0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x4827d9d3570e76e1}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb62) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400ffbd0000"], 0x14}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup(r4) r5 = dup2(r1, r3) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x8010, r5, 0x10000000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@private, @in=@initdev}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000280)=0xe8) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1363.318069] kauditd_printk_skb: 6 callbacks suppressed [ 1363.318088] audit: type=1326 audit(1751717325.204:1108): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11454 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1363.332462] FAULT_INJECTION: forcing a failure. [ 1363.332462] name failslab, interval 1, probability 0, space 0, times 0 [ 1363.335266] CPU: 1 PID: 11457 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 1363.335613] audit: type=1326 audit(1751717325.217:1109): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11454 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=57 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1363.336793] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1363.336803] Call Trace: [ 1363.336837] dump_stack+0x107/0x167 [ 1363.336870] should_fail.cold+0x5/0xa [ 1363.336902] ? memcg_alloc_page_obj_cgroups+0x73/0x100 [ 1363.336924] should_failslab+0x5/0x20 [ 1363.336941] __kmalloc_node+0x76/0x420 [ 1363.336968] memcg_alloc_page_obj_cgroups+0x73/0x100 [ 1363.337013] memcg_slab_post_alloc_hook+0x1f0/0x430 12:08:45 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@ieee802154={0x24, @none={0x0, 0x3}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508", 0x5}], 0x1}, 0x0, 0x4008000}, 0x0) syz_open_procfs(0x0, &(0x7f00000047c0)='net/rt6_stats\x00') mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x40010, 0xffffffffffffffff, 0x8000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r5 = syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4, 0x0, 0x86, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, 0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000340)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x2004, @fd_index=0x4, 0x1, &(0x7f00000000c0)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x1, 0x8, 0x1}, 0x0) r7 = socket$netlink(0x10, 0x3, 0xa) bind$netlink(r7, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc) socket$netlink(0x10, 0x3, 0x6) recvmsg(r7, &(0x7f0000004780)={&(0x7f0000003280)=@can, 0x80, &(0x7f0000004680)=[{&(0x7f0000003300)=""/214, 0xd6}, {&(0x7f0000003400)=""/72, 0x48}, {&(0x7f0000003480)=""/172, 0xac}, {&(0x7f0000003540)=""/134, 0x86}, {&(0x7f0000003600)=""/4096, 0x1000}, {&(0x7f0000004600)=""/89, 0x59}], 0x6, &(0x7f0000004700)=""/96, 0x60}, 0x10101) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x1, 0x0, 0x0, 0x200, &(0x7f00000048c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff], 0x6}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x2, 0x0, 0x0) 12:08:45 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x10181, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc02, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x4) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$user(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000000)=@keyring={'key_or_keyring:', r4, 0xa}) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffc, r3, 0x0) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000000100)={r2, 0xc3, 0xe8}, &(0x7f0000000480)={'enc=', 'pkcs1', ' hash=', {'rmd160-generic\x00'}}, &(0x7f0000000280)="55dbb51f1079087bbc360aecd72e1a8d3c58afd5097448c1c001a2205859fb0a9a2d24da9274e02498b7a1382185962d712107729aaaf37f265a94aa45ee42fd89c3bbf4a7ddad5c4d9e2acf344d479ea7b7de4c727801d3ceff410203dd02679ea8b845780a6f27eb912f84786de86dbec143560ca69a7a7e7777a653cd12f455adc18fe159e488e8a969e9c66d0cb638cf5e37e66189ba42a1fb309d28496f20057bf0ccfa368be94f092f3c3fe60638f276e13161757ebd015ebe3f207c3745186a", &(0x7f0000000380)=""/232) write$binfmt_elf64(r1, &(0x7f0000000a00)=ANY=[], 0x98a) openat(r0, &(0x7f0000000180)='./file0\x00', 0x400000, 0x1c4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/kernel', 0x32d02, 0x150) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000540)={0x1, 0xba, "e98eeab3b9386523f35bd3a090c50a5305f8588515db8c90010f278bd9d01ce72eab8b81ab9d9a7a427d84ddf4622b05f1a8ca7616851bbc61889242123db42a44c0fa7c8abd12c4b9de292729f1326079847bc6262d593034c3203dbe9dd07618c1debe6c8b80d6d1e9ab9f45b4825b0dd2517faa84f5bfb9bbaac3bef9adc3fe51b3039fd655c56d06421eccdb139df3e45aa664de88d7fd49b42b4056f917c0b2c331dba3a4e3aae61efd916ebd3c4f0abd48dcea11a02f6c"}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) mmap$perf(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x10010, r5, 0x800000000000202) unshare(0x4a060400) 12:08:45 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r0, 0x1277, &(0x7f0000000540)={'\x00', 0x0, 0x4000000, 0x0, 0x1, 0x1, 0xffffffffffffffff}) creat(&(0x7f0000000000)='./file0\x00', 0xc4) [ 1363.351190] ? trace_hardirqs_on+0x5b/0x180 [ 1363.352176] kmem_cache_alloc_trace+0x169/0x320 [ 1363.353203] alloc_pipe_info+0x10a/0x590 [ 1363.354075] splice_direct_to_actor+0x774/0x980 [ 1363.355180] ? _cond_resched+0x10/0x30 [ 1363.356007] ? inode_security+0x107/0x140 [ 1363.356899] ? pipe_to_sendpage+0x380/0x380 [ 1363.357830] ? avc_policy_seqno+0x9/0x70 [ 1363.358689] ? selinux_file_permission+0x92/0x520 [ 1363.359709] ? do_splice_to+0x160/0x160 [ 1363.360553] ? security_file_permission+0xb1/0xe0 [ 1363.361616] do_splice_direct+0x1c4/0x290 [ 1363.362118] audit: type=1326 audit(1751717325.247:1110): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11454 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1363.362503] ? splice_direct_to_actor+0x980/0x980 [ 1363.368481] ? avc_policy_seqno+0x9/0x70 [ 1363.369386] ? security_file_permission+0xb1/0xe0 [ 1363.370469] do_sendfile+0x553/0x11e0 [ 1363.371340] ? do_pwritev+0x270/0x270 [ 1363.372155] ? wait_for_completion_io+0x270/0x270 [ 1363.373207] ? rcu_read_lock_any_held+0x75/0xa0 [ 1363.374191] ? vfs_write+0x354/0xb10 [ 1363.374996] __x64_sys_sendfile64+0x1d1/0x210 [ 1363.375948] ? __ia32_sys_sendfile+0x220/0x220 [ 1363.376927] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1363.378047] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1363.379133] do_syscall_64+0x33/0x40 [ 1363.379919] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1363.381014] RIP: 0033:0x7efcccb57b19 [ 1363.381795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1363.385684] RSP: 002b:00007efcca0cd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1363.387382] RAX: ffffffffffffffda RBX: 00007efcccc6af60 RCX: 00007efcccb57b19 [ 1363.388890] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1363.390397] RBP: 00007efcca0cd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1363.391898] R10: 00000ffffffff000 R11: 0000000000000246 R12: 0000000000000001 [ 1363.393411] R13: 00007ffdb544bb5f R14: 00007efcca0cd300 R15: 0000000000022000 [ 1363.421327] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1363.429235] audit: type=1326 audit(1751717325.259:1111): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11454 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1363.439901] audit: type=1326 audit(1751717325.259:1112): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11454 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1363.449141] audit: type=1326 audit(1751717325.259:1113): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11454 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1363.492106] audit: type=1326 audit(1751717325.259:1114): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11454 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1363.513377] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1363.514955] audit: type=1326 audit(1751717325.259:1115): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11454 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1363.535651] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 12:08:45 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, &(0x7f0000000540)={'\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r0 = perf_event_open$cgroup(&(0x7f0000000040)={0x5, 0x80, 0x3, 0xa4, 0x0, 0x5, 0x0, 0xa26, 0x80000, 0x4, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0xa7a, 0x1, @perf_bp={&(0x7f0000000000), 0x9}, 0x4a021, 0x3, 0xfffffc00, 0x2, 0x7, 0x2, 0x400, 0x0, 0x6, 0x0, 0x80000000}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x2) sync_file_range(r0, 0x11, 0x200, 0x1) [ 1363.537244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1363.543091] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1363.547586] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 12:08:45 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xc, &(0x7f0000000100)={0x5, 0xfffffffffffffffd}, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xffffffff000) [ 1363.549501] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1363.555047] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:08:45 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fork() tkill(r0, 0x26) waitid(0x20000000, 0x0, 0x0, 0x4, 0x0) 12:08:45 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)=0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001700)=ANY=[@ANYBLOB="010000009bd77e7d3db3c295", @ANYRES32, @ANYRES32=r2, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c652fe1451d4e7b754bc7f05f0ff404807bf64d176a29993195992c14f39ee8328796f81d1886f6cb48f1ed71a941835b5840190114208ef9dda4756eab00fcd38d0a302906ffc3e8f25260ef7b4e28db855ed9e895bd4b0fbdedef955a9ddf4161dc9347ef97623a3ebf9ca8933a81653dd955d769a92740fbed0519a0fe8fb2bb1420fa5a24997c0cf4682cd464c3bcd44c267b10cfd7565652376257be8c2ef9d94e9ad1d44011543b4d0e2c77577a1157a58a7edab4a0981d3549776f00"/209]) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x4827d9d3570e76e1}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb62) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400ffbd0000"], 0x14}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup(r4) r5 = dup2(r1, r3) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x8010, r5, 0x10000000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@private, @in=@initdev}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000280)=0xe8) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1363.655705] audit: type=1326 audit(1751717325.542:1116): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11481 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 12:08:45 executing program 7: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000018c0)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000001bd81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c030519e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065f14982b1fd43abc07e6b5975ba7d712426b37c55d1e"], 0x24}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000dc0)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000008c0)={r2, 0x5, 0x80000001}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="080500988400014637b5e6a174b7b2b317b4044a94da343dd489e684a04f4ca90665864272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab7ea7e76402b517c198dc7ffbdbb38ab65f84f5242824efb291f523ece2d8e79434f9fe77da5ead57c5f16fed9a43b14e466358a6b4c3a1a8361e8199db7e4116e6031e72ada1c25a85ea221f56", @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) shutdown(r3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0x50, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x2e}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x674}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xd69}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xfffd}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x50}}, 0x40) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1363.662348] audit: type=1326 audit(1751717325.548:1117): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11481 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=57 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1363.689993] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 12:08:45 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r0, 0x1277, &(0x7f0000000540)={'\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) [ 1363.741153] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. 12:08:45 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xc, &(0x7f0000000100)={0x5, 0xfffffffffffffffd}, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xffffffff000) [ 1363.798476] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1363.800054] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1363.801789] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1363.824493] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1363.826098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1363.827981] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:08:45 executing program 4: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000280), 0xa}, 0x61b8, 0x0, 0x3, 0x0, 0x13, 0xfffffffd, 0xb419}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x20, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x4}]}, 0x20}}, 0x0) write$binfmt_script(r1, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x10e) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x20, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x4}]}, 0x20}}, 0x0) close_range(r2, r1, 0x2) r3 = dup(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000040)=""/39, 0x27}], 0x1, 0xffff57e9, 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0x4) sendmsg$nl_generic(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000240)=ANY=[@ANYBLOB="e35ded1cf4b33c0930838bd68bad3245611afd29342e77814c25c77fde3414ceae1033290b0694929530ce82dd17a49f2c6f6d2fbef16b60"], 0x1c}, 0x1, 0x0, 0x0, 0x4804}, 0x20000854) readv(r4, &(0x7f0000000400)=[{&(0x7f0000000180)=""/43, 0x2b}], 0x1) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1363.972337] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1363.973529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1363.974969] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:09:00 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x430a, 0x50000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xff}, 0x1000, 0x0, 0x10, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) fcntl$setstatus(r1, 0x4, 0xc00) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) open_by_handle_at(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x400) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8914, &(0x7f0000000140)={'lo\x00'}) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) bind$packet(r3, &(0x7f0000000040)={0x11, 0x9, 0x0, 0x1, 0x8, 0x6, @local}, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'lo\x00'}) sendmsg$inet6(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)="cf", 0x1}], 0x1}, 0x30004001) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ipvlan1\x00'}) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) 12:09:00 executing program 6: syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000000), 0x1}, 0x602, 0x7f, 0x1, 0x0, 0x0, 0x10000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0xffffffffffffffff, 0xb) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001400)=""/226) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r0 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x6000) shmctl$SHM_LOCK(r0, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/239) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x7800) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000002c0)=""/4096) shmctl$SHM_UNLOCK(0x0, 0xc) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/188) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000) shmctl$SHM_STAT(0x0, 0xd, &(0x7f00000000c0)=""/38) 12:09:00 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xc, &(0x7f0000000100)={0x5, 0xfffffffffffffffd}, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xffffffff000) [ 1378.596611] kauditd_printk_skb: 12 callbacks suppressed [ 1378.596623] audit: type=1326 audit(1751717340.483:1130): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11509 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1378.613381] audit: type=1326 audit(1751717340.500:1131): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11509 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1378.617666] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1378.619916] audit: type=1326 audit(1751717340.504:1132): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11509 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=57 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1378.629656] FAULT_INJECTION: forcing a failure. [ 1378.629656] name failslab, interval 1, probability 0, space 0, times 0 [ 1378.631290] CPU: 1 PID: 11519 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 1378.632412] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1378.633650] Call Trace: [ 1378.633986] dump_stack+0x107/0x167 [ 1378.634450] should_fail.cold+0x5/0xa [ 1378.634929] ? create_object.isra.0+0x3a/0xa20 [ 1378.635500] should_failslab+0x5/0x20 [ 1378.636011] kmem_cache_alloc+0x5b/0x310 [ 1378.636580] create_object.isra.0+0x3a/0xa20 [ 1378.637157] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1378.637826] __kmalloc+0x16e/0x390 [ 1378.638288] alloc_pipe_info+0x1e5/0x590 [ 1378.638808] splice_direct_to_actor+0x774/0x980 [ 1378.639406] ? _cond_resched+0x10/0x30 [ 1378.639907] ? inode_security+0x107/0x140 [ 1378.640434] ? pipe_to_sendpage+0x380/0x380 [ 1378.640987] ? avc_policy_seqno+0x9/0x70 [ 1378.641530] ? selinux_file_permission+0x92/0x520 [ 1378.642149] ? do_splice_to+0x160/0x160 [ 1378.642659] ? security_file_permission+0xb1/0xe0 [ 1378.643291] do_splice_direct+0x1c4/0x290 [ 1378.643823] ? splice_direct_to_actor+0x980/0x980 [ 1378.644441] ? avc_policy_seqno+0x9/0x70 [ 1378.644967] ? security_file_permission+0xb1/0xe0 [ 1378.645610] do_sendfile+0x553/0x11e0 [ 1378.646108] ? do_pwritev+0x270/0x270 [ 1378.646603] ? wait_for_completion_io+0x270/0x270 [ 1378.647223] ? rcu_read_lock_any_held+0x75/0xa0 [ 1378.647820] ? vfs_write+0x354/0xb10 [ 1378.648304] __x64_sys_sendfile64+0x1d1/0x210 12:09:00 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)=0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001700)=ANY=[@ANYBLOB="010000009bd77e7d3db3c295", @ANYRES32, @ANYRES32=r2, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c652fe1451d4e7b754bc7f05f0ff404807bf64d176a29993195992c14f39ee8328796f81d1886f6cb48f1ed71a941835b5840190114208ef9dda4756eab00fcd38d0a302906ffc3e8f25260ef7b4e28db855ed9e895bd4b0fbdedef955a9ddf4161dc9347ef97623a3ebf9ca8933a81653dd955d769a92740fbed0519a0fe8fb2bb1420fa5a24997c0cf4682cd464c3bcd44c267b10cfd7565652376257be8c2ef9d94e9ad1d44011543b4d0e2c77577a1157a58a7edab4a0981d3549776f00"/209]) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x4827d9d3570e76e1}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb62) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400ffbd0000"], 0x14}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup(r4) r5 = dup2(r1, r3) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x8010, r5, 0x10000000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@private, @in=@initdev}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000280)=0xe8) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 12:09:00 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fork() tkill(r0, 0x26) waitid(0x30000000, 0x0, 0x0, 0x4, 0x0) 12:09:00 executing program 7: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000dc0)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000008c0)={r2, 0x5, 0x80000001}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="080500988400014637b5e6a174b7b2b317b4044a94da343dd489e684a04f4ca90665864272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab7ea7e76402b517c198dc7ffbdbb38ab65f84f5242824efb291f523ece2d8e79434f9fe77da5ead57c5f16fed9a43b14e466358a6b4c3a1a8361e8199db7e4116e6031e72ada1c25a85ea221f56", @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) shutdown(r3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0x50, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x2e}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x674}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xd69}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xfffd}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x50}}, 0x40) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 12:09:00 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xffffffff000) (fail_nth: 4) 12:09:00 executing program 2: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r0, 0x1277, &(0x7f0000000540)={'\x00', 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff}) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x0, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000000180), &(0x7f00000001c0)='system_u:object_r:dhcpc_state_t:s0\x00', 0x23, 0x2) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0\x00') sendmsg$nl_generic(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1c, 0x100, 0x70bd2d, 0x25dfdbfe, {0xe}, [@typed={0x8, 0x7a, 0x0, 0x0, @pid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x48010) lseek(0xffffffffffffffff, 0xe19, 0x2) [ 1378.649084] ? __ia32_sys_sendfile+0x220/0x220 [ 1378.649750] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1378.650424] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1378.651086] do_syscall_64+0x33/0x40 [ 1378.651585] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1378.652290] RIP: 0033:0x7efcccb57b19 [ 1378.652765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1378.655139] RSP: 002b:00007efcca0cd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1378.656109] RAX: ffffffffffffffda RBX: 00007efcccc6af60 RCX: 00007efcccb57b19 [ 1378.657019] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1378.657943] RBP: 00007efcca0cd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1378.658852] R10: 00000ffffffff000 R11: 0000000000000246 R12: 0000000000000001 [ 1378.659758] R13: 00007ffdb544bb5f R14: 00007efcca0cd300 R15: 0000000000022000 [ 1378.666196] audit: type=1326 audit(1751717340.534:1133): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11509 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1378.669771] audit: type=1326 audit(1751717340.540:1134): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11509 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1378.673290] audit: type=1326 audit(1751717340.545:1135): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11521 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1378.678132] audit: type=1326 audit(1751717340.545:1136): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11521 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1378.685640] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1378.688277] audit: type=1326 audit(1751717340.553:1137): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11509 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1378.697904] audit: type=1326 audit(1751717340.553:1138): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11509 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1378.706694] audit: type=1326 audit(1751717340.556:1139): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11509 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 12:09:00 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xc, &(0x7f0000000100)={0x5, 0xfffffffffffffffd}, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xffffffff000) [ 1378.740749] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1378.741699] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1378.742663] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1378.761587] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1378.763571] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1378.765709] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:09:00 