745f6d6561737572652c7569643e", @ANYRESDEC=0xee01, @ANYBLOB="2c66733ff013e94d48d560236e616d65252c00"]) [ 1789.145942] tcp_sendpage+0x80/0xd0 [ 1789.146832] ? tcp_sendpage_locked+0xc0/0xc0 [ 1789.147468] inet_sendpage+0xc9/0x130 [ 1789.148018] kernel_sendpage.part.0+0x146/0x290 [ 1789.148663] sock_sendpage+0xe5/0x140 [ 1789.149223] ? __sock_recv_ts_and_drops+0x430/0x430 [ 1789.149916] pipe_to_sendpage+0x2af/0x380 08:43:59 executing program 3: r0 = syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f00000000c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x8c) r2 = fsmount(r1, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) fsmount(r2, 0x1, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_MADVISE={0x19, 0x7, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa}, 0x100) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x2, 0x0, r0, &(0x7f0000000540), &(0x7f0000000200)='./file1\x00', 0x2, 0x4000}, 0x7) clone3(&(0x7f00000004c0)={0x200000000, &(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000100), {0x10}, &(0x7f00000001c0), 0x0, &(0x7f0000000400)=""/80, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x28, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xff}]}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7000d9dbdf2516000000f88b2f42379fcd9946956b70add09908000300", @ANYRES32=r7, @ANYBLOB="0c009900000001000d0000000a00060008021100000000000a001a0008021100000100000a000600ffffffffffff00000a001a0008021100000100000a001a000802110000000000"], 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4040) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_mmap}, {@cache_none}]}}) [ 1789.150499] ? propagate_umount+0x1550/0x1550 [ 1789.151446] ? splice_from_pipe_next.part.0+0x166/0x520 [ 1789.152200] __splice_from_pipe+0x43d/0x890 [ 1789.152808] ? propagate_umount+0x1550/0x1550 [ 1789.153467] generic_splice_sendpage+0xd5/0x140 [ 1789.154120] ? __do_sys_vmsplice+0x8d0/0x8d0 [ 1789.154746] ? security_file_permission+0xb1/0xe0 [ 1789.155429] ? __do_sys_vmsplice+0x8d0/0x8d0 [ 1789.156031] direct_splice_actor+0x10f/0x170 [ 1789.156646] splice_direct_to_actor+0x387/0x980 [ 1789.157325] ? pipe_to_sendpage+0x380/0x380 [ 1789.157909] ? do_splice_to+0x160/0x160 [ 1789.158482] ? security_file_permission+0xb1/0xe0 [ 1789.159148] do_splice_direct+0x1c4/0x290 [ 1789.159714] ? splice_direct_to_actor+0x980/0x980 [ 1789.160512] ? security_file_permission+0xb1/0xe0 [ 1789.161205] do_sendfile+0x553/0x11e0 [ 1789.161756] ? do_pwritev+0x270/0x270 [ 1789.162288] ? wait_for_completion_io+0x270/0x270 [ 1789.162959] ? rcu_read_lock_any_held+0x75/0xa0 [ 1789.163612] ? vfs_write+0x354/0xb10 [ 1789.164143] __x64_sys_sendfile64+0x1d1/0x210 [ 1789.164802] ? __ia32_sys_sendfile+0x220/0x220 [ 1789.165474] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1789.166230] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1789.166929] do_syscall_64+0x33/0x40 [ 1789.167472] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1789.168187] RIP: 0033:0x7efca6f2bb19 [ 1789.168713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1789.171384] RSP: 002b:00007efca44a1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1789.172413] RAX: ffffffffffffffda RBX: 00007efca703ef60 RCX: 00007efca6f2bb19 [ 1789.173410] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 1789.174395] RBP: 00007efca44a11d0 R08: 0000000000000000 R09: 0000000000000000 08:43:59 executing program 2: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xba) write$binfmt_elf64(r3, &(0x7f0000000940)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0xba, 0x7, 0x99, 0x0, 0x3, 0x6, 0x2, 0x363, 0x40, 0x200, 0x0, 0x80, 0x38, 0x1, 0x7fff, 0x59a, 0x100}, [{0x70000000, 0x7, 0x2, 0xfff, 0x9, 0x1000, 0x6}], "01da43351cbc9c2d540446166ae6c1c92df1ceaad2872d634a594bdab4ed7035dbdcb7c821bdd622bee24e9bd73b455c2c13b064b033ff8f5c76b80c6dd764250eb653478947874a603355f3fe54df17e42c38e54acdb10726b5711a7587b598c9212e3a081a5fad0803c2e0b6e3ac9f32c1aa08d3fd5ea48f0d14d8899bbe886052059564962925a0723c918ca887055aaf6beb979b2f39919285a58f1729614b11f3ea1b24f516f80091ae99927a2710760902898900853e", ['\x00']}, 0x231) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040)=0x3, 0x4) io_uring_enter(r0, 0x538b, 0x12bb, 0x2, &(0x7f00000000c0)={[0x80000001]}, 0x8) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={@mcast1, 0x56}) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f00000002c0)=@updsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@multicast1}, @in=@remote}, [@algo_auth_trunc={0x4c, 0x14, {{'sha256\x00'}}}]}, 0x13c}}, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_SIOCDELRT(r5, 0x890c, &(0x7f0000000700)={0x0, @xdp={0x2c, 0x8, 0x0, 0xc}, @hci={0x1f, 0x1, 0x4}, @vsock={0x28, 0x0, 0xffffffff, @host}, 0x20, 0x0, 0x0, 0x0, 0x101, &(0x7f00000006c0)='batadv_slave_1\x00', 0x8, 0x6, 0x5}) dup3(r4, r5, 0x80000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca4b1d49", 0x1d}, {&(0x7f0000000280)}, {0x0}, {0x0}, {0x0}], 0x5}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x0, @fd_index=0x3, 0x3, 0x0, 0x0, 0x0, 0x0, {0x3}}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1789.175677] R10: 00000080464c453f R11: 0000000000000246 R12: 0000000000000002 [ 1789.176840] R13: 00007ffdba8bcc9f R14: 00007efca44a1300 R15: 0000000000022000 [ 1789.180957] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1789.182300] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 08:43:59 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x58, 0x1, 0x1, 0x3, 0xffffff9e, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0xffffffffffffff90, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) [ 1789.308730] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1789.309934] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1789.389477] hpet: Lost 3 RTC interrupts 08:43:59 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x58, 0x1, 0x1, 0x3, 0xfffffff0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0xffffffffffffff90, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) [ 1789.463021] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1789.464217] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 08:43:59 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) pread64(r0, &(0x7f0000000180)=""/199, 0xc7, 0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4008040) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fcntl$setstatus(r2, 0x4, 0xf0ac3d2370543000) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x5}, 0x1c705, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x4052, r4, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000140)={0x2, 0x3, 0xffff, 