executing program 7: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000dc0)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000008c0)={r2, 0x5, 0x80000001}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="080500988400014637b5e6a174b7b2b317b4044a94da343dd489e684a04f4ca90665864272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab7ea7e76402b517c198dc7ffbdbb38ab65f84f5242824efb291f523ece2d8e79434f9fe77da5ead57c5f16fed9a43b14e466358a6b4c3a1a8361e8199db7e4116e6031e72ada1c25a85ea221f56", @ANYRES16, @ANYBLOB="04002cbd7000fddbdf2575000000c401f08067000b00677cfd4589c7a40e1aae6b18247eb36f74f8f6793b7df9ae3ca9cfb2f5e87ed1ff361592201a1151eabf57ad6fd1950cd215131f67634030aa5f484986ad830a6243bac401c3ee44bff7cea60e881d5f9b616582cf28ec620ccd97d4ceb48c6727530f00050001000100000005000f004000000008000a000000000005000f000400000038010c80050003000300000003010200a207624e07c5690d555d459080990de6741a392aa42eff746330a20bec78fd393092b5f99f54b2a9f6dadb55db3c0846814e79eb43bf7bcd6295c96e7ca16288a8b27c5a225a6d718ad49f0366f969983400ba504c865cca04e4fa00a4b246fa618936f70fe77c1c3e550a5d12d4a9108e7e4216bc693107c3bd4c06e98ec9399de0e98cf205057cbbf688d8a13dc55472fc31954b846e29dbd7d8889b34ead6c83c9b533b666abd65490f2a7e693d55d91f24d5078eb3d34940c02ea1125e7176e254c6bd5531ed067817f0b3278e3dc492571b7da828e728a6fa55742efa33f430739c320b794841adba4c2875044dce9c8959eebe4a5b52d68f9868719f00280004800a000600ffffffffffff00000a000600ffffffffffff00000a000600ffffffffffff00000c01f0800a000200ee90b393fc10000046000b005cbb9f225903f92e0cffa77bd5369da32f70909f5950f26e59525d4d3c41b9e512f4a5d3b7aaaf8a0e03f2aa73274b24a04b4a689bf05844d0d2ad278696b14fb4c50000b4000d80af0000001263800a6541e18dae533feb73677b5c9d5da0ee4d7366d47dd6fa0b14ca33d3433171a533a29930fb5e0d9ff2ca710ab0c8aa4b331d58b4a7b3cac9c9b4ef9e7cdb1d3d6da7f0877a5c3ce7ff9bf9e936b1bcbe732bd9037f9090bfdee1d3e45c7b700e6aefa488eb013b27cd7291a7b927dc10e794490c85dff0cb49a1dd13066b619ace5d6bf763b6858bf07eeb0f5514c3ce6c90d8457d79fcd2a3756ccd66b5194a5c69358e1199219e40ffdd6771943cb3fe33f442ae2ff2002c01f080050003000600000005000300020000000a000200957ccca020ad0000e4000b0049a0db966a0311d932607f2a479e651b881a56f4da7d14bde06c48822b0d353198bb85750dc9f0cca70174b813fe94ea80477bcf9dd6b03b9186edb85c476d8762dc273e83aaee35def167cc1c8faffc0e86fa311d66813cbea7e234d79e9d3acd30b5ae5a264e9576efabc94efd7a18b93eddabd9b046d12df487392f1217b77f05bd72f95130a2bda683b7a64c3d6477e3681d83c5e45e8fdae553114b304417851d9687ab3b9c6c7e91af7744d120000000332c31b35f4358643e4137a9e6b264a14e04605648b50e27e3bb5cbbdaac70655fdff371ece3e08885f0da8d700a000800080211000000000005000100000000000a000800080211000000000005000300c9000000f800f08008000a000100008004000500050010007f0000000a0002005a9cbd08ca8e000014000c800500030008000000050003005e000000c0000b003a3801c2eefaea9df8f27b808f751948873b3fa40dd675c2f1b45ab2dbcdf1903fb052565c23c23d861899509fb26a1f672416325f004d2fdd903c5fa86b4bf1e39074929e71f3a466d345a8e660cd8d401a4772051ab211e24ede74314ef8b7a2c04c8a87b4e5603f7592bc89521d454d3528dce3959d8613c413eafce02151dc1f76a1ace92831610ea0894d9f59407f66cbe556e636be5a3d01253ec1c755495e5196efdf7f155cba102e"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) shutdown(r3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0x50, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x2e}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x674}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xd69}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xfffd}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x50}}, 0x40) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 12:09:00 executing program 2: mknod$loop(&(0x7f0000000040)='./file0\x00', 0x2, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r0, 0x1277, &(0x7f0000000540)={'\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 12:09:00 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xffffffff000) (fail_nth: 5) [ 1378.844560] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. 12:09:00 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fork() tkill(r0, 0x26) waitid(0x48000000, 0x0, 0x0, 0x4, 0x0) 12:09:00 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000040)={0x1, 'syzkaller1\x00', {}, 0x1}) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x20}}, 0x0) 12:09:00 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xc, &(0x7f0000000100)={0x5, 0xfffffffffffffffd}, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xffffffff000) [ 1378.904651] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1378.906474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1378.908321] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:09:00 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) lsetxattr$security_evm(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000040), &(0x7f0000000080)=@v1={0x2, "e0"}, 0x2, 0x0) ioctl$BLKTRACESETUP(r0, 0x1277, &(0x7f0000000540)={'\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) creat(&(0x7f0000000100)='./file1\x00', 0x20) 12:09:00 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)=0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001700)=ANY=[@ANYBLOB="010000009bd77e7d3db3c295", @ANYRES32, @ANYRES32=r2, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c652fe1451d4e7b754bc7f05f0ff404807bf64d176a29993195992c14f39ee8328796f81d1886f6cb48f1ed71a941835b5840190114208ef9dda4756eab00fcd38d0a302906ffc3e8f25260ef7b4e28db855ed9e895bd4b0fbdedef955a9ddf4161dc9347ef97623a3ebf9ca8933a81653dd955d769a92740fbed0519a0fe8fb2bb1420fa5a24997c0cf4682cd464c3bcd44c267b10cfd7565652376257be8c2ef9d94e9ad1d44011543b4d0e2c77577a1157a58a7edab4a0981d3549776f00"/209]) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x4827d9d3570e76e1}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb62) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400ffbd0000"], 0x14}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup(r4) r5 = dup2(r1, r3) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x8010, r5, 0x10000000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@private, @in=@initdev}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000280)=0xe8) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1378.949718] FAULT_INJECTION: forcing a failure. [ 1378.949718] name failslab, interval 1, probability 0, space 0, times 0 [ 1378.952717] CPU: 0 PID: 11550 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 1378.954411] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1378.956440] Call Trace: [ 1378.957087] dump_stack+0x107/0x167 [ 1378.957980] should_fail.cold+0x5/0xa [ 1378.958919] ? alloc_pipe_info+0x1e5/0x590 [ 1378.959954] should_failslab+0x5/0x20 [ 1378.960882] __kmalloc+0x72/0x390 [ 1378.961741] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1378.962972] alloc_pipe_info+0x1e5/0x590 [ 1378.963967] splice_direct_to_actor+0x774/0x980 [ 1378.965130] ? _cond_resched+0x10/0x30 [ 1378.966088] ? inode_security+0x107/0x140 [ 1378.967090] ? pipe_to_sendpage+0x380/0x380 [ 1378.968143] ? avc_policy_seqno+0x9/0x70 [ 1378.969126] ? selinux_file_permission+0x92/0x520 [ 1378.970317] ? do_splice_to+0x160/0x160 [ 1378.971281] ? security_file_permission+0xb1/0xe0 [ 1378.972466] do_splice_direct+0x1c4/0x290 [ 1378.973481] ? splice_direct_to_actor+0x980/0x980 [ 1378.974647] ? avc_policy_seqno+0x9/0x70 [ 1378.975645] ? security_file_permission+0xb1/0xe0 [ 1378.976820] do_sendfile+0x553/0x11e0 [ 1378.977771] ? do_pwritev+0x270/0x270 [ 1378.978697] ? wait_for_completion_io+0x270/0x270 [ 1378.979875] ? rcu_read_lock_any_held+0x75/0xa0 [ 1378.981001] ? vfs_write+0x354/0xb10 [ 1378.981918] __x64_sys_sendfile64+0x1d1/0x210 [ 1378.983009] ? __ia32_sys_sendfile+0x220/0x220 [ 1378.984125] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1378.985409] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1378.986657] do_syscall_64+0x33/0x40 [ 1378.987568] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1378.988812] RIP: 0033:0x7efcccb57b19 [ 1378.989722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1378.994210] RSP: 002b:00007efcca0cd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1378.996053] RAX: ffffffffffffffda RBX: 00007efcccc6af60 RCX: 00007efcccb57b19 [ 1378.997793] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1378.999521] RBP: 00007efcca0cd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1379.001249] R10: 00000ffffffff000 R11: 0000000000000246 R12: 0000000000000001 [ 1379.002980] R13: 00007ffdb544bb5f R14: 00007efcca0cd300 R15: 0000000000022000 12:09:00 executing program 4: ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000000)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6d7cf708bc06516e}, 0x23a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$SG_IO(r0, 0x127f, &(0x7f00000003c0)={0xe00, 0x0, 0x0, 0x0, @buffer={0x300, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_setup(0x132, &(0x7f0000000180), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x1, 0x1}, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fsetxattr$security_selinux(r4, &(0x7f0000000040), &(0x7f0000000140)='system_u:object_r:auditd_exec_t:s0\x00', 0x23, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, 0x0, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r5, 0x0, &(0x7f0000000300)="381bfeb7ad0bce181291027f99b999cec88d0cbd84ab5b4cfeb0b4bfcca806f19723d4ccd48f6422e0b6dd199c8bed48eff7b5d935a27a1064f8c38eb3be85d3891c13d33d94bb2758ef8ffa2cef49aad18382fde079e6f27bac2e398cc40304a29086cc86adcbe0ea66d2661aafc6936eefa5ff317fe4643c4c4b1fe481711e9c081dce6d059fee7caaf108", 0x8c, 0x2, 0x1, {0x0, r3}}, 0xffff7e16) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r7 = fcntl$dupfd(r6, 0x0, r6) sendmsg$inet6(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) openat$cgroup_ro(r0, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0) [ 1379.034171] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1379.034615] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.037169] print_req_error: 758 callbacks suppressed [ 1379.037204] blk_update_request: I/O error, dev sr0, sector 7 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 1379.039577] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.040260] blk_update_request: I/O error, dev sr0, sector 263 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 1379.047759] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.048607] blk_update_request: I/O error, dev sr0, sector 519 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 1379.052076] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.052723] blk_update_request: I/O error, dev sr0, sector 775 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 1379.056301] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.057063] blk_update_request: I/O error, dev sr0, sector 1031 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 1379.060790] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.061533] blk_update_request: I/O error, dev sr0, sector 1287 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 1379.062999] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.063631] blk_update_request: I/O error, dev sr0, sector 1543 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 1379.065538] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.066306] blk_update_request: I/O error, dev sr0, sector 1799 op 0x1:(WRITE) flags 0x0 phys_seg 32 prio class 0 [ 1379.074272] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.074976] blk_update_request: I/O error, dev sr0, sector 2055 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 1379.077622] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.078339] blk_update_request: I/O error, dev sr0, sector 2311 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 0 [ 1379.080090] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.080970] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 12:09:00 executing program 7: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000dc0)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000008c0)={r2, 0x5, 0x80000001}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="080500988400014637b5e6a174b7b2b317b4044a94da343dd489e684a04f4ca90665864272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab7ea7e76402b517c198dc7ffbdbb38ab65f84f5242824efb291f523ece2d8e79434f9fe77da5ead57c5f16fed9a43b14e466358a6b4c3a1a8361e8199db7e4116e6031e72ada1c25a85ea221f56", @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) shutdown(r3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0x50, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x2e}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x674}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xd69}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xfffd}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x50}}, 0x40) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1379.082043] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.083246] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.084169] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.084765] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1379.086432] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.087505] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.088643] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.089865] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.093173] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.094142] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.095117] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.095865] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.097086] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.098133] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.099092] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.100089] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.101063] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.101995] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.102906] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.103690] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.108084] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.108886] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.109930] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.110901] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.111994] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.113370] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.114461] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.115331] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.116521] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.117661] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.118660] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 12:09:00 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xc, &(0x7f0000000100)={0x5, 0xfffffffffffffffd}, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xffffffff000) [ 1379.119732] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.121094] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.121916] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.124989] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.125731] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.128990] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.129742] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.133757] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.134663] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.135547] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.136575] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.137461] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.138305] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.139254] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.140169] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.141121] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.141890] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.143488] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.144688] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.145589] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.146452] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.147411] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.148310] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.149246] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.150389] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.151239] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.152223] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.153119] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.153971] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.154974] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.155705] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.156613] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.157527] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.158440] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.159276] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.160173] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.160966] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.161992] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.162703] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.163598] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.164436] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.165378] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.166223] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.167122] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.167889] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.168951] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.169931] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.170677] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.171773] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.172670] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.173585] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.174487] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.175321] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.176382] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.177326] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.178286] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.179502] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.180512] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.180541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1379.181550] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.183207] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1379.183978] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.185498] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1379.186078] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.188700] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.189737] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.190628] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.196638] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.197783] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.198686] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.199890] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.200665] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.201776] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.203007] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.203975] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.204698] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.205645] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.206503] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.207432] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 12:09:01 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fork() tkill(r0, 0x26) waitid(0x4c000000, 0x0, 0x0, 0x4, 0x0) [ 1379.208299] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.209631] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.210691] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.211740] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.212651] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.213609] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.214748] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.215667] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.216555] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.217917] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.218958] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.219892] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.220953] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.222039] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.222764] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.223716] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.224664] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.225934] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.226703] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.227637] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.228545] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.229641] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.230896] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.231680] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.232552] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.233664] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.234750] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.235789] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.236720] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.237688] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.238735] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.239797] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.240700] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.241877] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.243001] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.243766] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.245046] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.246203] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.247368] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.248507] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.249430] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.250453] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.251387] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.252355] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.253489] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.254486] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.255589] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.256470] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.257386] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.258512] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.259591] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.260484] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.261552] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.262492] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.263412] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1379.264281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1379.265280] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1379.267032] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.268032] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.268753] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.270416] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.271584] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.272480] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.273459] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.274366] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.275353] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.276463] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.277481] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.278534] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.283670] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.289268] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.294336] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.361389] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.374368] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.376355] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.378214] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.393259] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.395190] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.410233] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.412756] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.414422] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.425360] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.427369] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.429173] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.433359] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.435343] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.438583] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.440560] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.442207] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.444080] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.446546] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.448271] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.450327] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.452212] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.454633] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.456576] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.458237] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.460118] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.462496] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.464550] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.466333] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.468241] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.470734] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.472576] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.474240] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.476130] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.478685] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.480670] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.482435] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.484223] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.487352] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.489255] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.491143] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.494276] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.496248] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.498114] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.502273] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.504452] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.506402] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.509167] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.511433] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.513246] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.515105] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.516712] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.519223] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.521306] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.523217] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.525087] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.527785] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.529637] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.531291] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.533169] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.536234] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.538157] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.539766] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.542171] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.544304] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.546243] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.548136] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.549766] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.552215] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.554277] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.556200] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.558252] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.560744] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.562587] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.564275] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.566158] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.569149] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.571242] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.574227] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.576128] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.577757] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.580189] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.582186] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.584333] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.586319] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.589320] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.591244] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.593108] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.595787] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.597608] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.599231] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.601110] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.606679] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.608448] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.610233] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.612119] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.614699] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.617285] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.619187] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.621251] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.624264] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.627092] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.629210] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.632188] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.634108] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.636596] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.638394] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.640220] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.642200] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.644774] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.646525] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.648234] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.650142] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.653096] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.655185] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.657323] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.660214] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.662163] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.663780] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.666162] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.668654] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.670462] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.672219] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.674084] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.676750] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.678457] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.680229] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.682110] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.685169] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.687220] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.689090] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.690717] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.693408] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.695522] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.697265] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.699220] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.701772] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.703603] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.708742] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.710661] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.712439] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.714397] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.717111] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.719534] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.721259] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.723162] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.725770] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.727537] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.730300] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.733202] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.735173] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.736796] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.739182] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.741309] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.743211] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.745072] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.748182] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.750285] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.752163] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.754722] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.756527] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.758242] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.761484] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.763313] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.765324] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.767228] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.769775] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.771728] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.773444] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.775213] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.778167] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.780178] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.782172] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.785128] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.787152] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.788776] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.791334] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.793244] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.795160] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.797166] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.799813] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.801728] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.803372] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.805244] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.807101] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.812452] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.814250] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.816101] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.817780] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.819419] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.821221] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.823707] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.825331] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.827197] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.828815] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.830433] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1379.832467] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 12:09:16 executing program 7: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000dc0)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000008c0)={r2, 0x5, 0x80000001}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="080500988400014637b5e6a174b7b2b317b4044a94da343dd489e684a04f4ca90665864272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab7ea7e76402b517c198dc7ffbdbb38ab65f84f5242824efb291f523ece2d8e79434f9fe77da5ead57c5f16fed9a43b14e466358a6b4c3a1a8361e8199db7e4116e6031e72ada1c25a85ea221f56", @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) shutdown(r3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0x50, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x2e}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x674}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xd69}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xfffd}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x50}}, 0x40) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 12:09:16 executing program 6: fsmount(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="6636970c8f29e0c16f776e65723e", @ANYRESDEC=0xee00, @ANYBLOB="f5a47acf2af8ea0e5d57e953f92c00232c309768936e4e647a1dd3dc6424b699440c32b16abb398c79e9f80a5f63bbde7f91671b14ad2b69010f0111efa3f587a7aeffe6264ecc7c4b685cc936251769193007eada2ac24507368ae46f6c42195257d2449fc1505784a19ec61d742f35f9471fd7e969a1f94d87e4b796962e6535b5211fd5c4cab563f72a8ff1affd5d5e8662877ff328"]) r0 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(0x0, r0, &(0x7f0000002b40)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000002a80)}, 0x0) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r2 = fcntl$dupfd(r1, 0x406, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) r3 = accept$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000440)=0x1c) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r5 = fcntl$dupfd(r4, 0x406, r4) sendmsg$inet6(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) sendmsg$nl_generic(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x118}, 0x1, 0x0, 0x0, 0x4d0c4}, 0x40080) 12:09:16 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fork() tkill(r0, 0x26) waitid(0x68000000, 0x0, 0x0, 0x4, 0x0) 12:09:16 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r0, 0x1277, &(0x7f0000000540)={'\x00', 0x0, 0x0, 0x0, 0x2, 0xffff, 0xffffffffffffffff}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = fcntl$dupfd(r1, 0x406, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="580100001a000100fdffffff00000000fc020000000000000000000000000001ac1414bb000000000000000000000000fffd0000000000030000000000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="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"], 0x158}}, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(r3, 0x0, 0x0) fcntl$setown(r3, 0x8, 0x0) r4 = fork() tkill(r4, 0x26) waitid(0x1, r4, &(0x7f0000000100), 0x4, &(0x7f0000000500)) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000140)="4822488729e5916d66662b58a63de4bad652cc6981f2fd055dbac6ad4a967d845bf66edb7e85a21ada64b66d9ad049a64071ef6828a4ac9e956266e6f0e7b48dc6c47568a5fcf1091c05294766348dd0a4d4508459bd89bea85e39fb0cee8dc418c5f2a304a76ea6a01addb251692f229a642fe3d95f9f6d485c722b14efc6db77c336b1c5134070fe5fc6d6f745a393602f9ded38f7f6bafeacd142db0eb282b34684a44f6e1167f76013598f12eb011d8d65b5c4fcce506893dce84199c02b9ebd95867b197bfccca2b69a", 0xcc}, {&(0x7f0000000240)="1633be21e96d9fb3a19c12c5d7ad15af9301b92c1ae367fb32bea5dfd06ff43c75ff63b89af5b865a8a46be916f3cc22e40d71a1f61dd333e5f0de", 0x3b}, {&(0x7f0000000c00)="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", 0x1000}, {&(0x7f0000000300)="c01833b7148caed0717d81d647deaf2d58821d4ac93325513a8187d0a8f02c83be3a4c6669ca35340ffca4a5f272fa4423fc43b284c68f55642bd848667f9866e31cb2eb1c5f90fbba16183c06d7e16af440dab530f98b3cc16b0dd5dd7692b0e722d2ee4c17898727a4cf7a56f15c7226454f330ee1", 0x76}, {&(0x7f0000000380)="f735382bdb0797dd7f6b412e499cb301e99a19a73b920207f2cf8c93324105a0dd4ef3598ac73d1a10e7e112973c5fb6a6f98ca985fd9ce71107eca2776cc51f27520c7440a46227e0dc044367d48bdd", 0x50}], 0x5, &(0x7f00000009c0)=[@rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, r2, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00}}}, @rights={{0x1c, 0x1, 0x1, [r2, r0, r0]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r2, r2, r2, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [r1, r1, r0, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, 0xee01, 0xee01}}}], 0x178, 0x80}, 0x50) getsockname$unix(r2, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) r5 = dup3(r0, 0xffffffffffffffff, 0x80000) ioctl$AUTOFS_IOC_CATATONIC(r5, 0x9362, 0x0) 12:09:16 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xffffffff000) (fail_nth: 6) [ 1394.259598] kauditd_printk_skb: 29 callbacks suppressed [ 1394.259617] audit: type=1326 audit(1751717356.146:1168): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11584 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1394.273539] audit: type=1326 audit(1751717356.148:1169): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11584 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=57 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1394.284782] FAULT_INJECTION: forcing a failure. [ 1394.284782] name failslab, interval 1, probability 0, space 0, times 0 [ 1394.288094] CPU: 1 PID: 11591 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 1394.289597] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1394.291400] Call Trace: [ 1394.291975] dump_stack+0x107/0x167 12:09:16 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xc, &(0x7f0000000100)={0x5, 0xfffffffffffffffd}, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xffffffff000) 12:09:16 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)=0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001700)=ANY=[@ANYBLOB="010000009bd77e7d3db3c295", @ANYRES32, @ANYRES32=r2, @ANYBLOB="2e2f66696c652fe1451d4e7b754bc7f05f0ff404807bf64d176a29993195992c14f39ee8328796f81d1886f6cb48f1ed71a941835b5840190114208ef9dda4756eab00fcd38d0a302906ffc3e8f25260ef7b4e28db855ed9e895bd4b0fbdedef955a9ddf4161dc9347ef97623a3ebf9ca8933a81653dd955d769a92740fbed0519a0fe8fb2bb1420fa5a24997c0cf4682cd464c3bcd44c267b10cfd7565652376257be8c2ef9d94e9ad1d44011543b4d0e2c77577a1157a58a7edab4a0981d3549776f00"/210]) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x4827d9d3570e76e1}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb62) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400ffbd0000"], 0x14}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup(r4) r5 = dup2(r1, r3) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x8010, r5, 0x10000000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@private, @in=@initdev}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000280)=0xe8) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 12:09:16 executing program 4: rt_sigtimedwait(&(0x7f0000000440)={[0x7]}, 0x0, &(0x7f0000000600)={0x0, 0x989680}, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x6e20, &(0x7f0000000380), &(0x7f00000a0000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000000340)=0x0) io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x620e, &(0x7f0000000180)={0x0, 0x231f, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x2000, @fd_index=0x9, 0x117c, 0x1, 0x4, 0xc, 0x0, {0x0, r6}}, 0xfffffffe) syz_io_uring_submit(0x0, r1, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r6}}, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r5, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @ipv4, 0xffffffff}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a64485f108d23b76be1cc06a8682449c18157c", 0x13}, {0x0}, {0x0}], 0x3}, 0x0, 0x4000000}, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000740)=ANY=[], 0x108) r7 = socket$inet(0xa, 0x3, 0xff) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={@private0, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}) setsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) getsockname(r7, 0x0, &(0x7f0000000280)) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) syz_io_uring_submit(r8, r4, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r2, 0x800012d, 0x4, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2000000, 0x810, 0xffffffffffffffff, 0x8df80000) [ 1394.292871] should_fail.cold+0x5/0xa [ 1394.293886] ? create_object.isra.0+0x3a/0xa20 [ 1394.294887] should_failslab+0x5/0x20 [ 1394.295707] kmem_cache_alloc+0x5b/0x310 [ 1394.296594] create_object.isra.0+0x3a/0xa20 [ 1394.297549] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1394.298644] kmem_cache_alloc_trace+0x151/0x320 [ 1394.299247] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1394.299655] __iomap_dio_rw+0x1ee/0x1110 [ 1394.299705] ? lock_release+0x680/0x680 [ 1394.303646] ? iomap_dio_bio_actor+0xef0/0xef0 [ 1394.304648] ? down_read+0x10f/0x430 [ 1394.305457] ? lock_chain_count+0x20/0x20 [ 1394.306346] ? down_write+0x160/0x160 [ 1394.307180] iomap_dio_rw+0x31/0x90 [ 1394.307968] ext4_file_read_iter+0x2c7/0x4c0 [ 1394.309016] generic_file_splice_read+0x455/0x6d0 [ 1394.310072] ? pipe_to_user+0x170/0x170 [ 1394.310942] ? fsnotify_perm.part.0+0x22d/0x620 [ 1394.311952] ? security_file_permission+0xb1/0xe0 [ 1394.312997] ? pipe_to_user+0x170/0x170 [ 1394.313868] do_splice_to+0x10e/0x160 [ 1394.314693] splice_direct_to_actor+0x2fe/0x980 [ 1394.315704] ? pipe_to_sendpage+0x380/0x380 [ 1394.316644] ? do_splice_to+0x160/0x160 [ 1394.317511] ? security_file_permission+0xb1/0xe0 [ 1394.318559] do_splice_direct+0x1c4/0x290 [ 1394.319448] ? splice_direct_to_actor+0x980/0x980 [ 1394.320485] ? avc_policy_seqno+0x9/0x70 [ 1394.321374] ? security_file_permission+0xb1/0xe0 [ 1394.322422] do_sendfile+0x553/0x11e0 [ 1394.323256] ? do_pwritev+0x270/0x270 [ 1394.324163] ? wait_for_completion_io+0x270/0x270 [ 1394.325202] ? rcu_read_lock_any_held+0x75/0xa0 [ 1394.326206] ? vfs_write+0x354/0xb10 [ 1394.327009] __x64_sys_sendfile64+0x1d1/0x210 [ 1394.327968] ? __ia32_sys_sendfile+0x220/0x220 [ 1394.328951] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1394.330081] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1394.331192] do_syscall_64+0x33/0x40 [ 1394.331993] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1394.333096] RIP: 0033:0x7efcccb57b19 [ 1394.333899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1394.337866] RSP: 002b:00007efcca0cd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1394.339612] RAX: ffffffffffffffda RBX: 00007efcccc6af60 RCX: 00007efcccb57b19 [ 1394.341145] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1394.342688] RBP: 00007efcca0cd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1394.344218] R10: 00000ffffffff000 R11: 0000000000000246 R12: 0000000000000001 [ 1394.345747] R13: 00007ffdb544bb5f R14: 00007efcca0cd300 R15: 0000000000022000 [ 1394.358972] audit: type=1326 audit(1751717356.198:1170): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11584 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1394.403394] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1394.406234] audit: type=1326 audit(1751717356.203:1171): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11584 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1394.418342] audit: type=1326 audit(1751717356.203:1172): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11584 