0x3}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000001d00020000000000000010000400020008001200", @ANYBLOB="8e2afb567c5049dab9732cf28484b893fcfd880ab5baea589e57661b1636f8952dae03129ab89e4e7a135718433900cf3d4ff0ae317eeacc91e3da5a28218297aff7a03d9c33fea62687074915caa746f95b6bb5d48248caaff63665c7"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0xa, 0x4e21, 0x81, @private0, 0xdf}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3abf5375c3866c0afd7148bb0dbf63d6a303e9125d9ad676bffcd27b2c53e52bcf1a1ce477ea55f678c2ed40464e3474c6156a7f6eaca23d80e426209b43d6d6818277a8e2f463ee217205a30440776e59857fc14fc2572251bbb80eaee7edc46e42abe63c1ba32adb2fdb60513e80fde", 0xde}], 0x1, &(0x7f00000005c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x80000001}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x33, 0x0, '\x00', [@pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0xffff}}, @hopopts={{0x50, 0x29, 0x36, {0xff, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0xef}, @calipso={0x7, 0x28, {0x3, 0x8, 0x8, 0x4, [0xfffffffffffffeff, 0x6, 0x8, 0x1]}}, @ra={0x5, 0x2, 0x6}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @rthdr={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x2, 0x1f, 0x0, [@remote]}}}], 0x138}, 0x4000) 08:43:59 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x20042, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x10010, r0, 0x39) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200080, 0x23456}, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f0000000340)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x5, 0x0, 0x0, 0x0) 08:43:59 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff8, 0x1}, 0xa402, 0x0, 0x3, 0x3, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000001000000000000e6", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0096fc47e671"]) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) pipe2(&(0x7f0000000480), 0x0) io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x1000010, 0x0, 0x0, 0x79}) r0 = epoll_create1(0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x58, 0x1, 0x1, 0x3, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f0000000100)) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x58, 0x1, 0x1, 0x3, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f0000000380)={&(0x7f0000000240)=""/147, 0x93}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) r3 = epoll_create(0x3ff) r4 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000300), 0x8}, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000200)={0x20000001}) dup2(r4, r0) dup2(0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x4, 0x1, 0x84, 0x6, 0x0, 0xfffffffffffffff7, 0x8000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f00000000c0), 0x7}, 0x18102, 0x5, 0x3, 0x5, 0x1000000000000, 0x2, 0x6, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xa, 0xffffffffffffffff, 0x8) 08:43:59 executing program 7: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x80464c453f) (fail_nth: 20) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x10, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3ab", 0x6f}], 0x1, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @tclass={{0x14}}, @hoplimit={{0x14}}], 0x58}, 0x4000) 08:43:59 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x58, 0x1, 0x1, 0x3, 0xffffffff, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0xffffffffffffff90, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) 08:43:59 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x6, &(0x7f00000015c0)=[{&(0x7f0000000140)="238d66f2876d09fb39b367b710b021057fb44603eea5980be6a4f1e980668da30fe5531a66a5756f3758bf593c0f1c458815893a3884b8857aef00c5b6282f89f7f8281e8b607c689aac08858369f37419ea5b494c2f8c7cb8365baed375b6a90aa711ac818f31a863b6b216bd90a381d7f18d64489d68c1d1e087e65167899d943ead8929b46eecd96ab1b9a17d3a90a4e732b5140ae48c75a9379116c7602904986ae4773221610202dcc50051aa65", 0xb0, 0x5}, {&(0x7f0000000300)="0a09a206f9602f13dec5283393bd2f62bad77baa61468869965c542a1d4fc3f8d2b2fe6a0b26577a2439109121de9a284f99eaee70498106d91db4d1ba7ddf1d728b7301a5dc9bd3ca5c91adc666e571752c150f9659e923e21ae076ea72675fdd401202fbc132ba6d7c9f5dbeeaec9377bbabf8f285ac8a52a2742e0d3eb679de562acc7e87301466d5543c8f56ab2f4c0deff0270cfd8dcd105bfa5bd6dac8884aaa4ca243d4b133092cebd5c504775012af736a9c849f180222ffe5471478032cfff0e5ebda70f0229e6b9fd58fc6507dbc6a29201e1c02ee52efa659265cb0ed414d9f7a4750", 0xe8, 0x6}, {&(0x7f0000000400)="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", 0x1000, 0xfffffffffffffffb}, {&(0x7f0000001680)="1b2896d3e0ce2f06c9266d626c10e862bfd534489ec0e1a647582bc94c33662b96d40e59c1d383ae88fb56c330e4a0c13774bd205ad794091f8398092ae113158b5753fdeb9453077f5c4317813a5ea5f3fb562ca1969b6a117b0bdd51d8180c53e9c79b17b8eded34d49300c1c95e72292b72887422b92628885526a6d92c2d1f6b012421ea959d4b76aee20ca30f98eb882f4ace83eec369dbb6386901f431068fb93c6a0ddae1e260d1845650fea0c808b3d8400cc1ffa9f6338a7e379bd0a29020c0e8b9e6ba4f0b1b45df2ce206868a1a", 0xd3, 0x3}, {&(0x7f0000000200)="039d47d12062d55d41a2a79a722789e80081ac5be28872642118762e90853cbff578208f21499d64b0cf8b88535506996f6956ccb3d33c5a", 0x38, 0x6}, {&(0x7f0000001500)="138160756565cc5ddb7d71a3f2b65117fd714ddc2ad9c8d3a835069a265edc56ee7d0e3f77fe3bbd11af1aee1a8ba69dbce0a7fec6d5bc7d2e89e492241a541c3caddf2823fce354b142b6e2daea1c22f296a6a5a1cb8068311bcbdf4a15366851f7484178bb7c34553746a4c984e7dfc83b7157d68dba1a76d123efeb46b8287a349daa0fab5d1efe2a240131b5afd093", 0x91, 0xffffffffffffffff}], 0x2800018, &(0x7f0000000440)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x85, 0xc}, 0x40420}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) accept4$unix(r0, 0x0, &(0x7f0000000100), 0x80800) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) [ 1789.626005] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1789.627386] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1789.658876] FAULT_INJECTION: forcing a failure. [ 1789.658876] name failslab, interval 1, probability 0, space 0, times 0 [ 1789.660716] CPU: 0 PID: 10943 Comm: syz-executor.7 Not tainted 5.10.237 #1 [ 1789.661702] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1789.662845] Call Trace: 08:43:59 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) pread64(r0, &(0x7f0000000180)=""/199, 0xc7, 0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4008040) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fcntl$setstatus(r2, 0x4, 0xf0ac3d2370543000) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x5}, 0x1c705, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x4052, r4, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000140)={0x2, 0x3, 0xffff, 0x3}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000001d00020000000000000010000400020008001200", @ANYBLOB="8e2afb567c5049dab9732cf28484b893fcfd880ab5baea589e57661b1636f8952dae03129ab89e4e7a135718433900cf3d4ff0ae317eeacc91e3da5a28218297aff7a03d9c33fea62687074915caa746f95b6bb5d48248caaff63665c7"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0xa, 