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1394.435577] audit: type=1326 audit(1751717356.203:1173): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11584 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1394.446948] audit: type=1326 audit(1751717356.203:1174): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11584 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1394.447104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1394.454666] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1394.461106] audit: type=1326 audit(1751717356.208:1175): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11584 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1394.480737] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1394.491705] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1394.493432] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1394.504895] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:09:16 executing program 6: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r2 = fcntl$dupfd(r1, 0x406, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) dup(r0) r4 = signalfd(r3, &(0x7f00000000c0)={[0xde]}, 0x8) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r5, 0x0, 0x0}, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, r4, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e23, @private=0xa010101}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000100)="c2042590bff2cd840610e9de412d021358e2c7379a161dc228cdbb4adda72533292497768d756a19618a2c5662814089c5ee677f2937433bf22687ad7075e4ed52641b795b82bdd804f57e16ec9b0119941d27ee152d6e166d1183cd98186d442f3a8d33f873cebaae4b74fe37cc89eabcad7e2736b0df8a676eface3d59066d946f45a47e693a138cdc5602d4389e8bc32f1cc5193847ab3abab58d2c53b302c6cfba0300", 0xa5}, {&(0x7f00000001c0)="8d47ff957073133083e747ea", 0xc}, {&(0x7f0000000200)="9627ca1985dca8b334826ec2142face9893ec385ac2a2692146f241cb329e14306263f01d78adae16812dd52c19ceb1b52101fa6924b33b49b6a2b5a2683f2a44b7743d70a72d0a77f4f440999990f1b9bb7aa4d398046fa1da790b2fc8d519684a942357a436655600836c49ec0d4798b0637833fb22f364e88fcda3c711d6524b310954d09b53e3f78aa3392fcfcececcc07bae81b1f043713ce374f42e347dc52fdc27fb4a6f48828cb7b820c1ae3747348a2317d25df569ff547a6799f69e0cc9ece8ea10056c94c768ad2", 0xcd}], 0x3, &(0x7f0000000640)=[{0x50, 0x107, 0x7, "4f3176c64d5e6404ca6a689c26c2928233d75d49585e355aae2e2cbe55e6aed8d3904716bab692f5dca3b2e315b98c90f37a562181a64c97a331389a653793"}, {0x58, 0x115, 0x5, "d861095ab4f28cc8ed3b3e7ededf8430a142ba8e08a909cd674d2820c49cc2cc2309d736ac4144b87a875f80515682d2dbeec5dce720081a438e2cca963990b072cc"}, {0xe0, 0x119, 0x2f5b, "b9fcc4237a6380efa90583ca370a63199262fccdfcff16c6c2c8d874aa44eb6422b15cfc33e6b50a9878bcf2886d552b5b687281c5c63b395ef74210674dec3cdb03adb6b94d6aef0315992add0c422e9280d8a259087a376cd51be3b8cb6bf8f4300fe1891cb8b3f6b40aa2327e9d3466aa00b1dfc3f65ac88cf88426625a83e057049d3f57b0aa21ed8ab86ecc46de7bc7442b9a16e8660788bbe57564de69dada7e6d0076390e1ab006010c0eba92726f92a0d3cb020169e6307b07cd5ccb45ad99a8e57822a88d06"}, {0x80, 0x10f, 0x3, "90cf79c4d168d5062d52e3c162937deb662f298ca22e6c2d1678219c57b79678106a8fcb2f723a1654d5fd165c9df307a5f46c27cdb72fcdbe7d43dba143d7a58b8c40d2b146f09f1d472a09abde96b068662b71ec46ba7cbf2188c26f9481047c822bbfa33188d88d3f17a264dc"}, {0x28, 0x3a, 0x20, "8f22b71f690217c1832f8dc4e912b6e443"}], 0x230}, 0x0, 0x44, 0x1}, 0x4) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x300, 0x0, 0x0) 12:09:16 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fork() tkill(r0, 0x26) waitid(0x6c000000, 0x0, 0x0, 0x4, 0x0) 12:09:16 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xc, &(0x7f0000000100)={0x5, 0xfffffffffffffffd}, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xffffffff000) 12:09:16 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)=0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001700)=ANY=[@ANYBLOB="010000009bd77e7d3db3c295", @ANYRES32, @ANYRES32=r2, @ANYBLOB="2e2f66696c652fe1451d4e7b754bc7f05f0ff404807bf64d176a29993195992c14f39ee8328796f81d1886f6cb48f1ed71a941835b5840190114208ef9dda4756eab00fcd38d0a302906ffc3e8f25260ef7b4e28db855ed9e895bd4b0fbdedef955a9ddf4161dc9347ef97623a3ebf9ca8933a81653dd955d769a92740fbed0519a0fe8fb2bb1420fa5a24997c0cf4682cd464c3bcd44c267b10cfd7565652376257be8c2ef9d94e9ad1d44011543b4d0e2c77577a1157a58a7edab4a0981d3549776f00"/210]) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x4827d9d3570e76e1}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb62) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400ffbd0000"], 0x14}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup(r4) r5 = dup2(r1, r3) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x8010, r5, 0x10000000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@private, @in=@initdev}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000280)=0xe8) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 12:09:16 executing program 7: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000dc0)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000008c0)={r2, 0x5, 0x80000001}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="080500988400014637b5e6a174b7b2b317b4044a94da343dd489e684a04f4ca90665864272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab7ea7e76402b517c198dc7ffbdbb38ab65f84f5242824efb291f523ece2d8e79434f9fe77da5ead57c5f16fed9a43b14e466358a6b4c3a1a8361e8199db7e4116e6031e72ada1c25a85ea221f56", @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) shutdown(r3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0x50, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x2e}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x674}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xd69}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xfffd}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x50}}, 0x40) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1394.661528] audit: type=1326 audit(1751717356.548:1176): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11615 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1394.666492] audit: type=1326 audit(1751717356.548:1177): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11615 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=57 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1394.677538] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1394.703626] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1394.757404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1394.759798] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1394.763272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1394.781613] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1394.783401] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1394.785195] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:09:16 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)=0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001700)=ANY=[@ANYBLOB="010000009bd77e7d3db3c295", @ANYRES32, @ANYRES32=r2, @ANYBLOB="2e2f66696c652fe1451d4e7b754bc7f05f0ff404807bf64d176a29993195992c14f39ee8328796f81d1886f6cb48f1ed71a941835b5840190114208ef9dda4756eab00fcd38d0a302906ffc3e8f25260ef7b4e28db855ed9e895bd4b0fbdedef955a9ddf4161dc9347ef97623a3ebf9ca8933a81653dd955d769a92740fbed0519a0fe8fb2bb1420fa5a24997c0cf4682cd464c3bcd44c267b10cfd7565652376257be8c2ef9d94e9ad1d44011543b4d0e2c77577a1157a58a7edab4a0981d3549776f00"/210]) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x4827d9d3570e76e1}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb62) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400ffbd0000"], 0x14}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup(r4) r5 = dup2(r1, r3) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x8010, r5, 0x10000000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@private, @in=@initdev}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000280)=0xe8) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 12:09:16 executing program 7: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000dc0)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000008c0)={r2, 0x5, 0x80000001}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="080500988400014637b5e6a174b7b2b317b4044a94da343dd489e684a04f4ca90665864272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab7ea7e76402b517c198dc7ffbdbb38ab65f84f5242824efb291f523ece2d8e79434f9fe77da5ead57c5f16fed9a43b14e466358a6b4c3a1a8361e8199db7e4116e6031e72ada1c25a85ea221f56", @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) shutdown(r3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0x50, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x2e}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x674}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xd69}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xfffd}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x50}}, 0x40) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 12:09:16 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fork() tkill(r0, 0x26) waitid(0x74000000, 0x0, 0x0, 0x4, 0x0) 12:09:16 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xffffffff000) (fail_nth: 7) 12:09:16 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xc, &(0x7f0000000100)={0x5, 0xfffffffffffffffd}, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xffffffff000) [ 1394.968167] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1394.998797] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1395.046300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1395.048005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1395.050061] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1395.053568] FAULT_INJECTION: forcing a failure. [ 1395.053568] name failslab, interval 1, probability 0, space 0, times 0 [ 1395.056785] CPU: 0 PID: 11634 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 1395.058427] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1395.060323] Call Trace: [ 1395.060929] dump_stack+0x107/0x167 [ 1395.061776] should_fail.cold+0x5/0xa [ 1395.062653] ? __iomap_dio_rw+0x1ee/0x1110 [ 1395.063632] should_failslab+0x5/0x20 [ 1395.064504] kmem_cache_alloc_trace+0x55/0x320 [ 1395.065573] __iomap_dio_rw+0x1ee/0x1110 [ 1395.066507] ? lock_release+0x680/0x680 [ 1395.067429] ? iomap_dio_bio_actor+0xef0/0xef0 [ 1395.068485] ? down_read+0x10f/0x430 [ 1395.069347] ? lock_chain_count+0x20/0x20 [ 1395.070294] ? down_write+0x160/0x160 [ 1395.071174] iomap_dio_rw+0x31/0x90 [ 1395.072009] ext4_file_read_iter+0x2c7/0x4c0 [ 1395.073016] generic_file_splice_read+0x455/0x6d0 [ 1395.074124] ? pipe_to_user+0x170/0x170 [ 1395.075048] ? fsnotify_perm.part.0+0x22d/0x620 [ 1395.076119] ? security_file_permission+0xb1/0xe0 [ 1395.077226] ? pipe_to_user+0x170/0x170 [ 1395.078151] do_splice_to+0x10e/0x160 [ 1395.079021] splice_direct_to_actor+0x2fe/0x980 [ 1395.080083] ? pipe_to_sendpage+0x380/0x380 [ 1395.081066] ? do_splice_to+0x160/0x160 [ 1395.081974] ? security_file_permission+0xb1/0xe0 [ 1395.083079] do_splice_direct+0x1c4/0x290 [ 1395.084023] ? splice_direct_to_actor+0x980/0x980 [ 1395.085115] ? avc_policy_seqno+0x9/0x70 [ 1395.086053] ? security_file_permission+0xb1/0xe0 [ 1395.087150] do_sendfile+0x553/0x11e0 [ 1395.088023] ? do_pwritev+0x270/0x270 [ 1395.088890] ? wait_for_completion_io+0x270/0x270 [ 1395.089997] ? rcu_read_lock_any_held+0x75/0xa0 [ 1395.091058] ? vfs_write+0x354/0xb10 [ 1395.091903] __x64_sys_sendfile64+0x1d1/0x210 [ 1395.092920] ? __ia32_sys_sendfile+0x220/0x220 [ 1395.093978] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1395.095170] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1395.096348] do_syscall_64+0x33/0x40 [ 1395.097197] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1395.098370] RIP: 0033:0x7efcccb57b19 [ 1395.099217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1395.103426] RSP: 002b:00007efcca0cd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1395.105156] RAX: ffffffffffffffda RBX: 00007efcccc6af60 RCX: 00007efcccb57b19 [ 1395.106786] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1395.108404] RBP: 00007efcca0cd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1395.110030] R10: 00000ffffffff000 R11: 0000000000000246 R12: 0000000000000001 [ 1395.111648] R13: 00007ffdb544bb5f R14: 00007efcca0cd300 R15: 0000000000022000 [ 1395.144339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1395.146172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1395.147917] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:09:17 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)=0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001700)=ANY=[@ANYBLOB="010000009bd77e7d3db3c295", @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c652fe1451d4e7b754bc7f05f0ff404807bf64d176a29993195992c14f39ee8328796f81d1886f6cb48f1ed71a941835b5840190114208ef9dda4756eab00fcd38d0a302906ffc3e8f25260ef7b4e28db855ed9e895bd4b0fbdedef955a9ddf4161dc9347ef97623a3ebf9ca8933a81653dd955d769a92740fbed0519a0fe8fb2bb1420fa5a24997c0cf4682cd464c3bcd44c267b10cfd7565652376257be8c2ef9d94e9ad1d44011543b4d0e2c77577a1157a58a7edab4a0981d3549776f00"/210]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x4827d9d3570e76e1}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb62) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400ffbd0000"], 0x14}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup(r3) r4 = dup2(r1, r2) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x8010, r4, 0x10000000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@private, @in=@initdev}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000280)=0xe8) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 12:09:17 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r0, 0x1277, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) [ 1395.272172] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 12:09:17 executing program 7: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000dc0)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000008c0)={r2, 0x5, 0x80000001}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="080500988400014637b5e6a174b7b2b317b4044a94da343dd489e684a04f4ca90665864272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab7ea7e76402b517c198dc7ffbdbb38ab65f84f5242824efb291f523ece2d8e79434f9fe77da5ead57c5f16fed9a43b14e466358a6b4c3a1a8361e8199db7e4116e6031e72ada1c25a85ea221f56", @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) shutdown(r3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0x50, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x2e}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x674}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xd69}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xfffd}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x50}}, 0x40) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1395.300313] cgroup: fork rejected by pids controller in /syz1 12:09:17 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xc, &(0x7f0000000100)={0x5, 0xfffffffffffffffd}, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xffffffff000) [ 1395.333501] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. 12:09:17 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xffffffff000) (fail_nth: 8) [ 1395.375691] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1395.377452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1395.379220] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1395.410619] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1395.412270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1395.414065] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:09:17 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000440)=[{&(0x7f0000000180)=""/81, 0x51}, {&(0x7f0000000200)=""/99, 0x63}, {&(0x7f0000000280)=""/76, 0x4c}, {}, {&(0x7f0000000300)=""/202, 0xca}, {&(0x7f00000000c0)=""/1, 0x1}, {&(0x7f0000000400)=""/5, 0x5}], 0x7) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0x4}]}, 0x68}}, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) [ 1395.463821] FAULT_INJECTION: forcing a failure. [ 1395.463821] name failslab, interval 1, probability 0, space 0, times 0 [ 1395.467461] CPU: 0 PID: 11656 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 1395.468984] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1395.470822] Call Trace: [ 1395.471407] dump_stack+0x107/0x167 [ 1395.472215] should_fail.cold+0x5/0xa [ 1395.473060] ? create_object.isra.0+0x3a/0xa20 [ 1395.474080] should_failslab+0x5/0x20 [ 1395.474923] kmem_cache_alloc+0x5b/0x310 [ 1395.475822] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1395.476820] create_object.isra.0+0x3a/0xa20 [ 1395.477795] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1395.478915] kmem_cache_alloc+0x159/0x310 [ 1395.479838] ext4_init_io_end+0x23/0x180 [ 1395.480762] ext4_writepages+0x8ec/0x3350 [ 1395.481688] ? unwind_next_frame+0x13ef/0x1a90 [ 1395.482697] ? find_held_lock+0x2c/0x110 [ 1395.483619] ? __ext4_mark_inode_dirty+0x770/0x770 [ 1395.484700] ? __is_insn_slot_addr+0x14c/0x290 [ 1395.485718] ? __kernel_text_address+0x9/0x40 [ 1395.486708] ? unwind_get_return_address+0x55/0xa0 [ 1395.487784] ? create_prof_cpu_mask+0x20/0x20 [ 1395.488781] ? stack_trace_save+0x8c/0xc0 [ 1395.489702] ? stack_trace_consume_entry+0x160/0x160 [ 1395.490822] ? kasan_save_stack+0x32/0x40 [ 1395.491719] ? kasan_save_stack+0x1b/0x40 [ 1395.492618] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1395.493736] ? __ext4_mark_inode_dirty+0x770/0x770 [ 1395.494795] do_writepages+0xee/0x2a0 [ 1395.495628] ? page_writeback_cpu_online+0x20/0x20 [ 1395.496691] ? lock_acquire+0x197/0x470 [ 1395.497558] ? create_object.isra.0+0x3ad/0xa20 [ 1395.498573] ? lock_release+0x680/0x680 [ 1395.499436] ? find_held_lock+0x2c/0x110 [ 1395.500316] __filemap_fdatawrite_range+0x24b/0x2f0 [ 1395.501414] ? delete_from_page_cache_batch+0xa30/0xa30 [ 1395.502564] ? mark_held_locks+0x9e/0xe0 [ 1395.503446] ? trace_hardirqs_on+0x5b/0x180 [ 1395.504388] filemap_write_and_wait_range+0x65/0x100 [ 1395.505489] __iomap_dio_rw+0x552/0x1110 [ 1395.506389] ? iomap_dio_bio_actor+0xef0/0xef0 [ 1395.507388] ? down_read+0x10f/0x430 [ 1395.508190] ? lock_chain_count+0x20/0x20 [ 1395.509088] ? down_write+0x160/0x160 [ 1395.509926] iomap_dio_rw+0x31/0x90 [ 1395.510716] ext4_file_read_iter+0x2c7/0x4c0 [ 1395.511677] generic_file_splice_read+0x455/0x6d0 [ 1395.512729] ? pipe_to_user+0x170/0x170 [ 1395.513612] ? fsnotify_perm.part.0+0x22d/0x620 [ 1395.514626] ? security_file_permission+0xb1/0xe0 [ 1395.515675] ? pipe_to_user+0x170/0x170 [ 1395.516545] do_splice_to+0x10e/0x160 [ 1395.517383] splice_direct_to_actor+0x2fe/0x980 [ 1395.518397] ? pipe_to_sendpage+0x380/0x380 [ 1395.519338] ? do_splice_to+0x160/0x160 [ 1395.520191] ? security_file_permission+0xb1/0xe0 [ 1395.521240] do_splice_direct+0x1c4/0x290 [ 1395.522138] ? splice_direct_to_actor+0x980/0x980 [ 1395.523180] ? avc_policy_seqno+0x9/0x70 [ 1395.524059] ? security_file_permission+0xb1/0xe0 [ 1395.525108] do_sendfile+0x553/0x11e0 [ 1395.525950] ? do_pwritev+0x270/0x270 [ 1395.526772] ? wait_for_completion_io+0x270/0x270 [ 1395.527818] ? rcu_read_lock_any_held+0x75/0xa0 [ 1395.528817] ? vfs_write+0x354/0xb10 [ 1395.529640] __x64_sys_sendfile64+0x1d1/0x210 [ 1395.530611] ? __ia32_sys_sendfile+0x220/0x220 [ 1395.531597] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1395.532724] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1395.533854] do_syscall_64+0x33/0x40 [ 1395.534653] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1395.535750] RIP: 0033:0x7efcccb57b19 [ 1395.536545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1395.540499] RSP: 002b:00007efcca0cd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1395.542134] RAX: ffffffffffffffda RBX: 00007efcccc6af60 RCX: 00007efcccb57b19 [ 1395.543657] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1395.545174] RBP: 00007efcca0cd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1395.546698] R10: 00000ffffffff000 R11: 0000000000000246 R12: 0000000000000001 [ 1395.548213] R13: 00007ffdb544bb5f R14: 00007efcca0cd300 R15: 0000000000022000 12:09:33 executing program 6: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x466}}, './file0\x00'}) write$binfmt_misc(r0, &(0x7f0000000040)={'syz0', "f75407e755444bca80495a4f5cdebfccac1ed9895ac333e27ddef14f25c2fcd4ba6aece58e8d4c2b825ddeedf84a2ee4b4d3f01fa3338b96ec0866596d3cf29081163c93e23466a49c22deed5f84d641e477aa7305"}, 0x59) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbb98aa9fcba7686dd6096153f00bfc70020010000000000000000000000000000ff00001f00000000010200907800000000"], 0x0) 12:09:33 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xffffffff000) (fail_nth: 9) 12:09:33 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xc, &(0x7f0000000100)={0x5, 0xfffffffffffffffd}, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xffffffff000) 12:09:33 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)=@v1={0x2, "eb689c01c1f2007b386a0f4ad890f2"}, 0x10, 0x0) ioctl$BLKTRACESETUP(r0, 0x1277, &(0x7f0000000540)={'\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 12:09:33 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)=0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001700)=ANY=[@ANYBLOB="010000009bd77e7d3db3c295", @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c652fe1451d4e7b754bc7f05f0ff404807bf64d176a29993195992c14f39ee8328796f81d1886f6cb48f1ed71a941835b5840190114208ef9dda4756eab00fcd38d0a302906ffc3e8f25260ef7b4e28db855ed9e895bd4b0fbdedef955a9ddf4161dc9347ef97623a3ebf9ca8933a81653dd955d769a92740fbed0519a0fe8fb2bb1420fa5a24997c0cf4682cd464c3bcd44c267b10cfd7565652376257be8c2ef9d94e9ad1d44011543b4d0e2c77577a1157a58a7edab4a0981d3549776f00"/210]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x4827d9d3570e76e1}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb62) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400ffbd0000"], 0x14}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup(r3) r4 = dup2(r1, r2) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x8010, r4, 0x10000000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@private, @in=@initdev}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000280)=0xe8) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 12:09:33 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @local, 0x40002}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) r2 = syz_io_uring_setup(0x117c, &(0x7f0000000140)={0x0, 0x20000, 0x0, 0x2, 0x3d4, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x0, 0x40000160}, 0x0) io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1411.900385] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1411.902362] kauditd_printk_skb: 25 callbacks suppressed 12:09:33 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fork() tkill(r0, 0x26) waitid(0x7a000000, 0x0, 0x0, 0x4, 0x0) 12:09:33 executing program 7: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000018c0)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000001bd81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c030519e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065f14982b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc00100000000000000e073ebbcea086bc8e8da27d76939786776a523785c8d9f855bdebf1edf10e03336ab01cd5cf01d1029cd73f7ed80e25303ae4adcc92c32141d362f09f0ddfd8ac96f4ac935755951deec4790aad73f2a0d0ea9"], 0x24}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000dc0)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000008c0)={r2, 0x5, 0x80000001}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="080500988400014637b5e6a174b7b2b317b4044a94da343dd489e684a04f4ca90665864272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab7ea7e76402b517c198dc7ffbdbb38ab65f84f5242824efb291f523ece2d8e79434f9fe77da5ead57c5f16fed9a43b14e466358a6b4c3a1a8361e8199db7e4116e6031e72ada1c25a85ea221f56", @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) shutdown(r3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0x50, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x2e}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x674}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xd69}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xfffd}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x50}}, 0x40) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1411.902380] audit: type=1326 audit(1751717373.786:1201): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11676 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1411.914115] audit: type=1326 audit(1751717373.789:1202): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11676 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=57 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1411.920460] FAULT_INJECTION: forcing a failure. [ 1411.920460] name failslab, interval 1, probability 0, space 0, times 0 [ 1411.923113] CPU: 1 PID: 11667 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 1411.924456] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1411.926043] Call Trace: [ 1411.926570] dump_stack+0x107/0x167 [ 1411.927264] should_fail.cold+0x5/0xa [ 1411.927999] ? ext4_init_io_end+0x23/0x180 [ 1411.928812] should_failslab+0x5/0x20 [ 1411.929553] kmem_cache_alloc+0x5b/0x310 [ 1411.930354] ext4_init_io_end+0x23/0x180 [ 1411.931140] ext4_writepages+0x8ec/0x3350 [ 1411.932111] ? unwind_next_frame+0x13ef/0x1a90 [ 1411.932990] ? find_held_lock+0x2c/0x110 [ 1411.933888] ? __ext4_mark_inode_dirty+0x770/0x770 [ 1411.934826] ? __is_insn_slot_addr+0x14c/0x290 [ 1411.935703] ? __kernel_text_address+0x9/0x40 [ 1411.936560] ? unwind_get_return_address+0x55/0xa0 [ 1411.937697] ? create_prof_cpu_mask+0x20/0x20 [ 1411.938581] ? stack_trace_save+0x8c/0xc0 [ 1411.939538] ? stack_trace_consume_entry+0x160/0x160 [ 1411.940560] ? kasan_save_stack+0x32/0x40 [ 1411.941527] ? kasan_save_stack+0x1b/0x40 [ 1411.942312] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1411.943279] ? __ext4_mark_inode_dirty+0x770/0x770 [ 1411.944399] do_writepages+0xee/0x2a0 [ 1411.945133] ? page_writeback_cpu_online+0x20/0x20 [ 1411.946258] ? lock_acquire+0x197/0x470 [ 1411.947064] ? create_object.isra.0+0x3ad/0xa20 [ 1411.948136] ? lock_release+0x680/0x680 [ 1411.949031] ? find_held_lock+0x2c/0x110 [ 1411.949985] __filemap_fdatawrite_range+0x24b/0x2f0 [ 1411.950944] ? delete_from_page_cache_batch+0xa30/0xa30 [ 1411.952170] ? mark_held_locks+0x9e/0xe0 [ 1411.952960] ? trace_hardirqs_on+0x5b/0x180 [ 1411.953961] filemap_write_and_wait_range+0x65/0x100 [ 1411.954911] __iomap_dio_rw+0x552/0x1110 [ 1411.955850] ? iomap_dio_bio_actor+0xef0/0xef0 [ 1411.956726] ? down_read+0x10f/0x430 [ 1411.957580] ? lock_chain_count+0x20/0x20 [ 1411.958364] ? down_write+0x160/0x160 [ 1411.959246] iomap_dio_rw+0x31/0x90 [ 1411.959946] ext4_file_read_iter+0x2c7/0x4c0 [ 1411.960964] generic_file_splice_read+0x455/0x6d0 [ 1411.961894] ? pipe_to_user+0x170/0x170 [ 1411.962672] ? fsnotify_perm.part.0+0x22d/0x620 [ 1411.963570] ? security_file_permission+0xb1/0xe0 [ 1411.964551] ? pipe_to_user+0x170/0x170 [ 1411.965316] do_splice_to+0x10e/0x160 [ 1411.966408] splice_direct_to_actor+0x2fe/0x980 [ 1411.967702] ? pipe_to_sendpage+0x380/0x380 [ 1411.968899] ? do_splice_to+0x160/0x160 [ 1411.970012] ? security_file_permission+0xb1/0xe0 [ 1411.971152] do_splice_direct+0x1c4/0x290 [ 1411.972111] ? splice_direct_to_actor+0x980/0x980 [ 1411.973220] ? avc_policy_seqno+0x9/0x70 [ 1411.974174] ? security_file_permission+0xb1/0xe0 [ 1411.975297] do_sendfile+0x553/0x11e0 [ 1411.976197] ? do_pwritev+0x270/0x270 [ 1411.977087] ? wait_for_completion_io+0x270/0x270 [ 1411.978227] ? rcu_read_lock_any_held+0x75/0xa0 [ 1411.979296] ? vfs_write+0x354/0xb10 [ 1411.980224] __x64_sys_sendfile64+0x1d1/0x210 [ 1411.981264] ? __ia32_sys_sendfile+0x220/0x220 [ 1411.982360] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1411.983574] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1411.984770] do_syscall_64+0x33/0x40 [ 1411.985645] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1411.986830] RIP: 0033:0x7efcccb57b19 [ 1411.987690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1411.991910] RSP: 002b:00007efcca0cd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1411.993675] RAX: ffffffffffffffda RBX: 00007efcccc6af60 RCX: 00007efcccb57b19 [ 1411.995317] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1411.997026] RBP: 00007efcca0cd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1411.998684] R10: 00000ffffffff000 R11: 0000000000000246 R12: 0000000000000001 [ 1412.000325] R13: 00007ffdb544bb5f R14: 00007efcca0cd300 R15: 0000000000022000 [ 1412.011388] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1412.025589] audit: type=1326 audit(1751717373.801:1203): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11676 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1412.043702] audit: type=1326 audit(1751717373.801:1204): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11676 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1412.052105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1412.053057] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1412.054069] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1412.057341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1412.059171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1412.061484] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1412.075412] audit: type=1326 audit(1751717373.801:1205): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11676 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1412.086091] audit: type=1326 audit(1751717373.801:1206): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11676 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1412.094401] audit: type=1326 audit(1751717373.801:1207): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11676 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1412.105749] audit: type=1326 audit(1751717373.810:1208): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11676 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1412.133707] audit: type=1326 audit(1751717374.020:1209): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11676 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1412.140687] audit: type=1326 audit(1751717374.027:1210): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11676 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 12:09:46 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) flock(0xffffffffffffffff, 0x8) r1 = syz_open_dev$sg(0x0, 0x0, 0x2001) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_AIE_ON(r2, 0x7002) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200), 0xc, &(0x7f0000000240)={&(0x7f0000001800)=ANY=[@ANYRESDEC], 0x2f8}}, 0x0) ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f00000004c0)={{r2}, "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"}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f00000014c0)=ANY=[@ANYBLOB="02009e0049c670200609a84fc4ed060086d0ed4ced6a56b7f649f4b9fe3b23c25e131cf31241dfb64d33d448add6e8d046d0333ff3"]) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f0000001500)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000440)=[{0x0, 0x0, 0x4e0}, {0x0, 0x0, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000080)={[{@noacl}, {@prjquota}, {@jqfmt_vfsv1}]}) 12:09:46 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fork() tkill(r0, 0x26) waitid(0x9e220000, 0x0, 0x0, 0x4, 0x0) 12:09:46 executing program 7: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000dc0)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000008c0)={r2, 0x5, 0x80000001}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="080500988400014637b5e6a174b7b2b317b4044a94da343dd489e684a04f4ca90665864272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab7ea7e76402b517c198dc7ffbdbb38ab65f84f5242824efb291f523ece2d8e79434f9fe77da5ead57c5f16fed9a43b14e466358a6b4c3a1a8361e8199db7e4116e6031e72ada1c25a85ea221f56", @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) shutdown(r3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0x50, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x2e}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x674}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xd69}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xfffd}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x50}}, 0x40) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 12:09:46 executing program 4: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)=@v1={0x2, "eb689c01c1f2007b386a0f4ad890f2"}, 0x10, 0x0) ioctl$BLKTRACESETUP(r0, 0x1277, &(0x7f0000000540)={'\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 12:09:46 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$BLKTRACESETUP(r1, 0x1277, &(0x7f0000000540)={'\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 12:09:46 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xc, &(0x7f0000000100)={0x5, 0xfffffffffffffffd}, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xffffffff000) 12:09:46 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)=0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001700)=ANY=[@ANYBLOB="010000009bd77e7d3db3c295", @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c652fe1451d4e7b754bc7f05f0ff404807bf64d176a29993195992c14f39ee8328796f81d1886f6cb48f1ed71a941835b5840190114208ef9dda4756eab00fcd38d0a302906ffc3e8f25260ef7b4e28db855ed9e895bd4b0fbdedef955a9ddf4161dc9347ef97623a3ebf9ca8933a81653dd955d769a92740fbed0519a0fe8fb2bb1420fa5a24997c0cf4682cd464c3bcd44c267b10cfd7565652376257be8c2ef9d94e9ad1d44011543b4d0e2c77577a1157a58a7edab4a0981d3549776f00"/210]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x4827d9d3570e76e1}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb62) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400ffbd0000"], 0x14}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup(r3) r4 = dup2(r1, r2) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x8010, r4, 0x10000000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@private, @in=@initdev}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000280)=0xe8) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 12:09:46 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xffffffff000) (fail_nth: 10) [ 1424.488708] audit: type=1326 audit(1751717386.375:1211): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11797 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1424.498570] audit: type=1326 audit(1751717386.375:1212): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11797 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1424.507421] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1424.515706] FAULT_INJECTION: forcing a failure. [ 1424.515706] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 1424.517663] CPU: 0 PID: 11810 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 1424.518716] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1424.519954] Call Trace: [ 1424.520364] dump_stack+0x107/0x167 [ 1424.520939] should_fail.cold+0x5/0xa [ 1424.521530] __alloc_pages_nodemask+0x182/0x600 [ 1424.522261] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 1424.523197] ? lock_acquire+0x197/0x470 [ 1424.523792] ? find_held_lock+0x2c/0x110 [ 1424.524431] ? jbd2_transaction_committed+0x111/0x150 [ 1424.525228] ? lock_downgrade+0x6d0/0x6d0 [ 1424.525885] ? ext4_map_blocks+0x87c/0x1910 [ 1424.526554] alloc_pages_current+0x187/0x280 [ 1424.527229] push_pipe+0x2b5/0x6d0 [ 1424.527782] iov_iter_zero+0x418/0xef0 [ 1424.528387] ? ext4_iomap_begin+0x1a0/0x700 [ 1424.529054] ? iov_iter_copy_from_user_atomic+0xdb0/0xdb0 [ 1424.529921] ? ext4_iomap_begin_report+0x5a0/0x5a0 [ 1424.530694] iomap_dio_actor+0x40f/0x560 [ 1424.531328] iomap_apply+0x289/0x810 [ 1424.531890] ? iomap_dio_rw+0x90/0x90 [ 1424.532479] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 1424.533359] ? delete_from_page_cache_batch+0xa30/0xa30 [ 1424.534188] ? mark_held_locks+0x9e/0xe0 [ 1424.534821] ? filemap_check_errors+0xa5/0x150 [ 1424.535530] __iomap_dio_rw+0x6cd/0x1110 [ 1424.536160] ? iomap_dio_rw+0x90/0x90 [ 1424.536748] ? iomap_dio_bio_actor+0xef0/0xef0 [ 1424.537452] ? down_read+0x10f/0x430 [ 1424.538052] ? lock_chain_count+0x20/0x20 [ 1424.538683] ? down_write+0x160/0x160 [ 1424.539257] iomap_dio_rw+0x31/0x90 [ 1424.539804] ext4_file_read_iter+0x2c7/0x4c0 [ 1424.540485] generic_file_splice_read+0x455/0x6d0 [ 1424.541227] ? pipe_to_user+0x170/0x170 [ 1424.541860] ? fsnotify_perm.part.0+0x22d/0x620 [ 1424.542576] ? security_file_permission+0xb1/0xe0 [ 1424.543320] ? pipe_to_user+0x170/0x170 [ 1424.543931] do_splice_to+0x10e/0x160 [ 1424.544510] splice_direct_to_actor+0x2fe/0x980 [ 1424.545215] ? pipe_to_sendpage+0x380/0x380 [ 1424.545900] ? do_splice_to+0x160/0x160 [ 1424.546505] ? security_file_permission+0xb1/0xe0 [ 1424.547248] do_splice_direct+0x1c4/0x290 [ 1424.547884] ? splice_direct_to_actor+0x980/0x980 [ 1424.548616] ? avc_policy_seqno+0x9/0x70 [ 1424.549251] ? security_file_permission+0xb1/0xe0 [ 1424.550005] do_sendfile+0x553/0x11e0 [ 1424.550602] ? do_pwritev+0x270/0x270 [ 1424.551191] ? wait_for_completion_io+0x270/0x270 [ 1424.551941] ? rcu_read_lock_any_held+0x75/0xa0 [ 1424.552661] ? vfs_write+0x354/0xb10 [ 1424.553240] __x64_sys_sendfile64+0x1d1/0x210 [ 1424.553939] ? __ia32_sys_sendfile+0x220/0x220 [ 1424.554641] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1424.555459] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1424.556251] do_syscall_64+0x33/0x40 [ 1424.556824] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1424.557617] RIP: 0033:0x7efcccb57b19 [ 1424.558186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1424.561013] RSP: 002b:00007efcca0cd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1424.562199] RAX: ffffffffffffffda RBX: 00007efcccc6af60 RCX: 00007efcccb57b19 [ 1424.563293] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1424.564389] RBP: 00007efcca0cd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1424.565488] R10: 00000ffffffff000 R11: 0000000000000246 R12: 0000000000000002 [ 1424.565682] audit: type=1326 audit(1751717386.382:1213): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11797 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=57 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1424.566580] R13: 00007ffdb544bb5f R14: 00007efcca0cd300 R15: 0000000000022000 [ 1424.592887] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1424.593442] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1424.594031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:09:46 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x5, 0x86e2}}, './file0\x00'}) r2 = fork() tkill(r2, 0x26) waitid(0x1, r2, &(0x7f0000000100), 0x4, &(0x7f0000000500)) ioctl$BLKTRACESETUP(r1, 0x1277, &(0x7f0000000540)={'\x00', 0xffff, 0x0, 0x6, 0x0, 0x80000, r2}) 12:09:46 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='bond_slave_0\x00') sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f00000002c0)=@updsa={0x148, 0x10, 0x1, 0x0, 0x0, {{@in6=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@empty, 0x8000, 0x32}, @in6=@private0, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x58, 0x2, {{'cbc(aes)\x00'}, 0x80, "0f24aa6b13c2e62f3556b1cbcfeac2a0"}}]}, 0x148}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001c0001"], 0x14}}, 0x0) [ 1424.616301] loop6: detected capacity change from 0 to 16896 12:09:46 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xc, &(0x7f0000000100)={0x5, 0xfffffffffffffffd}, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xffffffff000) [ 1424.642182] audit: type=1326 audit(1751717386.393:1214): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11796 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea1e415b19 code=0x7ffc0000 12:09:46 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xffffffff000) (fail_nth: 11) [ 1424.688644] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:09:46 executing program 4: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000bd81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c034b19e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065ffe3cb0ac3a25ca5c1ff5a7d310a614982b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afad2d162d4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc0043a0bd1f8bdfb33e073ebbcea086bc8e8da27d76939786776a523785c8d9f855bdebf1edf10e03337ab01cd5cf01d1029cd73f7ed80e25303ae4adcc92c32141d362f09f0ddfd8ac96f4ac950755951deec4790aad73f2a0d0ea95e61d823c36e7917937d2c4a20f602f26bb5c2ea4e8f007987755f0b9b120ccf930f7cf089b1c1753bf4211f6a56b65965f6524d61bb2ec857e92eb023f637d4bda1054267ecbf7042"], 0x24}}, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r2) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) mount$9p_fd(0x0, 0x0, &(0x7f0000000240), 0x220004, &(0x7f0000000600)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@privport}, {@noextend}, {@access_client}, {@cache_loose}, {@version_L}], [{@obj_type={'obj_type', 0x3d, '-\\'}}]}}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001500)=ANY=[@ANYBLOB="feffffffffffffff00a900"], 0x30}}, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="080500988400014637b5e6a174b7b2b317b4044a94da343dd489e684a04f4ca90665864272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab7ea7e76402b517c198dc7ffbdbb38ab65f84f5242824efb291f523ece2d8e79434f9fe77da5ead57c5f16fed9a43b14e466358a6b4c3a1a8361e8199db7e4116e6031e72ada1c25a85ea221f56", @ANYRES16, @ANYBLOB="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"/1282], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000000980)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4005}, 0x8054) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x7, 0x4) getresgid(&(0x7f0000000340), &(0x7f0000000400), &(0x7f00000006c0)) [ 1424.696999] audit: type=1326 audit(1751717386.405:1215): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11797 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 12:09:46 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)=0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001700)=ANY=[@ANYBLOB="010000009bd77e7d3db3c295", @ANYRES32, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c652fe1451d4e7b754bc7f05f0ff404807bf64d176a29993195992c14f39ee8328796f81d1886f6cb48f1ed71a941835b5840190114208ef9dda4756eab00fcd38d0a302906ffc3e8f25260ef7b4e28db855ed9e895bd4b0fbdedef955a9ddf4161dc9347ef97623a3ebf9ca8933a81653dd955d769a92740fbed0519a0fe8fb2bb1420fa5a24997c0cf4682cd464c3bcd44c267b10cfd7565652376257be8c2ef9d94e9ad1d44011543b4d0e2c77577a1157a58a7edab4a0981d3549776f00"/210]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x4827d9d3570e76e1}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb62) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400ffbd0000"], 0x14}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup(r3) r4 = dup2(r1, r2) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x8010, r4, 0x10000000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@private, @in=@initdev}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000280)=0xe8) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1424.733342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1424.734474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1424.735720] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1424.749992] audit: type=1326 audit(1751717386.405:1216): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11797 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1424.781140] audit: type=1326 audit(1751717386.405:1217): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11811 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1424.784035] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1424.796364] FAULT_INJECTION: forcing a failure. [ 1424.796364] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1424.797768] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 1424.798264] CPU: 0 PID: 11827 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 1424.800418] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1424.801643] Call Trace: [ 1424.802032] dump_stack+0x107/0x167 [ 1424.802563] should_fail.cold+0x5/0xa [ 1424.803135] __alloc_pages_nodemask+0x182/0x600 [ 1424.803810] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 1424.804682] ? lock_acquire+0x197/0x470 [ 1424.805259] ? find_held_lock+0x2c/0x110 [ 1424.805858] ? jbd2_transaction_committed+0x111/0x150 [ 1424.806603] ? lock_downgrade+0x6d0/0x6d0 [ 1424.807205] ? ext4_map_blocks+0x87c/0x1910 [ 1424.807830] alloc_pages_current+0x187/0x280 [ 1424.808474] push_pipe+0x2b5/0x6d0 [ 1424.809003] iov_iter_zero+0x418/0xef0 [ 1424.809571] ? ext4_iomap_begin+0x1a0/0x700 [ 1424.810211] ? iov_iter_copy_from_user_atomic+0xdb0/0xdb0 [ 1424.811011] ? ext4_iomap_begin_report+0x5a0/0x5a0 [ 1424.811743] iomap_dio_actor+0x40f/0x560 [ 1424.812338] iomap_apply+0x289/0x810 [ 1424.812878] ? iomap_dio_rw+0x90/0x90 [ 1424.813431] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 1424.814311] ? delete_from_page_cache_batch+0xa30/0xa30 [ 1424.815080] ? mark_held_locks+0x9e/0xe0 [ 1424.815720] ? filemap_check_errors+0xa5/0x150 [ 1424.816411] __iomap_dio_rw+0x6cd/0x1110 [ 1424.817017] ? iomap_dio_rw+0x90/0x90 [ 1424.817587] ? iomap_dio_bio_actor+0xef0/0xef0 [ 1424.818258] ? down_read+0x10f/0x430 [ 1424.818795] ? lock_chain_count+0x20/0x20 [ 1424.819396] ? down_write+0x160/0x160 [ 1424.819956] iomap_dio_rw+0x31/0x90 [ 1424.820481] ext4_file_read_iter+0x2c7/0x4c0 [ 1424.821126] generic_file_splice_read+0x455/0x6d0 [ 1424.821853] ? pipe_to_user+0x170/0x170 [ 1424.822445] ? fsnotify_perm.part.0+0x22d/0x620 [ 1424.823124] ? security_file_permission+0xb1/0xe0 [ 1424.823819] ? pipe_to_user+0x170/0x170 [ 1424.824397] do_splice_to+0x10e/0x160 [ 1424.824951] splice_direct_to_actor+0x2fe/0x980 [ 1424.825640] ? pipe_to_sendpage+0x380/0x380 [ 1424.826273] ? do_splice_to+0x160/0x160 [ 1424.826844] ? security_file_permission+0xb1/0xe0 [ 1424.827544] do_splice_direct+0x1c4/0x290 [ 1424.828145] ? splice_direct_to_actor+0x980/0x980 [ 1424.828849] ? avc_policy_seqno+0x9/0x70 [ 1424.829446] ? security_file_permission+0xb1/0xe0 [ 1424.830173] do_sendfile+0x553/0x11e0 [ 1424.830736] ? do_pwritev+0x270/0x270 [ 1424.831290] ? wait_for_completion_io+0x270/0x270 [ 1424.831988] ? rcu_read_lock_any_held+0x75/0xa0 [ 1424.832666] ? vfs_write+0x354/0xb10 [ 1424.833206] __x64_sys_sendfile64+0x1d1/0x210 [ 1424.833861] ? __ia32_sys_sendfile+0x220/0x220 [ 1424.834520] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1424.835281] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1424.836032] do_syscall_64+0x33/0x40 [ 1424.836570] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1424.837314] RIP: 0033:0x7efcccb57b19 [ 1424.837854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1424.840511] RSP: 002b:00007efcca0cd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1424.841620] RAX: ffffffffffffffda RBX: 00007efcccc6af60 RCX: 00007efcccb57b19 [ 1424.842640] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1424.843666] RBP: 00007efcca0cd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1424.844693] R10: 00000ffffffff000 R11: 0000000000000246 R12: 0000000000000002 [ 1424.845734] R13: 00007ffdb544bb5f R14: 00007efcca0cd300 R15: 0000000000022000 12:09:46 executing program 7: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000dc0)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000008c0)={r2, 0x5, 0x80000001}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="080500988400014637b5e6a174b7b2b317b4044a94da343dd489e684a04f4ca90665864272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab7ea7e76402b517c198dc7ffbdbb38ab65f84f5242824efb291f523ece2d8e79434f9fe77da5ead57c5f16fed9a43b14e466358a6b4c3a1a8361e8199db7e4116e6031e72ada1c25a85ea221f56", @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) shutdown(r3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0x50, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x2e}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x674}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xd69}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xfffd}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x50}}, 