0x4e21, 0x81, @private0, 0xdf}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3abf5375c3866c0afd7148bb0dbf63d6a303e9125d9ad676bffcd27b2c53e52bcf1a1ce477ea55f678c2ed40464e3474c6156a7f6eaca23d80e426209b43d6d6818277a8e2f463ee217205a30440776e59857fc14fc2572251bbb80eaee7edc46e42abe63c1ba32adb2fdb60513e80fde", 0xde}], 0x1, &(0x7f00000005c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x80000001}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x33, 0x0, '\x00', [@pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0xffff}}, @hopopts={{0x50, 0x29, 0x36, {0xff, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0xef}, @calipso={0x7, 0x28, {0x3, 0x8, 0x8, 0x4, [0xfffffffffffffeff, 0x6, 0x8, 0x1]}}, @ra={0x5, 0x2, 0x6}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @rthdr={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x2, 0x1f, 0x0, [@remote]}}}], 0x138}, 0x4000) [ 1789.663232] dump_stack+0x107/0x167 [ 1789.664005] should_fail.cold+0x5/0xa [ 1789.664540] ? create_object.isra.0+0x3a/0xa20 [ 1789.665216] should_failslab+0x5/0x20 [ 1789.665738] kmem_cache_alloc+0x5b/0x310 [ 1789.666328] create_object.isra.0+0x3a/0xa20 [ 1789.666978] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1789.667691] kmem_cache_alloc_node+0x169/0x330 [ 1789.668375] __alloc_skb+0x6d/0x5b0 [ 1789.668883] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1789.669633] sk_stream_alloc_skb+0x109/0xc30 [ 1789.670248] do_tcp_sendpages+0x9d6/0x1b80 [ 1789.670866] ? lock_release+0x680/0x680 [ 1789.671438] ? lock_downgrade+0x6d0/0x6d0 [ 1789.672004] ? tcp_send_mss+0x2b0/0x2b0 [ 1789.672535] ? mark_held_locks+0x9e/0xe0 [ 1789.673129] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1789.673878] tcp_sendpage+0x80/0xd0 [ 1789.674391] ? tcp_sendpage_locked+0xc0/0xc0 [ 1789.674990] inet_sendpage+0xc9/0x130 [ 1789.675573] kernel_sendpage.part.0+0x146/0x290 [ 1789.676254] sock_sendpage+0xe5/0x140 [ 1789.676755] ? __sock_recv_ts_and_drops+0x430/0x430 [ 1789.677406] pipe_to_sendpage+0x2af/0x380 [ 1789.677953] ? propagate_umount+0x1550/0x1550 [ 1789.678560] ? splice_from_pipe_next.part.0+0x166/0x520 [ 1789.679289] __splice_from_pipe+0x43d/0x890 [ 1789.679894] ? propagate_umount+0x1550/0x1550 [ 1789.680495] generic_splice_sendpage+0xd5/0x140 [ 1789.681123] ? __do_sys_vmsplice+0x8d0/0x8d0 [ 1789.681727] ? security_file_permission+0xb1/0xe0 [ 1789.682388] ? __do_sys_vmsplice+0x8d0/0x8d0 [ 1789.682986] direct_splice_actor+0x10f/0x170 [ 1789.683569] splice_direct_to_actor+0x387/0x980 [ 1789.684197] ? pipe_to_sendpage+0x380/0x380 [ 1789.684799] ? do_splice_to+0x160/0x160 [ 1789.685348] ? security_file_permission+0xb1/0xe0 [ 1789.686003] do_splice_direct+0x1c4/0x290 [ 1789.686580] ? splice_direct_to_actor+0x980/0x980 [ 1789.687228] ? security_file_permission+0xb1/0xe0 [ 1789.687861] do_sendfile+0x553/0x11e0 [ 1789.688360] ? do_pwritev+0x270/0x270 [ 1789.688848] ? wait_for_completion_io+0x270/0x270 [ 1789.689468] ? rcu_read_lock_any_held+0x75/0xa0 [ 1789.690056] ? vfs_write+0x354/0xb10 [ 1789.690539] __x64_sys_sendfile64+0x1d1/0x210 [ 1789.691129] ? __ia32_sys_sendfile+0x220/0x220 [ 1789.691745] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1789.692477] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1789.693158] do_syscall_64+0x33/0x40 [ 1789.693637] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1789.694301] RIP: 0033:0x7efca6f2bb19 [ 1789.694826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1789.697294] RSP: 002b:00007efca44a1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1789.698273] RAX: ffffffffffffffda RBX: 00007efca703ef60 RCX: 00007efca6f2bb19 [ 1789.699262] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 1789.700238] RBP: 00007efca44a11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1789.701179] R10: 00000080464c453f R11: 0000000000000246 R12: 0000000000000002 [ 1789.702118] R13: 00007ffdba8bcc9f R14: 00007efca44a1300 R15: 0000000000022000 [ 1789.703281] hpet: Lost 1 RTC interrupts 08:43:59 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x58, 0x1, 0x1, 0x3, 0x0, 0x0, {0xa}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0xffffffffffffff90, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) 08:43:59 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000240)=""/134, 0x86}], 0x1, 0x63, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x5) syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)=0x0) r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000006c0)=ANY=[@ANYBLOB="010000009bd77e7d3db3c295", @ANYRES32, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="b92b66696c652fe1451d4e7b754bc7f05f0ff404807bf64d176a29993195992c14f39ee8328796f81d1886f6cb48f1ed71a941835b5840190114030000000000000000fcd38d0a302906ffc32f46cf3af18994531a341440560ab5b9e8f25260ef7b4e28db855ed9e895bd4b2fbdedef955a9ddf4161dc9347ef97623a3ebf9ca8933a81653dd955d769a92740fbed0519a0fe8fb2bd1f20fa5a24997c0cf4682cd464c3bcd44c267b10cfd7565652376257be8c2ef9d94e9ad1d44011543b4d0e2c77577a1157a58a7edab4a0981d3549776f000000dfcc0800"/228]) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000100)={0x3000000a}) syz_io_uring_submit(0x0, r1, &(0x7f00000003c0)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x2004, @fd_index=0x6, 0x0, 0x1000, 0x8, 0x0, 0x1}, 0x1003) r4 = dup(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$nl_generic(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0xa4, 0x17, 0x200, 0x70bd2a, 0x25dfdbff, {0x4}, [@generic="de736dbd232a9c42fc6ee334453ee31f353955443c0620d4d97f24d5d96bf2ac78373c9e3a28fb3a569bd4fc6e64c25eaa47de0ff8441317a24077231ab53e9e6d91c6212c62a99f16e648f74f64b538c63adfe1f58632fcc3872c10056fc1abc7a7b0a54ac9e0769e50304338", @typed={0x8, 0x3a, 0x0, 0x0, @u32=0x3}, @nested={0xc, 0x7a, 0x0, 0x1, [@typed={0x8, 0x40, 0x0, 0x0, @u32=0xff}]}, @typed={0xc, 0x78, 0x0, 0x0, @u64=0x6}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4008000}, 0x41) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000005c0)={{{@in=@private, @in=@initdev}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000400)=0xe8) r5 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000340)={0x2, 0x2, 0x80000001, 0x4, 0x7}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1789.776359] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1789.777590] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1789.805296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1789.806525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1789.808207] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 08:43:59 executing program 7: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x80464c453f) (fail_nth: 21) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x10, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3ab", 0x6f}], 0x1, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @tclass={{0x14}}, @hoplimit={{0x14}}], 0x58}, 0x4000) 08:43:59 executing program 4: r0 = syz_io_uring_setup(0x4d53, &(0x7f00000002c0), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000740), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) r5 = fcntl$dupfd(r3, 0x406, r4) sendto$unix(r5, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1, 0x0, 0x0, 0x0, 0x23456}, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = signalfd(0xffffffffffffffff, &(0x7f0000000280), 0x8) io_submit(0x0, 0x1, &(0x7f00000006c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}]) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x30, r7, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index}, 0x8001) [ 1789.818019] FAULT_INJECTION: forcing a failure. [ 1789.818019] name failslab, interval 1, probability 0, space 0, times 0 [ 1789.819525] CPU: 1 PID: 10961 Comm: syz-executor.7 Not tainted 5.10.237 #1 [ 1789.820432] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1789.821534] Call Trace: [ 1789.821893] dump_stack+0x107/0x167 [ 1789.822423] should_fail.cold+0x5/0xa [ 1789.822934] ? create_object.isra.0+0x3a/0xa20 [ 1789.823595] should_failslab+0x5/0x20 [ 1789.824130] kmem_cache_alloc+0x5b/0x310 [ 1789.824699] create_object.isra.0+0x3a/0xa20 [ 1789.825290] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1789.825961] kmem_cache_alloc_node+0x169/0x330 [ 1789.826571] __alloc_skb+0x6d/0x5b0 [ 1789.827055] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1789.827753] sk_stream_alloc_skb+0x109/0xc30 [ 1789.828333] do_tcp_sendpages+0x9d6/0x1b80 [ 1789.828924] ? lock_release+0x680/0x680 [ 1789.829448] ? lock_downgrade+0x6d0/0x6d0 [ 1789.829987] ? tcp_send_mss+0x2b0/0x2b0 [ 1789.830510] ? mark_held_locks+0x9e/0xe0 [ 1789.831046] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1789.831732] tcp_sendpage+0x80/0xd0 [ 1789.832351] ? tcp_sendpage_locked+0xc0/0xc0 [ 1789.832954] inet_sendpage+0xc9/0x130 [ 1789.833460] kernel_sendpage.part.0+0x146/0x290 [ 1789.834115] sock_sendpage+0xe5/0x140 [ 1789.834622] ? __sock_recv_ts_and_drops+0x430/0x430 [ 1789.835305] pipe_to_sendpage+0x2af/0x380 [ 1789.835892] ? propagate_umount+0x1550/0x1550 [ 1789.836592] ? splice_from_pipe_next.part.0+0x166/0x520 [ 1789.837460] __splice_from_pipe+0x43d/0x890 [ 1789.838079] ? propagate_umount+0x1550/0x1550 [ 1789.838738] generic_splice_sendpage+0xd5/0x140 [ 1789.839527] ? __do_sys_vmsplice+0x8d0/0x8d0 [ 1789.840273] ? security_file_permission+0xb1/0xe0 [ 1789.841000] ? __do_sys_vmsplice+0x8d0/0x8d0 [ 1789.841598] direct_splice_actor+0x10f/0x170 [ 1789.842234] splice_direct_to_actor+0x387/0x980 [ 1789.842958] ? pipe_to_sendpage+0x380/0x380 [ 1789.843641] ? do_splice_to+0x160/0x160 [ 1789.844279] ? security_file_permission+0xb1/0xe0 [ 1789.844978] do_splice_direct+0x1c4/0x290 [ 1789.845541] ? splice_direct_to_actor+0x980/0x980 [ 1789.846222] ? security_file_permission+0xb1/0xe0 [ 1789.847012] do_sendfile+0x553/0x11e0 [ 1789.847617] ? do_pwritev+0x270/0x270 [ 1789.848457] ? wait_for_completion_io+0x270/0x270 [ 1789.849229] ? rcu_read_lock_any_held+0x75/0xa0 [ 1789.849859] ? vfs_write+0x354/0xb10 [ 1789.850365] __x64_sys_sendfile64+0x1d1/0x210 [ 1789.850968] ? __ia32_sys_sendfile+0x220/0x220 [ 1789.851617] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1789.852311] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1789.853060] do_syscall_64+0x33/0x40 [ 1789.853548] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1789.854259] RIP: 0033:0x7efca6f2bb19 [ 1789.854843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1789.857614] RSP: 002b:00007efca44a1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1789.858719] RAX: ffffffffffffffda RBX: 00007efca703ef60 RCX: 00007efca6f2bb19 [ 1789.859824] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 1789.860816] RBP: 00007efca44a11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1789.861859] R10: 00000080464c453f R11: 0000000000000246 R12: 0000000000000002 [ 1789.863079] R13: 00007ffdba8bcc9f R14: 00007efca44a1300 R15: 0000000000022000 [ 1789.877676] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1789.879189] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1789.880272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 08:44:15 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x20042, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x10010, r0, 0x39) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200080, 0x23456}, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f0000000340)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x6, 0x0, 0x0, 0x0) 08:44:15 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) pread64(r0, &(0x7f0000000180)=""/199, 0xc7, 0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4008040) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fcntl$setstatus(r2, 0x4, 0xf0ac3d2370543000) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x5}, 0x1c705, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x4052, r4, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000140)={0x2, 0x3, 0xffff, 0x3}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000001d00020000000000000010000400020008001200", @ANYRES32, @ANYBLOB="8e2afb567c5049dab9732cf28484b893fcfd880ab5baea589e57661b1636f8952dae03129ab89e4e7a135718433900cf3d4ff0ae317eeacc91e3da5a28218297aff7a03d9c33fea62687074915caa746f95b6bb5d48248caaff63665c7"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0xa, 0x4e21, 0x81, @private0, 0xdf}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3abf5375c3866c0afd7148bb0dbf63d6a303e9125d9ad676bffcd27b2c53e52bcf1a1ce477ea55f678c2ed40464e3474c6156a7f6eaca23d80e426209b43d6d6818277a8e2f463ee217205a30440776e59857fc14fc2572251bbb80eaee7edc46e42abe63c1ba32adb2fdb60513e80fde", 0xde}], 0x1, &(0x7f00000005c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x80000001}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x33, 0x0, '\x00', [@pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0xffff}}, @hopopts={{0x50, 0x29, 0x36, {0xff, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0xef}, @calipso={0x7, 0x28, {0x3, 0x8, 0x8, 0x4, [0xfffffffffffffeff, 0x6, 0x8, 0x1]}}, @ra={0x5, 0x2, 0x6}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @rthdr={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x2, 0x1f, 0x0, [@remote]}}}], 0x138}, 0x4000) [ 1806.013776] __nla_validate_parse: 2 callbacks suppressed [ 1806.013784] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1806.015825] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1806.044328] FAULT_INJECTION: forcing a failure. [ 1806.044328] name failslab, interval 