0x40) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1424.848968] audit: type=1326 audit(1751717386.405:1218): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11811 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 12:09:46 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fork() tkill(r0, 0x26) waitid(0xa1ffffff, 0x0, 0x0, 0x4, 0x0) [ 1424.865816] audit: type=1326 audit(1751717386.450:1219): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11796 comm="syz-executor.6" exe="/syz-executor.6" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea1e415b19 code=0x7ffc0000 [ 1424.879702] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1424.886584] audit: type=1326 audit(1751717386.460:1220): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11797 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1424.894242] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1424.909499] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1424.910557] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1424.911760] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1424.916090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1424.917179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1424.922540] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1424.932348] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1424.953128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1424.954232] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1424.955275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:09:46 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff7f, 0x5}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r1) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x5, 0x0, 0x0, 0x241808, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r3) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r3, &(0x7f0000000380)={&(0x7f0000000140), 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x400000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0000000031439146840db82a19392165e497ce563a369451af333b813b464af0416a30425414f8bac8c73aa78e47f9", @ANYRES16=r2, @ANYBLOB="010000000000000000002100000009001f0070687931000000000500200000000000"], 0x28}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) 12:09:46 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xc, &(0x7f0000000100)={0x5, 0xfffffffffffffffd}, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xffffffff000) 12:09:46 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)=0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001700)=ANY=[@ANYBLOB="010000009bd77e7d3db3c295", @ANYRES32, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c652fe1451d4e7b754bc7f05f0ff404807bf64d176a29993195992c14f39ee8328796f81d1886f6cb48f1ed71a941835b5840190114208ef9dda4756eab00fcd38d0a302906ffc3e8f25260ef7b4e28db855ed9e895bd4b0fbdedef955a9ddf4161dc9347ef97623a3ebf9ca8933a81653dd955d769a92740fbed0519a0fe8fb2bb1420fa5a24997c0cf4682cd464c3bcd44c267b10cfd7565652376257be8c2ef9d94e9ad1d44011543b4d0e2c77577a1157a58a7edab4a0981d3549776f00"/210]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x4827d9d3570e76e1}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb62) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400ffbd0000"], 0x14}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup(r3) r4 = dup2(r1, r2) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x8010, r4, 0x10000000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@private, @in=@initdev}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000280)=0xe8) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 12:09:46 executing program 7: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000dc0)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000008c0)={r2, 0x5, 0x80000001}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="080500988400014637b5e6a174b7b2b317b4044a94da343dd489e684a04f4ca90665864272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab7ea7e76402b517c198dc7ffbdbb38ab65f84f5242824efb291f523ece2d8e79434f9fe77da5ead57c5f16fed9a43b14e466358a6b4c3a1a8361e8199db7e4116e6031e72ada1c25a85ea221f56", @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) shutdown(r3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0x50, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x2e}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x674}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xd69}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xfffd}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x50}}, 0x40) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1425.056380] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. 12:09:46 executing program 6: sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000c10}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002dc0)=[{0x0}], 0x1}, 0x80) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000c00)='/sys/power/pm_print_times', 0x0, 0x0) preadv2(r2, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0, 0x0) accept$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000000)={@loopback, 0x4, r3}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x9c, r1, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40000}, 0x24004890) syz_genetlink_get_family_id$gtp(&(0x7f000000a680), 0xffffffffffffffff) syz_io_uring_setup(0x42f6, &(0x7f000000a980)={0x0, 0xe604, 0x4, 0x3, 0x3e6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f000000aa00), &(0x7f000000aa40)) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r5 = fcntl$dupfd(r4, 0x406, r4) sendmsg$inet6(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x14) 12:09:46 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xffffffff000) (fail_nth: 12) [ 1425.091571] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1425.116845] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1425.117846] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1425.118858] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1425.160389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1425.161350] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1425.162731] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:09:47 executing program 7: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000dc0)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000008c0)={r2, 0x5, 0x80000001}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="080500988400014637b5e6a174b7b2b317b4044a94da343dd489e684a04f4ca90665864272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab7ea7e76402b517c198dc7ffbdbb38ab65f84f5242824efb291f523ece2d8e79434f9fe77da5ead57c5f16fed9a43b14e466358a6b4c3a1a8361e8199db7e4116e6031e72ada1c25a85ea221f56", @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) shutdown(r3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0x50, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x2e}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x674}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xd69}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xfffd}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x50}}, 0x40) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1425.204187] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. 12:09:47 executing program 4: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x0, 0x7f, 0x5}, {0x5, 0x0, 0x1, 0x3}]}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000580)=ANY=[@ANYBLOB="070000000700000000efff000000007ed8487c35c97ce46bc77944469551eeab973cb29e75191bfb010069acb18a51a73a7d210a33086066d41c9acd8cdb91366b97bdd67cf36eaf7a206f8447e760e0f0fbedc930a72f6dd0a09c088bba805f8b8e19f5473d9b67b05ad720bb9d00a3c688ed9870"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000500)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101982, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) ioctl$LOOP_SET_STATUS(r1, 0x4c00, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f00000003c0)={0x1, [0x0]}) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000440)={0x0, {}, 0x0, {}, 0xa9, 0x12, 0x1d, 0x19, "6e60147ae2fcdc3f1d52584aebeafaa0edd69266edf29bbff612a7a730c97b72b322d0b8aff13a679593d52a3c987ef7c88e49e70f44c10f719a7c0f41774981", "f8258a6ec00c2423b3415e80f5dcc6b04bdfa5322086b2c40bc141347fe2216a", [0x100000001, 0x9]}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x220000, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f00000002c0)={0x0, {}, 0x0, {}, 0xfff, 0x0, 0x13, 0x0, "a33ffde15ac5e3597997ca8986bc6d30fb365a162412350d2dbb5f02e4b9158f3b699d557e93639a919a636fc399cb69327ad1688070049903904fc96628577b", "2f87934459fd43a9829984709a2e821126913d74f3d1ad8285ca2e3a4a403d99", [0xffff, 0x80]}) creat(&(0x7f0000000380)='./file0\x00', 0x9) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000200)=ANY=[@ANYBLOB="9789cdc1a58bb7523a45992fbb476b7ba2f081093dc81803cc6745a634a85feaf8ebcd4ec14543c88d990c72ba873c406408925ef7240019f7bd2bc2541505748aaf018bad5ffbb866b332d87a3c99b80c1603203a1131ef91e6"]) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f0000000600)={'mangle\x00', 0xa2, "21669cb87500bef91d3aee893e0f3c4d29681b4dbb262a39426a476951005ae20ba55d3540563ff853c1a1ea3f0edd1739d83a70f807698156e382d77b477f6f93a70ced515825b73ebf3e36d82e7486187c5a3567548bd07709a39a877118036cec71630fb9ab8586d9060dbbae7d3ecd4baaea260e2da82bc9cc2468158c4c05daa0abc3ec4ff7b95dd7a4e8e08c2b72efe487be909c3b6c9f1e0b2cf0eb0b67ea"}, &(0x7f0000000140)=0xc6) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x4, &(0x7f0000ffb000/0x3000)=nil) open(&(0x7f0000000080)='./file2\x00', 0x80, 0x26) acct(&(0x7f00000001c0)='./file1\x00') openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x20082, 0xf4) [ 1425.256295] FAULT_INJECTION: forcing a failure. [ 1425.256295] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1425.258001] CPU: 0 PID: 11890 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 1425.258855] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1425.259881] Call Trace: [ 1425.260219] dump_stack+0x107/0x167 [ 1425.260668] should_fail.cold+0x5/0xa [ 1425.261144] __alloc_pages_nodemask+0x182/0x600 [ 1425.261724] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 1425.262469] ? lock_acquire+0x197/0x470 [ 1425.262962] ? find_held_lock+0x2c/0x110 [ 1425.263474] ? jbd2_transaction_committed+0x111/0x150 [ 1425.264113] ? lock_downgrade+0x6d0/0x6d0 [ 1425.264638] ? ext4_map_blocks+0x87c/0x1910 [ 1425.265188] alloc_pages_current+0x187/0x280 [ 1425.265745] push_pipe+0x2b5/0x6d0 [ 1425.266193] iov_iter_zero+0x418/0xef0 [ 1425.266675] ? ext4_iomap_begin+0x1a0/0x700 [ 1425.267209] ? iov_iter_copy_from_user_atomic+0xdb0/0xdb0 [ 1425.267887] ? ext4_iomap_begin_report+0x5a0/0x5a0 [ 1425.268506] iomap_dio_actor+0x40f/0x560 [ 1425.269014] iomap_apply+0x289/0x810 [ 1425.269479] ? iomap_dio_rw+0x90/0x90 [ 1425.269967] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 1425.270681] ? delete_from_page_cache_batch+0xa30/0xa30 [ 1425.271340] ? mark_held_locks+0x9e/0xe0 [ 1425.271854] ? filemap_check_errors+0xa5/0x150 [ 1425.272421] __iomap_dio_rw+0x6cd/0x1110 [ 1425.272929] ? iomap_dio_rw+0x90/0x90 [ 1425.273413] ? iomap_dio_bio_actor+0xef0/0xef0 [ 1425.273988] ? down_read+0x10f/0x430 [ 1425.274444] ? lock_chain_count+0x20/0x20 [ 1425.274954] ? down_write+0x160/0x160 [ 1425.275427] iomap_dio_rw+0x31/0x90 [ 1425.275877] ext4_file_read_iter+0x2c7/0x4c0 [ 1425.276423] generic_file_splice_read+0x455/0x6d0 [ 1425.277021] ? pipe_to_user+0x170/0x170 [ 1425.277524] ? fsnotify_perm.part.0+0x22d/0x620 [ 1425.278119] ? security_file_permission+0xb1/0xe0 [ 1425.278719] ? pipe_to_user+0x170/0x170 [ 1425.279212] do_splice_to+0x10e/0x160 [ 1425.279685] splice_direct_to_actor+0x2fe/0x980 [ 1425.280261] ? pipe_to_sendpage+0x380/0x380 [ 1425.280794] ? do_splice_to+0x160/0x160 [ 1425.281295] ? security_file_permission+0xb1/0xe0 [ 1425.281912] do_splice_direct+0x1c4/0x290 [ 1425.282427] ? splice_direct_to_actor+0x980/0x980 [ 1425.283029] ? avc_policy_seqno+0x9/0x70 [ 1425.283530] ? security_file_permission+0xb1/0xe0 [ 1425.284143] do_sendfile+0x553/0x11e0 [ 1425.284617] ? do_pwritev+0x270/0x270 [ 1425.285089] ? wait_for_completion_io+0x270/0x270 [ 1425.285696] ? rcu_read_lock_any_held+0x75/0xa0 [ 1425.286268] ? vfs_write+0x354/0xb10 [ 1425.286735] __x64_sys_sendfile64+0x1d1/0x210 [ 1425.287295] ? __ia32_sys_sendfile+0x220/0x220 [ 1425.287864] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1425.288517] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1425.289156] do_syscall_64+0x33/0x40 [ 1425.289627] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1425.290269] RIP: 0033:0x7efcccb57b19 [ 1425.290728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1425.292994] RSP: 002b:00007efcca0cd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1425.293948] RAX: ffffffffffffffda RBX: 00007efcccc6af60 RCX: 00007efcccb57b19 [ 1425.294833] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1425.295717] RBP: 00007efcca0cd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1425.296595] R10: 00000ffffffff000 R11: 0000000000000246 R12: 0000000000000002 [ 1425.297480] R13: 00007ffdb544bb5f R14: 00007efcca0cd300 R15: 0000000000022000 [ 1425.305378] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1425.306301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1425.307289] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:10:00 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fork() tkill(r0, 0x26) waitid(0xfeffffff, 0x0, 0x0, 0x4, 0x0) [ 1438.827315] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 12:10:00 executing program 6: r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r3 = fcntl$dupfd(r2, 0x406, r2) sendmsg$inet6(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) dup3(r1, r3, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r4 = fcntl$dupfd(r1, 0x406, r1) sendmsg$inet6(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, r4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000003640)=[{{&(0x7f0000000100)={0x2, 0x4e21, @empty}, 0x10, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2600c400) openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x280822) 12:10:00 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)=0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001700)=ANY=[@ANYBLOB="010000009bd77e7d3db3c295", @ANYRES32, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c652fe1451d4e7b754bc7f05f0ff404807bf64d176a29993195992c14f39ee8328796f81d1886f6cb48f1ed71a941835b5840190114208ef9dda4756eab00fcd38d0a302906ffc3e8f25260ef7b4e28db855ed9e895bd4b0fbdedef955a9ddf4161dc9347ef97623a3ebf9ca8933a81653dd955d769a92740fbed0519a0fe8fb2bb1420fa5a24997c0cf4682cd464c3bcd44c267b10cfd7565652376257be8c2ef9d94e9ad1d44011543b4d0e2c77577a1157a58a7edab4a0981d3549776f00"/210]) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x4827d9d3570e76e1}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb62) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400ffbd0000"], 0x14}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup(r3) r4 = dup2(r1, r2) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x8010, r4, 0x10000000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@private, @in=@initdev}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000280)=0xe8) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 12:10:00 executing program 7: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000018c0)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000dc0)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000008c0)={r2, 0x5, 0x80000001}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="080500988400014637b5e6a174b7b2b317b4044a94da343dd489e684a04f4ca90665864272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab7ea7e76402b517c198dc7ffbdbb38ab65f84f5242824efb291f523ece2d8e79434f9fe77da5ead57c5f16fed9a43b14e466358a6b4c3a1a8361e8199db7e4116e6031e72ada1c25a85ea221f56", @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) shutdown(r3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0x50, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x2e}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x674}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xd69}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xfffd}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x50}}, 0x40) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 12:10:00 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xc, &(0x7f0000000100)={0x5, 0xfffffffffffffffd}, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xffffffff000) 12:10:00 executing program 4: r0 = openat(0xffffffffffffffff, 0x0, 0x100, 0x10e) fspick(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee01}}, './file1\x00'}) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='./file0\x00', 0xffffffffffffff9c) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r3, 0x2}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x20010, r2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x102, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}], ['\x00']}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'macsec0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="3c00000001000000030015c1e10000030000000220000001dee8fc131fc92b570000000100008068fb93f20624d998bb2382fbef2e605d20efd13ad8020454fe726d5ec46065bf6e5c2fd748b7382cb035aee7d07675"]}) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000300)={'icmp6\x00'}, &(0x7f0000000380)=0x1e) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/consoles\x00', 0x0, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000480)={0x0, 0x2560}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000200), &(0x7f00000002c0)) unshare(0x48020200) 12:10:00 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xffffffff000) (fail_nth: 13) [ 1438.856434] kauditd_printk_skb: 87 callbacks suppressed [ 1438.856459] audit: type=1326 audit(1751717400.743:1308): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11984 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1438.870873] audit: type=1326 audit(1751717400.743:1309): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11984 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=57 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1438.884280] FAULT_INJECTION: forcing a failure. [ 1438.884280] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1438.884688] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1438.886408] CPU: 1 PID: 11990 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 1438.886417] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1438.886422] Call Trace: [ 1438.886441] dump_stack+0x107/0x167 [ 1438.886457] should_fail.cold+0x5/0xa [ 1438.886477] __alloc_pages_nodemask+0x182/0x600 [ 1438.886495] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 1438.886508] ? lock_acquire+0x197/0x470 [ 1438.886520] ? find_held_lock+0x2c/0x110 [ 1438.886541] ? jbd2_transaction_committed+0x111/0x150 [ 1438.886564] ? lock_downgrade+0x6d0/0x6d0 [ 1438.897125] ? ext4_map_blocks+0x87c/0x1910 [ 1438.897836] alloc_pages_current+0x187/0x280 [ 1438.898543] push_pipe+0x2b5/0x6d0 [ 1438.899132] iov_iter_zero+0x418/0xef0 [ 1438.899765] ? ext4_iomap_begin+0x1a0/0x700 [ 1438.900472] ? iov_iter_copy_from_user_atomic+0xdb0/0xdb0 [ 1438.901365] ? ext4_iomap_begin_report+0x5a0/0x5a0 [ 1438.902174] iomap_dio_actor+0x40f/0x560 [ 1438.902831] iomap_apply+0x289/0x810 [ 1438.903425] ? iomap_dio_rw+0x90/0x90 [ 1438.904036] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 1438.904965] ? delete_from_page_cache_batch+0xa30/0xa30 [ 1438.905822] ? mark_held_locks+0x9e/0xe0 [ 1438.906485] ? filemap_check_errors+0xa5/0x150 [ 1438.907225] __iomap_dio_rw+0x6cd/0x1110 [ 1438.907875] ? iomap_dio_rw+0x90/0x90 [ 1438.908509] ? iomap_dio_bio_actor+0xef0/0xef0 [ 1438.909261] ? down_read+0x10f/0x430 [ 1438.909867] ? lock_chain_count+0x20/0x20 [ 1438.910528] ? down_write+0x160/0x160 [ 1438.911147] iomap_dio_rw+0x31/0x90 [ 1438.911745] ext4_file_read_iter+0x2c7/0x4c0 [ 1438.912461] generic_file_splice_read+0x455/0x6d0 [ 1438.913235] ? pipe_to_user+0x170/0x170 [ 1438.913890] ? fsnotify_perm.part.0+0x22d/0x620 [ 1438.914640] ? security_file_permission+0xb1/0xe0 [ 1438.915413] ? pipe_to_user+0x170/0x170 [ 1438.916051] do_splice_to+0x10e/0x160 [ 1438.916668] splice_direct_to_actor+0x2fe/0x980 [ 1438.917438] ? pipe_to_sendpage+0x380/0x380 [ 1438.918162] ? do_splice_to+0x160/0x160 [ 1438.918826] ? security_file_permission+0xb1/0xe0 [ 1438.919650] do_splice_direct+0x1c4/0x290 [ 1438.920343] ? splice_direct_to_actor+0x980/0x980 [ 1438.921155] ? avc_policy_seqno+0x9/0x70 [ 1438.921849] ? security_file_permission+0xb1/0xe0 [ 1438.922668] do_sendfile+0x553/0x11e0 [ 1438.923317] ? do_pwritev+0x270/0x270 [ 1438.923967] __x64_sys_sendfile64+0x1d1/0x210 [ 1438.924713] ? __ia32_sys_sendfile+0x220/0x220 [ 1438.925478] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1438.926347] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1438.927209] do_syscall_64+0x33/0x40 [ 1438.927810] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1438.928629] RIP: 0033:0x7efcccb57b19 [ 1438.929223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1438.932248] RSP: 002b:00007efcca0cd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1438.933477] RAX: ffffffffffffffda RBX: 00007efcccc6af60 RCX: 00007efcccb57b19 [ 1438.934645] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1438.935801] RBP: 00007efcca0cd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1438.936955] R10: 00000ffffffff000 R11: 0000000000000246 R12: 0000000000000002 [ 1438.938111] R13: 00007ffdb544bb5f R14: 00007efcca0cd300 R15: 0000000000022000 [ 1438.947595] audit: type=1326 audit(1751717400.790:1310): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11984 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1438.960105] audit: type=1326 audit(1751717400.795:1311): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11984 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1438.969741] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1438.970953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1438.972297] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1438.973941] audit: type=1326 audit(1751717400.795:1312): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11984 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1438.974017] audit: type=1326 audit(1751717400.795:1313): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11984 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1438.974099] audit: type=1326 audit(1751717400.795:1314): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11984 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1438.974166] audit: type=1326 audit(1751717400.810:1315): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11984 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 12:10:00 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$binfmt_misc(r0, &(0x7f0000000100)={'syz1', "982356c6a494a060851322bc54a61190268e5d61b9c0cfa45713ac746285815a1d8cab18ccfe1711402d82d2e9d5f69edb6379574ffeb808ef595dae851201d908af7694dbc33412df08c37815e16c772e24d3a5906fa1a1711c6d6f72b6d52b2da8c4a875fea6b142a714b21c566b6940b4adf511787aa1a245b1d2367c466599e4295c564b03eff9e8928277c8a3f1c64e634628f6237cb61df8a00fae6a44d0e6b82879b983cb590a211870e16bc1a867d02eabee0e8a3040af166caac0799fda178a35461fe7bbb98f8d65dd646f6c3692291d378dc8965062f047f715d7f8b19d6843dcc9570ebd8a5747f8cb49582309f2e74a"}, 0xfa) ioctl$BLKTRACESETUP(r0, 0x1277, &(0x7f0000000540)={'\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r2 = fcntl$dupfd(r1, 