1, probability 0, space 0, times 0 [ 1806.046008] CPU: 1 PID: 10984 Comm: syz-executor.7 Not tainted 5.10.237 #1 [ 1806.047026] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1806.048198] Call Trace: [ 1806.048558] dump_stack+0x107/0x167 [ 1806.049132] should_fail.cold+0x5/0xa [ 1806.049681] ? create_object.isra.0+0x3a/0xa20 [ 1806.050343] should_failslab+0x5/0x20 [ 1806.051244] kmem_cache_alloc+0x5b/0x310 08:44:15 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x58, 0x1, 0x1, 0x3, 0x0, 0x2, {0xa}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0xffffffffffffff90, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) 08:44:15 executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x1001000, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCETHTOOL(r1, 0x8943, &(0x7f0000000240)={'syz_tun\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {r0}}, './file1\x00'}) [ 1806.051974] create_object.isra.0+0x3a/0xa20 [ 1806.052643] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1806.053358] kmem_cache_alloc_node+0x169/0x330 [ 1806.053973] __alloc_skb+0x6d/0x5b0 [ 1806.054457] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1806.055138] sk_stream_alloc_skb+0x109/0xc30 [ 1806.055703] do_tcp_sendpages+0x9d6/0x1b80 [ 1806.056259] ? lock_release+0x680/0x680 [ 1806.056775] ? lock_downgrade+0x6d0/0x6d0 [ 1806.057477] ? tcp_send_mss+0x2b0/0x2b0 [ 1806.058150] ? mark_held_locks+0x9e/0xe0 [ 1806.058918] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1806.059663] ? __local_bh_enable_ip+0x9d/0x100 [ 1806.060354] tcp_sendpage+0x80/0xd0 sendmmsg(r2, &(0x7f0000003000)=[{{&(0x7f0000000040)=@llc={0x1a, 0x108, 0x5, 0x1f, 0x4, 0x6, @broadcast}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000140)="dc3b38e11dd0e944279413ecedb3262494e575d493abbf0d9950e3464e6707834781191cb1860ddbee7dcb585113f7dd47e07dcf0b48996f8d52ace988b99becec5affbad41b797ce2c107cfd850a1513ce842d5864d3a3aefdc0e8cb45b5738f557e05b96781778835051d01c8b55c7467175b5ed8b2316af24339dd7ba60fc6073b8b61fa78fa6a9df7c2767dad28e0d04faf10f80f0710a6a339ae7766f23710741c57459b8bb347742731bf68953c5c0886565bed1decb07e151c49782edd82bda93fb6f2cb1b79b6bfbc159b1fc2d931c564f5550f85d5d76c8d20ead", 0xdf}, {&(0x7f0000000280)="c242220e77335d639111b20b523d29f4b4c1caed7771ad281294cb43ba3fdf9a1f5e21a3d28880e6029c1a724b83fa59cdd7e7bc95cc79", 0x37}, {&(0x7f0000000440)="9e1edc410e342ccbeeef4f6549d52b50f5e033156df857", 0x17}, {&(0x7f0000000480)="fd661f6268ea2ce7bd8520eee816f6872a4fc6ae51bb6fcddc1d8bb3fffd4dfeb31759e148ff746e48689db7299b70ea0ac592a4526822daa3ac8c556b37b3bd156a47497664792d324a39bc4b21cd2a3d2af68340d5c277e4453e4ccfe4cd270c68f202fc90420f8570ebe7c4010f8623947beccd60344b53f28b23610a5b53c5acf22bf5298852c039076344bce1df8b61c103b8e5074a41b8c40f1338cce0b42af536b60f260867e78fe2d742bf9333e80fc40cb97d40fc10a3192645843814a008c69ff14a88732135329f7ca8f573d3b6d62831ba9a93a8eacd48ad59d08336a7fa289714ff472e843cf0de7f18d4f5bf57e1e4", 0xf6}, {&(0x7f0000000580)="fce4440fb6e6a9a569eecc8a6dc7c79d391d09b18ce6200ec95947c7d47b28dea5a82e6492fa1c673fac0a1f1f1a4dadb8", 0x31}, {&(0x7f00000005c0)="1dcd3742daac6dcd36b39a92dd4e128cbd462ff7a41676eaa0cf2a5eeb2da5721dbdc09903e812a2c877700a7a2bb68c56696799cb7ca26cc88f5e63d0a03e07a30047a3ee2afad1d4e1e461c1592ebd4b4f49c113718a7981bc8c83484a6c7ff78273cc49fd44fc12b5dd1a07ab7d18324804f63a85f4a0909f6846a22c7cc533df5c865e09725d1de9f89775eb89d3e7c3af043d", 0x95}], 0x6, &(0x7f0000000700)=[{0x50, 0x11, 0x2, "bae8d3db39e2bd98053a79d43fdb9827edc93c876bd4c561431c86813bd112f6e9f0c5fc75c2a1924033cf113153351fb4f3e12e5f34a78731c5"}, {0x18, 0x10e, 0x7, "c72dd1ca7b"}], 0x68}}, {{&(0x7f0000000780)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x2, 0x4, 0x0, 0x1, {0xa, 0x4e22, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x20}}}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000800)="e114ba26b86650fdceaf34f62a6913cd83dd94b6607acd5ddc966b7bef849f3b54a1b45ffdcf72f946422a4cfe7983c92d", 0x31}, {&(0x7f0000000840)="54b7c3f29c5c5f38109eb6a332b5", 0xe}, {&(0x7f0000000880)}, {&(0x7f00000008c0)="753fe72853c4f69ee65c852fecbec6ca630784ae84effc61935aebc579610603a02d6e69825db08be36de744802a1fa3933f82dfef9079ef3bef64eae7750d75c20da90de39d277a7ae4c6db9542937d2f370bf54c7ae8fd2e24d1b0777188221cf258ac8b5799e452d366b720f560ee9cf5eff1d2785aec0c6adafee5ca6c7128c4ec3c3afacd4e7371ed3148921a9d962dabde538c8875e656ba024ce14d45bb39d99456e40304", 0xa8}, {&(0x7f0000000980)="59c213fff8b98e868bc1e62031c32452ff820d04af8ea81e3d5dd594111801228480002e2578f78dd99f58cda6c79f44d3626b99ed78294424d4b319bd098be48f0b6a9da8ace1d5079b110540105c2dfe24caa264c2c6ba4a65b610d360f24f9bc626343b1fe64962530a514c084df651ab8e2b8e59c16b544ec2f6a062dbfedaef7433dae4848e30c2b01afbdb2d2ffab50aa3a1601fc3cb295b0f7171aebbade72b711f2a9f27b0b861b659c3", 0xae}, {&(0x7f0000000a40)='a', 0x1}, {&(0x7f0000000c00)="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", 0x1000}, {&(0x7f0000000a80)="cdfbb9a7c1215739bfc99369f73337835fe75e17d15a2378db47fb2688522abb11283a635b6eaccd7cd549e614bd6726b30b3aa10a5c1127feff19ea7b0d630e8f2517a25d7b07ec164b9c08094bfd0fd61dd37d62388e1b0ebd01550c10eb582ad6138fbc9b6421913cabce4e350c8abd", 0x71}], 0x8}}, {{&(0x7f0000001c00)=@l2tp6={0xa, 0x0, 0xfffffffc, @mcast1, 0x7}, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000001c80)="389b2c1059276264b64d7a", 0xb}, {&(0x7f0000001cc0)="9e24af72ad1c32c376eaff77bc87a7e02520c4999a2191eced00ac6dfe948484b064bb6ec5203a4e271d5ef69616ada47f8b2900c6e7e473995240224b3d966873d4cc323afa3407c0ad4288cd6ba3718792a2f7533cbb1ed837b68715add0d75e3471487c15a0f4fd934a6a5f39537cf86ef3c778c60e040c8104f669eb6b60eabc14a877b67b8aeef5e525ac6929f6564230620d78a444f054b3129ec1b69c7eb74da1fcea4a3c302206b90a42d1470fb2bd8ca11f6370cd1e5fe0770bcdfe80121543ec3d", 0xc6}], 0x2, &(0x7f0000001e00)=[{0x88, 0x5dc998d78e3c6520, 0x5, "edc8e167d291b696271408ab7a620175836ffb251d7d97330bb67caf56a3b19648379a0572edc7c753ec9eb85be915ae825c61f70472e6e5beb1131881a130b7ea8b30b336e504ed79c2f2826ee8e2add1412607ac6232f72ac302de14750075c3ff7c00fa025b22045410f67bd2186c7185d641ca"}, {0x68, 0x118, 0x3f, "3bf4c85281dce5f48176d5ca66c1ce950b7b56653c8468958826cac3d231cc943d2ffc45dd2a1fc78702e579e3fb4e36d8b4d62f4053ad9440485000c333a255ef59e29f4f89a62a4381bc0a12836df3419c"}], 0xf0}}, {{0x0, 0x0, &(0x7f0000002fc0)=[{&(0x7f0000001f00)="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", 0x1000}, {&(0x7f0000002f00)="33ad0458855d795eb6d0d5dc1a03edd9406a863a8e3f5a1dddde752861f3bd75353c80e073d0b53096d606b6cec67f463ccab3c74e0ad73a9d0c005e824f45c173df74bce58c66e45de7892c5c03c93e1a3f94734787665cef651f8a01e6ba8d318164d002f4bd8b39324ee4f6f7ea7e246602be1ea0d450a2bc82c2042bad3e84b13ff4e098502ab80e6a58513a056c0f59cb81f36bd0623093d01e199f5bf1d8acadbecfb65ea94ce3417e990d4cc2a21a225850b1a9a467585746", 0xbc}], 0x2}}], 0x4, 