0x406, r1) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fd/3\x00') r4 = fork() tkill(r4, 0x26) waitid(0x1, r4, &(0x7f0000000100), 0x4, &(0x7f0000000500)) sendmsg$nl_generic(r3, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x90, 0x27, 0x200, 0x70bd29, 0x25dfdbfd, {0x12}, [@typed={0x8, 0x2f, 0x0, 0x0, @pid=r4}, @typed={0xc, 0x3c, 0x0, 0x0, @u64=0x401}, @generic="ec8415f76ac13e381eb597437612c5ec4d2d4973010683b3c7da372702d574eeeb47e9c081657bf0f8f35bcf275b9cefe39205ec5f65b3fba57d2369c3e0392bec9d43c2c75530a5f8677ce7d039200849ef435a92fd1d95ac5ce456208f32618e70dcbd78"]}, 0x90}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4000000) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) r5 = fork() tkill(r5, 0x26) waitid(0x2, r5, &(0x7f0000000100), 0x4, &(0x7f0000000500)) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f00000005c0)={0x1054, 0x2c, 0x200, 0x70bd27, 0x25dfdbfe, {0xa}, [@generic="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", @generic, @typed={0xc, 0x44, 0x0, 0x0, @u64=0x9}, @typed={0x8, 0x44, 0x0, 0x0, @pid=r5}, @typed={0x14, 0x3f, 0x0, 0x0, @ipv6=@empty}, @typed={0xc, 0x79, 0x0, 0x0, @u64=0xe4b2}, @nested={0xc, 0x12, 0x0, 0x1, [@typed={0x5, 0x18, 0x0, 0x0, @str='\x00'}]}]}, 0x1054}, 0x1, 0x0, 0x0, 0x4001}, 0x80) 12:10:00 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xc, &(0x7f0000000100)={0x5, 0xfffffffffffffffd}, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xffffffff000) [ 1439.021645] audit: type=1326 audit(1751717400.908:1316): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11984 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1439.025459] audit: type=1326 audit(1751717400.908:1317): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=11984 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 12:10:00 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x80, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x0, 0x7, 0xffffffffffffffbc, 0xfffffffd, 0xfffd, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[@ANYRESHEX=r0, @ANYRESHEX, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYRES64]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f00000005c0)={0x1, 0x47, "bfdb32c638c131dfd06fe6db80e89d644fdc7798474d9e4de28e654500d4d4ae1c8016bd269199e14571ae69842959c4a29bf837f6555996d34fdb6926281a2d81b35d93b2954b"}) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000940)=ANY=[@ANYBLOB="95b50000018fd33a76f1d2328800000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="04a500006ccf5e00a30878ffff75db00808ebf8b85b5363cdf1595a0bee6cc6ec57b594af05d2bcaace304ab11b2f0de03bff4371a9012ef1c32b4b5c6366f172a140b3c90f6de5877ef5a6a3a26844c4bc8c82413041c010b22156a4c9a107723a5f2df0884ac7b2d8cf48af5dc01fc3d1d08a58cc865e3f2f712e1a4eabdc0986bd04ce4c790d9de030b3ca0239c52c979afa3e6e8c80f01000eba254f7d13aa0b68306d66d92477fe946e898db0c1"]) openat(0xffffffffffffffff, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) read(r2, &(0x7f00000006c0)=""/135, 0x87) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) dup3(0xffffffffffffffff, r1, 0x80000) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000380)=""/45, 0x2d}], 0x1, 0xffff57e9, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x46800) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/116, 0x74}], 0x3, 0x16, 0x4) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1439.067974] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1439.069182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1439.070625] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1439.131634] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 12:10:01 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)=0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001700)=ANY=[@ANYBLOB="010000009bd77e7d3db3c295", @ANYRES32=r2, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c652fe1451d4e7b754bc7f05f0ff404807bf64d176a29993195992c14f39ee8328796f81d1886f6cb48f1ed71a941835b5840190114208ef9dda4756eab00fcd38d0a302906ffc3e8f25260ef7b4e28db855ed9e895bd4b0fbdedef955a9ddf4161dc9347ef97623a3ebf9ca8933a81653dd955d769a92740fbed0519a0fe8fb2bb1420fa5a24997c0cf4682cd464c3bcd44c267b10cfd7565652376257be8c2ef9d94e9ad1d44011543b4d0e2c77577a1157a58a7edab4a0981d3549776f00"/210]) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x4827d9d3570e76e1}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb62) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400ffbd0000"], 0x14}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup(r4) r5 = dup2(r1, r3) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x8010, r5, 0x10000000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@private, @in=@initdev}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000280)=0xe8) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1439.196297] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1439.198028] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:10:01 executing program 7: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000018c0)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000001bd81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c030519e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065f14982b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc00100000000000000e073ebbcea086bc8e8da27d76939786776a523785c8d9f855bdebf1edf10e03336ab01cd5cf01d1029cd73f7ed80e25303ae4adcc92c32141d362f09f0ddfd8ac96f4ac935755951deec4790aad73f2a0d0ea95e61d823c36e791793000000000000000000"], 0x24}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000dc0)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000008c0)={r2, 0x5, 0x80000001}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="080500988400014637b5e6a174b7b2b317b4044a94da343dd489e684a04f4ca90665864272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab7ea7e76402b517c198dc7ffbdbb38ab65f84f5242824efb291f523ece2d8e79434f9fe77da5ead57c5f16fed9a43b14e466358a6b4c3a1a8361e8199db7e4116e6031e72ada1c25a85ea221f56", @ANYRES16, @ANYBLOB="04002cbd7000fddbdf2575000000c401f08067000b00677cfd4589c7a40e1aae6b18247eb36f74f8f6793b7df9ae3ca9cfb2f5e87ed1ff361592201a1151eabf57ad6fd1950cd215131f67634030aa5f484986ad830a6243bac401c3ee44bff7cea60e881d5f9b616582cf28ec620ccd97d4ceb48c6727530f00050001000100000005000f004000000008000a000000000005000f000400000038010c80050003000300000003010200a207624e07c5690d555d459080990de6741a392aa42eff746330a20bec78fd393092b5f99f54b2a9f6dadb55db3c0846814e79eb43bf7bcd6295c96e7ca16288a8b27c5a225a6d718ad49f0366f969983400ba504c865cca04e4fa00a4b246fa618936f70fe77c1c3e550a5d12d4a9108e7e4216bc693107c3bd4c06e98ec9399de0e98cf205057cbbf688d8a13dc55472fc31954b846e29dbd7d8889b34ead6c83c9b533b666abd65490f2a7e693d55d91f24d5078eb3d34940c02ea1125e7176e254c6bd5531ed067817f0b3278e3dc492571b7da828e728a6fa55742efa33f430739c320b794841adba4c2875044dce9c8959eebe4a5b52d68f9868719f00280004800a000600ffffffffffff00000a000600ffffffffffff00000a000600ffffffffffff00000c01f0800a000200ee90b393fc10000046000b005cbb9f225903f92e0cffa77bd5369da32f70909f5950f26e59525d4d3c41b9e512f4a5d3b7aaaf8a0e03f2aa73274b24a04b4a689bf05844d0d2ad278696b14fb4c50000b4000d80af0000001263800a6541e18dae533feb73677b5c9d5da0ee4d7366d47dd6fa0b14ca33d3433171a533a29930fb5e0d9ff2ca710ab0c8aa4b331d58b4a7b3cac9c9b4ef9e7cdb1d3d6da7f0877a5c3ce7ff9bf9e936b1bcbe732bd9037f9090bfdee1d3e45c7b700e6aefa488eb013b27cd7291a7b927dc10e794490c85dff0cb49a1dd13066b619ace5d6bf763b6858bf07eeb0f5514c3ce6c90d8457d79fcd2a3756ccd66b5194a5c69358e1199219e40ffdd6771943cb3fe33f442ae2ff2002c01f080050003000600000005000300020000000a000200957ccca020ad0000e4000b0049a0db966a0311d932607f2a479e651b881a56f4da7d14bde06c48822b0d353198bb85750dc9f0cca70174b813fe94ea80477bcf9dd6b03b9186edb85c476d8762dc273e83aaee35def167cc1c8faffc0e86fa311d66813cbea7e234d79e9d3acd30b5ae5a264e9576efabc94efd7a18b93eddabd9b046d12df487392f1217b77f05bd72f95130a2bda683b7a64c3d6477e3681d83c5e45e8fdae553114b304417851d9687ab3b9c6c7e91af7744d120000000332c31b35f4358643e4137a9e6b264a14e04605648b50e27e3bb5cbbdaac70655fdff371ece3e08885f0da8d700a000800080211000000000005000100000000000a000800080211000000000005000300c9000000f800f08008000a000100008004000500050010007f0000000a0002005a9cbd08ca8e000014000c800500030008000000050003005e000000c0000b003a3801c2eefaea9df8f27b808f751948873b3fa40dd675c2f1b45ab2dbcdf1903fb052565c23c23d861899509fb26a1f672416325f004d2fdd903c5fa86b4bf1e39074929e71f3a466d345a8e660cd8d401a4772051ab211e24ede74314ef8b7a2c04c8a87b4e5603f7592bc89521d454d3528dce3959d8613c413eafce02151dc1f76a1ace92831610ea0894d9f59407f66cbe556e636be5a3d01253ec1c755495e5196efdf7f155cba102e"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) shutdown(r3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0x50, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x2e}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x674}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xd69}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xfffd}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x50}}, 0x40) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1439.201767] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:10:01 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xc, &(0x7f0000000100)={0x5, 0xfffffffffffffffd}, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xffffffff000) [ 1439.220891] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 12:10:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x14) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)={0x1018, 0x15, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x4, 0xb}, @generic="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"]}, 0x1018}, 0x1, 0x0, 0x0, 0x80}, 0x840) [ 1439.248624] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1439.284665] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1439.286030] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1439.287256] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1439.326533] netlink: 4096 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1439.347590] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1439.426624] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1439.428711] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1439.430729] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1455.111499] audit: type=1326 audit(1751717416.998:1318): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12132 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 12:10:16 executing program 7: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000018c0)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000001bd81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c030519e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065f14982b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc00100000000000000e073ebbcea086bc8e8da27d76939786776a523785c8d9f855bdebf1edf10e03336ab01cd5cf01d1029cd73f7ed80e25303ae4adcc92c32141d362f09f0ddfd8ac96f4ac935755951deec4790aad73f2a0d0ea95e61d823c36e791793000000000000000000"], 0x24}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000dc0)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000008c0)={r2, 0x5, 0x80000001}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="080500988400014637b5e6a174b7b2b317b4044a94da343dd489e684a04f4ca90665864272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab7ea7e76402b517c198dc7ffbdbb38ab65f84f5242824efb291f523ece2d8e79434f9fe77da5ead57c5f16fed9a43b14e466358a6b4c3a1a8361e8199db7e4116e6031e72ada1c25a85ea221f56", @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) shutdown(r3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0x50, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x2e}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x674}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xd69}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xfffd}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x50}}, 0x40) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 12:10:16 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fork() tkill(r0, 0x26) waitid(0xffffffa1, 0x0, 0x0, 0x4, 0x0) 12:10:16 executing program 2: fcntl$notify(0xffffffffffffffff, 0x402, 0x18) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x40, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xc) ioctl$BLKTRACESETUP(r0, 0x1277, &(0x7f0000000540)={'\x00', 0x0, 0x0, 0x0, 0x0, 0x10001}) [ 1455.125989] audit: type=1326 audit(1751717416.998:1319): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12132 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=57 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 12:10:17 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ptype\x00') r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x753339376723de81, 0x80010, r0, 0x10000000) io_uring_enter(0xffffffffffffffff, 0x4e8b, 0xc01a, 0x2, &(0x7f0000000100)={[0x8000]}, 0x8) socket$inet_tcp(0x2, 0x1, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r4 = fcntl$dupfd(r3, 0x406, r3) sendmsg$inet6(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, &(0x7f0000000040)=0x29, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x0, 0x0, 0x0, {0x0, r2}}, 0x8000) preadv(r0, &(0x7f0000009a00)=[{&(0x7f00000085c0)=""/74, 0x4a}], 0x1, 0x80000000, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101202, 0x0) fcntl$F_GET_RW_HINT(r5, 0x40b, &(0x7f00000001c0)) 12:10:17 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xffffffff000) (fail_nth: 14) [ 1455.162183] audit: type=1326 audit(1751717417.048:1320): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12132 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1455.166613] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 12:10:17 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)=0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001700)=ANY=[@ANYBLOB="010000009bd77e7d3db3c295", @ANYRES32=r2, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c652fe1451d4e7b754bc7f05f0ff404807bf64d176a29993195992c14f39ee8328796f81d1886f6cb48f1ed71a941835b5840190114208ef9dda4756eab00fcd38d0a302906ffc3e8f25260ef7b4e28db855ed9e895bd4b0fbdedef955a9ddf4161dc9347ef97623a3ebf9ca8933a81653dd955d769a92740fbed0519a0fe8fb2bb1420fa5a24997c0cf4682cd464c3bcd44c267b10cfd7565652376257be8c2ef9d94e9ad1d44011543b4d0e2c77577a1157a58a7edab4a0981d3549776f00"/210]) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x4827d9d3570e76e1}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb62) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400ffbd0000"], 0x14}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup(r4) r5 = dup2(r1, r3) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x8010, r5, 0x10000000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@private, @in=@initdev}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000280)=0xe8) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 12:10:17 executing program 4: ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)=ANY=[@ANYBLOB="011900e5a9bf00020000c673", @ANYRES32=0xffffffffffffffff, @ANYBLOB="00008115486a45ffd62e66696c653000"]) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xc714, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x80080, 0x0) readlinkat(r1, &(0x7f0000000180)='./file0\x00', &(0x7f0000000380)=""/137, 0x89) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}]}) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) fchmodat(r0, &(0x7f00000000c0)='./file0\x00', 0x41) setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300), &(0x7f0000000440), 0x2, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f00000004c0), 0x200100, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x484301, 0x0) mq_open(&(0x7f0000000640)='\x00G\xcd\xf3\x00\x00\x00\x80\x00\x00\x1f\xa3\x00\x00\xaa\x16\xb0\xc8\xc5\x94\xd5\x18Y\x92\xdd\xcb\x905\x9dmP/\b\xecN{\x9eX\xb1\xa8\xf9\xa3\x8apz\xefC`\xf5b\x94gz2\\\xd5\xff\xebJ\xe7\'\xf8\xea\x80\xaa1t\xce\xd9\x93\r\xa4H\xfe?\t\x06\xdb+\xbf', 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000000aa40)={0x0, 0x0, "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", "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"}) renameat(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', r1, &(0x7f0000000500)='./file0\x00') pipe2(&(0x7f0000000580), 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000200)={0x4, 0x8, 0x20, 0x8, 0xe0a}) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x2004c0c0}, 0x4c040) 12:10:17 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xc, &(0x7f0000000100)={0x5, 0xfffffffffffffffd}, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xffffffff000) [ 1455.198021] audit: type=1326 audit(1751717417.067:1321): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12132 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1455.205381] FAULT_INJECTION: forcing a failure. [ 1455.205381] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1455.208150] CPU: 1 PID: 12145 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 1455.209606] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1455.211366] Call Trace: [ 1455.211929] dump_stack+0x107/0x167 [ 1455.212706] should_fail.cold+0x5/0xa [ 1455.213524] __alloc_pages_nodemask+0x182/0x600 [ 1455.214523] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1455.215667] ? trace_hardirqs_on+0x5b/0x180 [ 1455.216582] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 1455.217855] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1455.219047] alloc_pages_current+0x187/0x280 [ 1455.219987] push_pipe+0x2b5/0x6d0 [ 1455.220748] iov_iter_zero+0x418/0xef0 [ 1455.221579] ? ext4_iomap_begin+0x1a0/0x700 [ 1455.222504] ? iov_iter_copy_from_user_atomic+0xdb0/0xdb0 [ 1455.223678] ? ext4_iomap_begin_report+0x5a0/0x5a0 [ 1455.224734] iomap_dio_actor+0x40f/0x560 [ 1455.225609] iomap_apply+0x289/0x810 [ 1455.226409] ? iomap_dio_rw+0x90/0x90 [ 1455.227233] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 1455.228467] ? delete_from_page_cache_batch+0xa30/0xa30 [ 1455.229606] ? mark_held_locks+0x9e/0xe0 [ 1455.230490] ? filemap_check_errors+0xa5/0x150 [ 1455.231467] __iomap_dio_rw+0x6cd/0x1110 [ 1455.232322] ? iomap_dio_rw+0x90/0x90 [ 1455.233148] ? iomap_dio_bio_actor+0xef0/0xef0 [ 1455.234132] ? down_read+0x10f/0x430 [ 1455.234924] ? lock_chain_count+0x20/0x20 [ 1455.235798] ? down_write+0x160/0x160 [ 1455.236609] iomap_dio_rw+0x31/0x90 [ 1455.237386] ext4_file_read_iter+0x2c7/0x4c0 [ 1455.238332] generic_file_splice_read+0x455/0x6d0 [ 1455.239348] ? pipe_to_user+0x170/0x170 [ 1455.240200] ? fsnotify_perm.part.0+0x22d/0x620 [ 1455.241190] ? security_file_permission+0xb1/0xe0 [ 1455.242228] ? pipe_to_user+0x170/0x170 [ 1455.243347] do_splice_to+0x10e/0x160 [ 1455.244158] splice_direct_to_actor+0x2fe/0x980 [ 1455.245151] ? pipe_to_sendpage+0x380/0x380 [ 1455.246087] ? do_splice_to+0x160/0x160 [ 1455.246929] ? security_file_permission+0xb1/0xe0 [ 1455.247953] do_splice_direct+0x1c4/0x290 [ 1455.248830] ? splice_direct_to_actor+0x980/0x980 [ 1455.249846] ? avc_policy_seqno+0x9/0x70 [ 1455.250729] ? security_file_permission+0xb1/0xe0 [ 1455.251765] do_sendfile+0x553/0x11e0 [ 1455.252580] ? do_pwritev+0x270/0x270 [ 1455.253390] ? wait_for_completion_io+0x270/0x270 [ 1455.254414] ? rcu_read_lock_any_held+0x75/0xa0 [ 1455.255399] ? vfs_write+0x354/0xb10 [ 1455.256198] __x64_sys_sendfile64+0x1d1/0x210 [ 1455.257148] ? __ia32_sys_sendfile+0x220/0x220 [ 1455.258123] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1455.259230] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1455.260317] do_syscall_64+0x33/0x40 [ 1455.261101] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1455.262190] RIP: 0033:0x7efcccb57b19 [ 1455.262982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1455.266850] RSP: 002b:00007efcca0cd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1455.268454] RAX: ffffffffffffffda RBX: 00007efcccc6af60 RCX: 00007efcccb57b19 [ 1455.269967] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1455.271465] RBP: 00007efcca0cd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1455.272958] R10: 00000ffffffff000 R11: 0000000000000246 R12: 0000000000000002 [ 1455.274464] R13: 00007ffdb544bb5f R14: 00007efcca0cd300 R15: 0000000000022000 [ 1455.283960] audit: type=1326 audit(1751717417.067:1322): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12132 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1455.292360] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1455.298484] audit: type=1326 audit(1751717417.067:1323): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12132 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1455.312125] audit: type=1326 audit(1751717417.067:1324): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12132 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1455.328648] audit: type=1326 audit(1751717417.067:1325): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12132 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1455.331450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1455.335011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1455.337416] audit: type=1326 audit(1751717417.151:1326): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12132 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1455.340121] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1455.350132] audit: type=1326 audit(1751717417.151:1327): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12132 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1455.365662] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1455.367258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1455.369176] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:10:32 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xffffffff000) (fail_nth: 15) 12:10:32 executing program 4: perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, @perf_config_ext={0x6, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) 12:10:32 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x144) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x155) ioctl$BLKTRACESETUP(r0, 0x1277, &(0x7f0000000540)={'\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r2 = fcntl$dupfd(r1, 0x406, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) 12:10:32 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)=0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001700)=ANY=[@ANYBLOB="010000009bd77e7d3db3c295", @ANYRES32=r2, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c652fe1451d4e7b754bc7f05f0ff404807bf64d176a29993195992c14f39ee8328796f81d1886f6cb48f1ed71a941835b5840190114208ef9dda4756eab00fcd38d0a302906ffc3e8f25260ef7b4e28db855ed9e895bd4b0fbdedef955a9ddf4161dc9347ef97623a3ebf9ca8933a81653dd955d769a92740fbed0519a0fe8fb2bb1420fa5a24997c0cf4682cd464c3bcd44c267b10cfd7565652376257be8c2ef9d94e9ad1d44011543b4d0e2c77577a1157a58a7edab4a0981d3549776f00"/210]) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x4827d9d3570e76e1}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb62) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400ffbd0000"], 0x14}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup(r4) r5 = dup2(r1, r3) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x8010, r5, 0x10000000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@private, @in=@initdev}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000280)=0xe8) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 12:10:32 executing program 6: perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x16020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000001540)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[], 0x30}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x8, 0x6000, 0x1, {0x0, r3}}, 0x39) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x1d}, 0x80000001) r6 = signalfd(0xffffffffffffffff, &(0x7f0000001500), 0x8) r7 = accept(r6, 0x0, &(0x7f0000000380)) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) r8 = socket$inet(0x2, 0x1, 0x0) dup3(r8, r4, 