0x8000) fcntl$dupfd(r0, 0x0, r0) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x1ff, 0x2, &(0x7f0000000400)=[{&(0x7f0000000380)="0376025d17297c206a083d7918ca352d9a48c41d", 0x14, 0xffffffff}, {&(0x7f00000003c0)="a84c3b8968574dfe7e50392ddfe538cb09187cc86b81373c1c858fccb4a9b15fdbfdb2aff5c8", 0x26, 0x4}], 0x80, &(0x7f0000000b80)=ANY=[@ANYBLOB="7379737667726f7570732c6772706a71756f74613d2c7374726970653d3078303030304b30303030303030303030372c004fafbaef355c0405503bbde8d65498a4910f006e59ae09914dab7ba0165e5ba47e2ee7ba7d"]) 08:44:15 executing program 7: perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r1, r0, 0x0, 0x80464c453f) (fail_nth: 22) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x10, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3ab", 0x6f}], 0x1, &(0x7f00000005c0)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @tclass={{0x14}}, @hoplimit={{0x14}}], 0x58}, 0x4000) [ 1806.060867] ? tcp_sendpage_locked+0xc0/0xc0 [ 1806.061987] inet_sendpage+0xc9/0x130 [ 1806.062625] kernel_sendpage.part.0+0x146/0x290 [ 1806.063291] sock_sendpage+0xe5/0x140 [ 1806.063836] ? __sock_recv_ts_and_drops+0x430/0x430 [ 1806.064523] pipe_to_sendpage+0x2af/0x380 [ 1806.065127] ? propagate_umount+0x1550/0x1550 [ 1806.065748] ? splice_from_pipe_next.part.0+0x166/0x520 [ 1806.066493] __splice_from_pipe+0x43d/0x890 [ 1806.067232] ? propagate_umount+0x1550/0x1550 [ 1806.067832] generic_splice_sendpage+0xd5/0x140 [ 1806.068476] ? __do_sys_vmsplice+0x8d0/0x8d0 [ 1806.069137] ? security_file_permission+0xb1/0xe0 [ 1806.069805] ? __do_sys_vmsplice+0x8d0/0x8d0 [ 1806.070409] direct_splice_actor+0x10f/0x170 [ 1806.070989] splice_direct_to_actor+0x387/0x980 [ 1806.071626] ? pipe_to_sendpage+0x380/0x380 [ 1806.072231] ? do_splice_to+0x160/0x160 [ 1806.072771] ? security_file_permission+0xb1/0xe0 [ 1806.073471] do_splice_direct+0x1c4/0x290 [ 1806.074045] ? splice_direct_to_actor+0x980/0x980 [ 1806.074702] ? security_file_permission+0xb1/0xe0 [ 1806.075353] do_sendfile+0x553/0x11e0 [ 1806.075881] ? do_pwritev+0x270/0x270 [ 1806.076400] ? wait_for_completion_io+0x270/0x270 [ 1806.077086] ? rcu_read_lock_any_held+0x75/0xa0 [ 1806.077700] ? vfs_write+0x354/0xb10 [ 1806.078223] __x64_sys_sendfile64+0x1d1/0x210 [ 1806.078847] ? __ia32_sys_sendfile+0x220/0x220 [ 1806.079480] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1806.080206] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1806.080907] do_syscall_64+0x33/0x40 [ 1806.081425] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1806.082135] RIP: 0033:0x7efca6f2bb19 [ 1806.082749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1806.085524] RSP: 002b:00007efca44a1188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1806.086586] RAX: ffffffffffffffda RBX: 00007efca703ef60 RCX: 00007efca6f2bb19 [ 1806.087607] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 1806.088606] RBP: 00007efca44a11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1806.089623] R10: 00000080464c453f R11: 0000000000000246 R12: 0000000000000002 [ 1806.090686] R13: 00007ffdba8bcc9f R14: 00007efca44a1300 R15: 0000000000022000 08:44:15 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x8) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x14, 0x0, 0x2}, 0xfffffffffffffd9c}}, 0x4) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x10001) write$binfmt_elf64(r2, &(0x7f00000008c0)=ANY=[], 0x629) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r4, &(0x7f00000000c0)="04b7bc794f48bc83c872893618db1950b3fc02d86463b9274eef13", 0x1b, 0x3ff02) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000, 0x3, 0x0, 0x0, 0xd10f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c00, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)=@nfc_llcp={0x27, 0x2, 0x0, 0x0, 0x0, 0x0, "473d7fcc115d845089a8e3fefc4327c35d5f4c097347fb24dc1b3b1ba18171798bdc0062ea0b5e364eee2b3dc94c1742ea96765c683f90df0000000100"}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000140)="480300000013890000004c", 0xb}], 0x1}, 0x0) flock(0xffffffffffffffff, 0x6) ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, 0x0) sendfile(r2, r0, 0x0, 0xffffffff000) 08:44:15 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r4) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x88, r5, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_DEVICE={0x30, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x4}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x80}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xfffffffc}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0xe27ddd9c764c69b9}, 0x40498c4) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x50, r5, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000015}, 0x8010) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r7, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x5c, r5, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xfffe}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004810}, 0x4000080) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r9, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x80}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0xe0, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0xb8, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xbd}, @NL802154_KEY_ATTR_ID={0x50, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x745}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}]}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "4e17328c97868f0368544a7800dad266"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x5b}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "46e967daa374a12c8222e804c9d4ad65"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0xe0}, 0x1, 0x0, 0x0, 0x1}, 0x20040841) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r2, 0xd8499488957a772f, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000580), r0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000bc0), 0x424400, 0x0) 08:44:16 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vcsu(0x0, 0x0, 0x8000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xfdef) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) creat(0x0, 0x111) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r6, 0x6628) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f000004b740)={0x0, [{r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r3, r5}, {0x0, 0x0}, {r3, r5}, {r3}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {0x0, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3}, {0x0, r5}, {r4, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4, r5}, {}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r3, r5}, {r4}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r3, r5}, {r4}, {r3, r5}, {r4, r5}, {r3, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {}, {0x0, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r3}, {r4}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {0x0, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r3}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {0x0, r5}, {r3, r5}, {r3, r5}, {0x0, r5}, {r4, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {0x0, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4}, {r4, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r3}, {r3, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r4, r5}, {r4, r5}, {r4}], 0xff, "7e09c2aef4697d"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000007d440)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r12}, {}, {}, {}, {}, {}, {}, {r11}], 0x0, "46dacd8396fe92"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000057b00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}], 0x80, "5fabd34a60e47f"}) [ 1806.143223] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1806.144678] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1806.213352] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1806.241283] ------------[ cut here ]------------ [ 1806.242241] wlan1: Failed check-sdata-in-driver check, flags: 0x4 [ 1806.243381] WARNING: CPU: 1 PID: 11004 at net/mac80211/driver-ops.h:172 drv_bss_info_changed+0x554/0x5f0 [ 1806.244762] Modules linked in: [ 1806.245214] CPU: 1 PID: 11004 Comm: syz-executor.4 Not tainted 5.10.237 #1 ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000004c740)={r5, r4, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f000004d740)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004d940)={0x8, [{r3, r5}, {}, {r4, r5}, {0x0, r5}, {r3, r5}, {0x0, r5}, {r3}, {}, {}, {r3}, {r4, r5}, {r4}, {}, {}, {}, {}, {0x0, r5}, {r4}, {0x0, r5}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {r3}, {r3}, {r3}, {}, {}, {}, {}, {r3}, {}, {0x0, r5}, {}, {}, {}, {}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4, r5}, {r4}, {r3, r5}, {r3}, {r4}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {}, {r4}, {r4, r5}, {}, {}, {r4}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {r3}, {}, {0x0, r5}, {}, {0x0, r5}, {r3}, {}, {r3}, {0x0, r5}, {r3, r5}, {r3, r5}, {r3}, {r4}, {r3}, {r4, r5}, {r3}, {0x0, r5}, {}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {}, {}, {}, {}, {r3}, {r3, r5}, {r4}, {r3}, {r4}, {0x0, r5}, {r3, r5}, {r4}, {0x0, r5}, {r3}, {r3}, {}, {r4}, {0x0, r5}, {}, {}, {}, {r4}, {}, {r4, r5}, {}, {0x0, r5}, {r3}, {r3}, {}, {r3}, {r3}, {r4, r5}, {r4, r5}, {}, {0x0, r5}, {}, {r4}, {r3, r5}, {}, {0x0, r5}, {r3, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {0x0, r5}, {r4}, {r4}, {0x0, r5}, {r3, r5}, {}, {r3}, {0x0, r5}, {0x0, r5}, {r3, r5}, {}, {0x0, r5}, {}, {}, {}, {r3}, {0x0, r5}, {r3, r5}, {r4}, {r4}, {0x0, r5}, {}, {r3}, {0x0, r5}, {}, {r4}, {}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {}, {0x0, r5}, {0x0, r5}, {}, {0x0, r5}, {r4, r5}, {0x0, r5}, {r3, r5}, {r4, r5}, {r4}, {}, {0x0, r5}, {}, {r4, r5}, {r3, r5}, {}, {0x0, r5}, {}, {r4, r5}, {}, {}, {}, {0x0, r5}, {r3}, {r4, r5}, {}, {0x0, r5}, {}, {}, {0x0, r5}, {r4}, {r4, r5}, {0x0, r5}, {}, {0x0, r5}, {r4}, {0x0, r5}, {}, {0x0, r5}, {r3}, {0x0, r5}, {r3, r5}, {0x0, r5}, {r4}, {r3}, {0x0, r5}, {r4, r5}, {r3, r5}, {r3}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r4}, {0x0, r5}, {}, {}, {r4}, {}, {r3}, {}, {}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4}, {r4, r5}, {r3, r5}, {}, {}, {r4}, {r3}, {r3, r5}, {}, {}, {0x0, r5}, {}, {r4}, {0x0, r5}, {}, {r3, r5}, {r4, r5}, {}, {r3}, {}, {r4}, {r4, r5}, {r4}, {r3, r7}, {r3, r10}, {r13, r14}], 0x2, "49b894408d5356"}) fallocate(r0, 0x0, 0x0, 0x1000002) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x100000f, 0x1f012, r0, 0x0) 08:44:16 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x58, 0x1, 0x1, 0x3, 0x0, 0x3, {0xa}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0xffffffffffffff90, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) 08:44:16 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) pread64(r0, &(0x7f0000000180)=""/199, 0xc7, 0x1) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4008040) r1 = creat(&(0x7f0000000100)='./file1\x00', 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) fcntl$setstatus(r2, 0x4, 0xf0ac3d2370543000) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x5}, 0x1c705, 0x8, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/exe\x00', 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendfile(r5, r4, 0x0, 0x80464c453f) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000000, 0x4052, r4, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000140)={0x2, 0x3, 0xffff, 0x3}) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000001d00020000000000000010000400020008001200", @ANYRES32, @ANYBLOB="8e2afb567c5049dab9732cf28484b893fcfd880ab5baea589e57661b1636f8952dae03129ab89e4e7a135718433900cf3d4ff0ae317eeacc91e3da5a28218297aff7a03d9c33fea62687074915caa746f95b6bb5d48248caaff63665c7"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet6(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0xa, 0x4e21, 0x81, @private0, 0xdf}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000700)="eee6fd96f1035c402425714828be8483c1c2c8b4731d4336f7a80254a4a8f03395a456a54f548a83120bee09d9fd752bf122521b8e10d20619de0c306713f9319e716b1c2271c7154ed764e5256f89d86170d6712834733d440c642a5ec650d4cfd9728b9dda5663bb86c21f30d3abf5375c3866c0afd7148bb0dbf63d6a303e9125d9ad676bffcd27b2c53e52bcf1a1ce477ea55f678c2ed40464e3474c6156a7f6eaca23d80e426209b43d6d6818277a8e2f463ee217205a30440776e59857fc14fc2572251bbb80eaee7edc46e42abe63c1ba32adb2fdb60513e80fde", 0xde}], 0x1, &(0x7f00000005c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x80000001}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x33, 0x0, '\x00', [@pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0xffff}}, @hopopts={{0x50, 0x29, 0x36, {0xff, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0xef}, @calipso={0x7, 0x28, {0x3, 0x8, 0x8, 0x4, [0xfffffffffffffeff, 0x6, 0x8, 0x1]}}, @ra={0x5, 0x2, 0x6}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @rthdr={{0x28, 0x29, 0x39, {0x3b, 0x2, 0x2, 0x1f, 0x0, [@remote]}}}], 0x138}, 0x4000) 08:44:16 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x28, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xff}]}]}, 0x28}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x28, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0xff}]}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r5, 0x20, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x6, 0x60}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x65}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x41}]}, 0x40}, 0x1, 0x0, 0x0, 0x40010}, 0x80c0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, r2, 0x2ff, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}}, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan1\x00', &(0x7f0000000380)=@random='y', 0x1, 0x0) [ 1806.245813] hpet: Lost 3 RTC interrupts [ 1806.246271] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1806.247934] RIP: 0010:drv_bss_info_changed+0x554/0x5f0 [ 1806.248737] Code: 49 8b ac 24 a8 03 00 00 48 85 ed 74 3e e8 64 6d 8b fd e8 5f 6d 8b fd 8b 54 24 04 48 89 ee 48 c7 c7 20 e1 95 84 e8 55 0c 25 00 <0f> 0b e9 c7 fd ff ff 4c 89 ff e8 0d 73 b7 fd e9 97 fb ff ff 4c 89 [ 1806.251583] RSP: 0018:ffff88800fe4f5d0 EFLAGS: 00010282 [ 1806.252299] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1806.253265] RDX: 0000000000040000 RSI: ffffffff8129e6f3 RDI: ffffed1001fc9eac [ 1806.254436] RBP: ffff8880477e4000 R08: 0000000000000001 R09: ffff88806cf37b0f [ 1806.255303] R10: 0000000000000000 R11: 0000000000000001 R12: ffff8880477e4bc0 [ 1806.256163] R13: 0000000000400000 R14: ffff8880477e5da0 R15: ffff8880477e5d98 [ 1806.257099] FS: 00007fee559a9700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000 [ 1806.261910] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1806.262748] CR2: 00005634a4780128 CR3: 0000000020022000 CR4: 0000000000350ee0 [ 1806.263891] Call Trace: [ 1806.264308] ieee80211_bss_info_change_notify+0x9a/0xc0 [ 1806.265125] ieee80211_ocb_leave+0x1ed/0x340 [ 1806.265805] ? nl80211_parse_mon_options+0x477/0x6d0 [ 1806.266594] __cfg80211_leave_ocb+0x1d6/0x570 [ 1806.267275] cfg80211_leave_ocb+0x4e/0x70 [ 1806.267959] cfg80211_change_iface+0x843/0xf90 [ 1806.268619] nl80211_set_interface+0x67c/0x8f0 [ 1806.269402] ? nl80211_notify_iface+0x180/0x180 [ 1806.270216] ? nl80211_pre_doit+0xa2/0x640 [ 1806.270882] genl_family_rcv_msg_doit+0x22d/0x330 [ 1806.271562] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 1806.272527] ? cap_capable+0x1cd/0x230 [ 1806.273142] ? ns_capable+0xe2/0x110 [ 1806.273691] genl_rcv_msg+0x36a/0x5a0 [ 1806.274272] ? genl_get_cmd+0x480/0x480 [ 1806.274887] ? nl80211_notify_iface+0x180/0x180 [ 1806.275556] ? lock_release+0x680/0x680 [ 1806.276143] ? __lockdep_reset_lock+0x180/0x180 [ 1806.276811] netlink_rcv_skb+0x14b/0x430 [ 1806.277387] ? genl_get_cmd+0x480/0x480 [ 1806.278006] ? netlink_ack+0xab0/0xab0 [ 1806.278596] ? netlink_deliver_tap+0x1c4/0xcc0 [ 1806.279268] ? is_vmalloc_addr+0x7b/0xb0 [ 1806.279880] genl_rcv+0x24/0x40 [ 1806.280368] netlink_unicast+0x54e/0x800 [ 1806.280984] ? netlink_attachskb+0x870/0x870 [ 1806.281703] netlink_sendmsg+0x90f/0xe00 [ 1806.282331] ? netlink_unicast+0x800/0x800 [ 1806.282957] ? netlink_unicast+0x800/0x800 [ 1806.283549] __sock_sendmsg+0x154/0x190 [ 1806.284189] __sys_sendto+0x21c/0x320 [ 1806.284731] ? __ia32_sys_getpeername+0xb0/0xb0 [ 1806.285525] ? kmem_cache_free+0xa7/0x2d0 [ 1806.286230] ? _cond_resched+0x10/0x30 [ 1806.286829] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1806.287622] ? call_rcu+0x435/0x9c0 [ 1806.288189] ? trace_hardirqs_on+0x5b/0x180 [ 1806.288907] __x64_sys_sendto+0xdd/0x1b0 [ 1806.289520] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1806.290294] do_syscall_64+0x33/0x40 [ 1806.290898] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1806.291690] RIP: 0033:0x7fee583e68ac [ 1806.292234] Code: fa fa ff ff 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 20 fb ff ff 48 8b [ 1806.294867] RSP: 002b:00007fee559a7f80 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1806.295949] RAX: ffffffffffffffda RBX: 00007fee559a80f0 RCX: 00007fee583e68ac [ 1806.297073] RDX: 0000000000000024 RSI: 00007fee559a8140 RDI: 0000000000000007 [ 1806.298168] RBP: 0000000000000000 R08: 00007fee559a7fd4 R09: 000000000000000c [ 1806.299219] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1806.300308] R13: 00007fee559a8140 R14: 0000000000000007 R15: 0000000000000000 [ 1806.301523] irq event stamp: 4087 [ 1806.302021] hardirqs last enabled at (4097): [] console_unlock+0x92d/0xb40 [ 1806.303253] hardirqs last disabled at (4106): [] console_unlock+0x839/0xb40 [ 1806.304455] softirqs last enabled at (3504): [] asm_call_irq_on_stack+0x12/0x20 [ 1806.305728] softirqs last disabled at (3435): [] asm_call_irq_on_stack+0x12/0x20 [ 1806.307005] ---[ end trace cda4aeaf715fab7d ]--- 08:44:16 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x58, 0x1, 0x1, 0x3, 0x0, 0x4, {0xa}, [@CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0xffffffffffffff90, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x58}}, 0x0) 08:44:16 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x20042, 0x0) mmap$usbmon(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x10010, r0, 0x39) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(0x0, 0x0, 0x0, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1000}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200080, 0x23456}, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r4, r3, &(0x7f0000000340)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x58ab, 0x7, 0x0, 0x0, 0x0) [ 1806.342669] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1806.343801] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1806.345014] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1806.358797] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1806.360276] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1806.389738] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. VM DIAGNOSIS: 08:44:16 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000006 RCX=ffffffff8199fafd RDX=0000000000000000 RSI=ffff888047de9a40 RDI=0000000000000001 RBP=ffffea0001434f40 RSP=ffff88804f5b7740 R8 =0000000000000001 R9 =ffffea0001434f47 R10=0000000000000000 R11=0000000000000001 R12=ffffea0001434f48 R13=dffffc0000000000 R14=ffffea0001434f00 R15=ffff88804f5b7ad8 RIP=ffffffff8140bce0 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555591074400 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000001b2d02d000 CR3=000000004d2d6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffff00ffffffffffffffff XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000066 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822e0031 RDI=ffffffff879f3140 RBP=ffffffff879f3100 RSP=ffff88800fe4efe0 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000000 R11=0000000000000001 R12=0000000000000066 R13=0000000000000066 R14=ffffffff879f3100 R15=dffffc0000000000 RIP=ffffffff822e0088 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fee559a9700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005634a4780128 CR3=0000000020022000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=ffffffffffffffffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff XMM04=ffffffffffffffffff00ff0000000000 XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000