0x0) io_uring_enter(r0, 0x3491, 0x0, 0x0, 0x0, 0x0) 12:10:32 executing program 7: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000018c0)=ANY=[@ANYBLOB="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"/368], 0x24}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000dc0)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000008c0)={r2, 0x5, 0x80000001}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="080500988400014637b5e6a174b7b2b317b4044a94da343dd489e684a04f4ca90665864272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab7ea7e76402b517c198dc7ffbdbb38ab65f84f5242824efb291f523ece2d8e79434f9fe77da5ead57c5f16fed9a43b14e466358a6b4c3a1a8361e8199db7e4116e6031e72ada1c25a85ea221f56", @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) shutdown(r3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0x50, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x2e}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x674}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xd69}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xfffd}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x50}}, 0x40) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 12:10:32 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xc, &(0x7f0000000100)={0x5, 0xfffffffffffffffd}, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xffffffff000) 12:10:32 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fork() tkill(r0, 0x26) waitid(0xfffffffe, 0x0, 0x0, 0x4, 0x0) [ 1471.082560] audit: type=1326 audit(1751717432.969:1328): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12267 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1471.089142] audit: type=1326 audit(1751717432.975:1329): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12267 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=57 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1471.092779] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1471.113743] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1471.117672] FAULT_INJECTION: forcing a failure. [ 1471.117672] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1471.120360] CPU: 1 PID: 12271 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 1471.121846] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1471.123629] Call Trace: [ 1471.124200] dump_stack+0x107/0x167 [ 1471.124983] should_fail.cold+0x5/0xa [ 1471.125809] __alloc_pages_nodemask+0x182/0x600 [ 1471.126818] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 1471.128099] ? lock_acquire+0x197/0x470 [ 1471.128948] ? find_held_lock+0x2c/0x110 [ 1471.129826] ? jbd2_transaction_committed+0x111/0x150 [ 1471.130946] ? lock_downgrade+0x6d0/0x6d0 [ 1471.131835] ? ext4_map_blocks+0x87c/0x1910 [ 1471.132748] alloc_pages_current+0x187/0x280 [ 1471.133681] push_pipe+0x2b5/0x6d0 [ 1471.134448] iov_iter_zero+0x418/0xef0 [ 1471.135274] ? ext4_iomap_begin+0x1a0/0x700 [ 1471.136184] ? iov_iter_copy_from_user_atomic+0xdb0/0xdb0 [ 1471.137342] ? ext4_iomap_begin_report+0x5a0/0x5a0 [ 1471.138388] iomap_dio_actor+0x40f/0x560 [ 1471.139253] iomap_apply+0x289/0x810 [ 1471.140038] ? iomap_dio_rw+0x90/0x90 [ 1471.140841] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 1471.142070] ? delete_from_page_cache_batch+0xa30/0xa30 [ 1471.143193] ? mark_held_locks+0x9e/0xe0 [ 1471.144066] ? filemap_check_errors+0xa5/0x150 [ 1471.145031] __iomap_dio_rw+0x6cd/0x1110 [ 1471.145881] ? iomap_dio_rw+0x90/0x90 [ 1471.146710] ? iomap_dio_bio_actor+0xef0/0xef0 [ 1471.147685] ? down_read+0x10f/0x430 [ 1471.148845] ? lock_chain_count+0x20/0x20 [ 1471.149737] ? down_write+0x160/0x160 [ 1471.150573] iomap_dio_rw+0x31/0x90 [ 1471.151351] ext4_file_read_iter+0x2c7/0x4c0 [ 1471.152295] generic_file_splice_read+0x455/0x6d0 [ 1471.153333] ? pipe_to_user+0x170/0x170 [ 1471.154204] ? fsnotify_perm.part.0+0x22d/0x620 [ 1471.155201] ? security_file_permission+0xb1/0xe0 [ 1471.156235] ? pipe_to_user+0x170/0x170 [ 1471.157093] do_splice_to+0x10e/0x160 [ 1471.157911] splice_direct_to_actor+0x2fe/0x980 [ 1471.158922] ? pipe_to_sendpage+0x380/0x380 [ 1471.159847] ? do_splice_to+0x160/0x160 [ 1471.160694] ? security_file_permission+0xb1/0xe0 [ 1471.161746] do_splice_direct+0x1c4/0x290 [ 1471.162639] ? splice_direct_to_actor+0x980/0x980 [ 1471.163666] ? avc_policy_seqno+0x9/0x70 [ 1471.164540] ? security_file_permission+0xb1/0xe0 [ 1471.165582] do_sendfile+0x553/0x11e0 [ 1471.166420] ? do_pwritev+0x270/0x270 [ 1471.167238] ? wait_for_completion_io+0x270/0x270 [ 1471.168273] ? rcu_read_lock_any_held+0x75/0xa0 [ 1471.169266] ? vfs_write+0x354/0xb10 [ 1471.170078] __x64_sys_sendfile64+0x1d1/0x210 [ 1471.171038] ? __ia32_sys_sendfile+0x220/0x220 [ 1471.172020] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1471.173144] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1471.174257] do_syscall_64+0x33/0x40 [ 1471.175058] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1471.176154] RIP: 0033:0x7efcccb57b19 [ 1471.176945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1471.180878] RSP: 002b:00007efcca0cd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1471.182507] RAX: ffffffffffffffda RBX: 00007efcccc6af60 RCX: 00007efcccb57b19 [ 1471.184025] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1471.185540] RBP: 00007efcca0cd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1471.187066] R10: 00000ffffffff000 R11: 0000000000000246 R12: 0000000000000002 [ 1471.188583] R13: 00007ffdb544bb5f R14: 00007efcca0cd300 R15: 0000000000022000 [ 1471.211220] audit: type=1326 audit(1751717433.097:1330): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12267 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1471.216565] audit: type=1326 audit(1751717433.098:1331): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12267 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1471.229508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1471.231165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1471.232905] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1471.237708] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1471.239783] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 12:10:33 executing program 4: r0 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000000)='./file0/file1\x00', 0x20) open(&(0x7f00000001c0)='./file0/file1\x00', 0x40040, 0x0) [ 1471.253279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:10:33 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r0, 0x1277, &(0x7f0000000540)={'\x00', 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff}) [ 1471.269678] audit: type=1326 audit(1751717433.106:1332): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12267 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1471.295930] audit: type=1326 audit(1751717433.106:1333): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12267 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1471.322782] audit: type=1326 audit(1751717433.107:1334): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12267 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 12:10:33 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)=0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001700)=ANY=[@ANYRES32, @ANYRES32=r2, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c652fe1451d4e7b754bc7f05f0ff404807bf64d176a29993195992c14f39ee8328796f81d1886f6cb48f1ed71a941835b5840190114208ef9dda4756eab00fcd38d0a302906ffc3e8f25260ef7b4e28db855ed9e895bd4b0fbdedef955a9ddf4161dc9347ef97623a3ebf9ca8933a81653dd955d769a92740fbed0519a0fe8fb2bb1420fa5a24997c0cf4682cd464c3bcd44c267b10cfd7565652376257be8c2ef9d94e9ad1d44011543b4d0e2c77577a1157a58a7edab4a0981d3549776f00"/210]) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x4827d9d3570e76e1}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb62) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400ffbd0000"], 0x14}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup(r4) r5 = dup2(r1, r3) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x8010, r5, 0x10000000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@private, @in=@initdev}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000280)=0xe8) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 12:10:33 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fork() tkill(r0, 0x26) waitid(0x100000000000000, 0x0, 0x0, 0x4, 0x0) 12:10:33 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xc, &(0x7f0000000100)={0x5, 0xfffffffffffffffd}, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xffffffff000) [ 1471.361473] audit: type=1326 audit(1751717433.117:1336): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12280 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1471.387600] audit: type=1326 audit(1751717433.117:1337): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12280 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1471.394144] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 12:10:33 executing program 7: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000018c0)=ANY=[@ANYBLOB="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"/368], 0x24}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000dc0)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000008c0)={r2, 0x5, 0x80000001}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="080500988400014637b5e6a174b7b2b317b4044a94da343dd489e684a04f4ca90665864272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab7ea7e76402b517c198dc7ffbdbb38ab65f84f5242824efb291f523ece2d8e79434f9fe77da5ead57c5f16fed9a43b14e466358a6b4c3a1a8361e8199db7e4116e6031e72ada1c25a85ea221f56", @ANYRES16, @ANYBLOB="04002cbd7000fddbdf2575000000c401f08067000b00677cfd4589c7a40e1aae6b18247eb36f74f8f6793b7df9ae3ca9cfb2f5e87ed1ff361592201a1151eabf57ad6fd1950cd215131f67634030aa5f484986ad830a6243bac401c3ee44bff7cea60e881d5f9b616582cf28ec620ccd97d4ceb48c6727530f00050001000100000005000f004000000008000a000000000005000f000400000038010c80050003000300000003010200a207624e07c5690d555d459080990de6741a392aa42eff746330a20bec78fd393092b5f99f54b2a9f6dadb55db3c0846814e79eb43bf7bcd6295c96e7ca16288a8b27c5a225a6d718ad49f0366f969983400ba504c865cca04e4fa00a4b246fa618936f70fe77c1c3e550a5d12d4a9108e7e4216bc693107c3bd4c06e98ec9399de0e98cf205057cbbf688d8a13dc55472fc31954b846e29dbd7d8889b34ead6c83c9b533b666abd65490f2a7e693d55d91f24d5078eb3d34940c02ea1125e7176e254c6bd5531ed067817f0b3278e3dc492571b7da828e728a6fa55742efa33f430739c320b794841adba4c2875044dce9c8959eebe4a5b52d68f9868719f00280004800a000600ffffffffffff00000a000600ffffffffffff00000a000600ffffffffffff00000c01f0800a000200ee90b393fc10000046000b005cbb9f225903f92e0cffa77bd5369da32f70909f5950f26e59525d4d3c41b9e512f4a5d3b7aaaf8a0e03f2aa73274b24a04b4a689bf05844d0d2ad278696b14fb4c50000b4000d80af0000001263800a6541e18dae533feb73677b5c9d5da0ee4d7366d47dd6fa0b14ca33d3433171a533a29930fb5e0d9ff2ca710ab0c8aa4b331d58b4a7b3cac9c9b4ef9e7cdb1d3d6da7f0877a5c3ce7ff9bf9e936b1bcbe732bd9037f9090bfdee1d3e45c7b700e6aefa488eb013b27cd7291a7b927dc10e794490c85dff0cb49a1dd13066b619ace5d6bf763b6858bf07eeb0f5514c3ce6c90d8457d79fcd2a3756ccd66b5194a5c69358e1199219e40ffdd6771943cb3fe33f442ae2ff2002c01f080050003000600000005000300020000000a000200957ccca020ad0000e4000b0049a0db966a0311d932607f2a479e651b881a56f4da7d14bde06c48822b0d353198bb85750dc9f0cca70174b813fe94ea80477bcf9dd6b03b9186edb85c476d8762dc273e83aaee35def167cc1c8faffc0e86fa311d66813cbea7e234d79e9d3acd30b5ae5a264e9576efabc94efd7a18b93eddabd9b046d12df487392f1217b77f05bd72f95130a2bda683b7a64c3d6477e3681d83c5e45e8fdae553114b304417851d9687ab3b9c6c7e91af7744d120000000332c31b35f4358643e4137a9e6b264a14e04605648b50e27e3bb5cbbdaac70655fdff371ece3e08885f0da8d700a000800080211000000000005000100000000000a000800080211000000000005000300c9000000f800f08008000a000100008004000500050010007f0000000a0002005a9cbd08ca8e000014000c800500030008000000050003005e000000c0000b003a3801c2eefaea9df8f27b808f751948873b3fa40dd675c2f1b45ab2dbcdf1903fb052565c23c23d861899509fb26a1f672416325f004d2fdd903c5fa86b4bf1e39074929e71f3a466d345a8e660cd8d401a4772051ab211e24ede74314ef8b7a2c04c8a87b4e5603f7592bc89521d454d3528dce3959d8613c413eafce02151dc1f76a1ace92831610ea0894d9f59407f66cbe556e636be5a3d01253ec1c755495e5196efdf7f155cba102e"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) shutdown(r3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0x50, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x2e}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x674}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xd69}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xfffd}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x50}}, 0x40) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1471.417632] audit: type=1326 audit(1751717433.108:1335): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12267 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 12:10:33 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000000)='\x00', 0x0) ioctl$BLKTRACESETUP(r0, 0x1277, &(0x7f0000000540)) [ 1471.443582] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1471.445318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1471.447065] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1471.468591] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. 12:10:33 executing program 4: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)=0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001700)=ANY=[@ANYBLOB="010000009bd77e7d3db3c295", @ANYRES32=r2, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c652fe1451d4e7b754bc7f05f0ff404807bf64d176a29993195992c14f39ee8328796f81d1886f6cb48f1ed71a941835b5840190114208ef9dda4756eab00fcd38d0a302906ffc3e8f25260ef7b4e28db855ed9e895bd4b0fbdedef955a9ddf4161dc9347ef97623a3ebf9ca8933a81653dd955d769a92740fbed0519a0fe8fb2bb1420fa5a24997c0cf4682cd464c3bcd44c267b10cfd7565652376257be8c2ef9d94e9ad1d44011543b4d0e2c77577a1157a58a7edab4a0981d3549776f00"/210]) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x4827d9d3570e76e1}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb62) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400ffbd0000"], 0x14}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup(r4) r5 = dup2(r1, r3) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x8010, r5, 0x10000000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@private, @in=@initdev}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000280)=0xe8) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1471.565328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1471.567013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1471.568908] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1471.624219] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1471.669640] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1471.671439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1471.676310] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:10:48 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_setup(0x535, &(0x7f0000000500), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff2000/0xa000)=nil, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0x8, 0x81, 0x3f, 0xfff}, {0x5, 0x2, 0x3f, 0x40}, {0x1, 0x81, 0x5, 0x3}, {0x1, 0x3f, 0x80, 0xb1a}, {0x2, 0x1, 0xd5, 0x101}, {0x1, 0x6, 0x9, 0x9}]}, 0x10) syz_io_uring_setup(0x3920, &(0x7f0000000480)={0x0, 0x8ff9}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) syz_mount_image$vfat(0x0, 0x0, 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000002c0)='~', 0x1}], 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 12:10:48 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fork() tkill(r0, 0x26) waitid(0x200000000000000, 0x0, 0x0, 0x4, 0x0) 12:10:48 executing program 7: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000018c0)=ANY=[@ANYBLOB="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"/368], 0x24}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000dc0)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000008c0)={r2, 0x5, 0x80000001}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="080500988400014637b5e6a174b7b2b317b4044a94da343dd489e684a04f4ca90665864272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab7ea7e76402b517c198dc7ffbdbb38ab65f84f5242824efb291f523ece2d8e79434f9fe77da5ead57c5f16fed9a43b14e466358a6b4c3a1a8361e8199db7e4116e6031e72ada1c25a85ea221f56", @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) shutdown(r3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0x50, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x2e}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x674}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xd69}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xfffd}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x50}}, 0x40) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 12:10:48 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r0, 0x1277, &(0x7f0000000540)={'\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) creat(&(0x7f0000000000)='./file0\x00', 0x48) 12:10:48 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xffffffff000) (fail_nth: 16) [ 1486.995519] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1487.008309] kauditd_printk_skb: 20 callbacks suppressed [ 1487.008320] audit: type=1326 audit(1751717448.891:1358): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12311 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1487.012281] audit: type=1326 audit(1751717448.895:1359): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12311 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=57 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1487.023458] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1487.044758] FAULT_INJECTION: forcing a failure. [ 1487.044758] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1487.047807] CPU: 1 PID: 12324 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 1487.049441] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1487.051440] Call Trace: [ 1487.052085] dump_stack+0x107/0x167 [ 1487.052955] should_fail.cold+0x5/0xa [ 1487.053877] __alloc_pages_nodemask+0x182/0x600 [ 1487.054993] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 1487.056440] ? lock_acquire+0x197/0x470 [ 1487.057384] ? find_held_lock+0x2c/0x110 [ 1487.058393] ? jbd2_transaction_committed+0x111/0x150 12:10:48 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xc, &(0x7f0000000100)={0x5, 0xfffffffffffffffd}, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xffffffff000) 12:10:48 executing program 6: r0 = semget$private(0x0, 0x4, 0x100) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040)=[{0x0, 0x4, 0x82b4d8da1ae7c66c}], 0x1) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000080)=""/99) semctl$SEM_INFO(r0, 0x3, 0x13, &(0x7f0000000000)=""/35) unshare(0x48020200) 12:10:48 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)=0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001700)=ANY=[@ANYRES32, @ANYRES32=r2, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c652fe1451d4e7b754bc7f05f0ff404807bf64d176a29993195992c14f39ee8328796f81d1886f6cb48f1ed71a941835b5840190114208ef9dda4756eab00fcd38d0a302906ffc3e8f25260ef7b4e28db855ed9e895bd4b0fbdedef955a9ddf4161dc9347ef97623a3ebf9ca8933a81653dd955d769a92740fbed0519a0fe8fb2bb1420fa5a24997c0cf4682cd464c3bcd44c267b10cfd7565652376257be8c2ef9d94e9ad1d44011543b4d0e2c77577a1157a58a7edab4a0981d3549776f00"/210]) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x4827d9d3570e76e1}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb62) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400ffbd0000"], 0x14}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup(r4) r5 = dup2(r1, r3) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x8010, r5, 0x10000000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@private, @in=@initdev}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000280)=0xe8) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1487.059614] ? lock_downgrade+0x6d0/0x6d0 [ 1487.060907] ? ext4_map_blocks+0x87c/0x1910 [ 1487.062014] alloc_pages_current+0x187/0x280 [ 1487.063178] push_pipe+0x2b5/0x6d0 [ 1487.064103] iov_iter_zero+0x418/0xef0 [ 1487.064645] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1487.065115] ? ext4_iomap_begin+0x1a0/0x700 [ 1487.065144] ? iov_iter_copy_from_user_atomic+0xdb0/0xdb0 [ 1487.066109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1487.067220] ? ext4_iomap_begin_report+0x5a0/0x5a0 [ 1487.067255] iomap_dio_actor+0x40f/0x560 [ 1487.068167] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1487.069638] iomap_apply+0x289/0x810 [ 1487.069659] ? iomap_dio_rw+0x90/0x90 [ 1487.074780] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1487.074800] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1487.076337] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 1487.076369] ? delete_from_page_cache_batch+0xa30/0xa30 [ 1487.079499] ? mark_held_locks+0x9e/0xe0 [ 1487.080352] ? filemap_check_errors+0xa5/0x150 [ 1487.081309] __iomap_dio_rw+0x6cd/0x1110 [ 1487.082173] ? iomap_dio_rw+0x90/0x90 [ 1487.082999] ? iomap_dio_bio_actor+0xef0/0xef0 [ 1487.083944] ? down_read+0x10f/0x430 [ 1487.084714] ? lock_chain_count+0x20/0x20 [ 1487.085564] ? down_write+0x160/0x160 [ 1487.086371] iomap_dio_rw+0x31/0x90 [ 1487.087126] ext4_file_read_iter+0x2c7/0x4c0 [ 1487.087206] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1487.088029] generic_file_splice_read+0x455/0x6d0 [ 1487.088052] ? pipe_to_user+0x170/0x170 [ 1487.090898] ? fsnotify_perm.part.0+0x22d/0x620 [ 1487.091861] ? security_file_permission+0xb1/0xe0 [ 1487.092853] ? pipe_to_user+0x170/0x170 [ 1487.093681] do_splice_to+0x10e/0x160 [ 1487.094479] splice_direct_to_actor+0x2fe/0x980 [ 1487.095447] ? pipe_to_sendpage+0x380/0x380 [ 1487.096342] ? do_splice_to+0x160/0x160 [ 1487.097168] ? security_file_permission+0xb1/0xe0 [ 1487.098190] do_splice_direct+0x1c4/0x290 [ 1487.099050] ? splice_direct_to_actor+0x980/0x980 [ 1487.100040] ? avc_policy_seqno+0x9/0x70 [ 1487.100885] ? security_file_permission+0xb1/0xe0 [ 1487.101895] do_sendfile+0x553/0x11e0 [ 1487.102708] ? do_pwritev+0x270/0x270 [ 1487.103502] ? wait_for_completion_io+0x270/0x270 [ 1487.104494] ? rcu_read_lock_any_held+0x75/0xa0 [ 1487.105447] ? vfs_write+0x354/0xb10 [ 1487.106236] __x64_sys_sendfile64+0x1d1/0x210 [ 1487.107165] ? __ia32_sys_sendfile+0x220/0x220 [ 1487.108111] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1487.109197] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1487.110287] do_syscall_64+0x33/0x40 [ 1487.111064] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1487.112124] RIP: 0033:0x7efcccb57b19 [ 1487.112900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1487.116645] RSP: 002b:00007efcca0cd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1487.118213] RAX: ffffffffffffffda RBX: 00007efcccc6af60 RCX: 00007efcccb57b19 [ 1487.119683] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1487.121144] RBP: 00007efcca0cd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1487.122615] R10: 00000ffffffff000 R11: 0000000000000246 R12: 0000000000000002 [ 1487.124061] R13: 00007ffdb544bb5f R14: 00007efcca0cd300 R15: 0000000000022000 12:10:49 executing program 7: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000018c0)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000001bd81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c030519e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065f14982b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc00100000000000000e073ebbcea086bc8e8da27d76939786776a523785c8d9f855bdebf1edf10e03336ab01cd5cf01d1029cd73f7ed80e25303ae4adcc92c32141d362f09f0ddfd8ac96f4ac935755951deec4790aad73f2a0d0ea95e61d823c36e79179300"/369], 0x24}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000dc0)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000008c0)={r2, 0x5, 0x80000001}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="080500988400014637b5e6a174b7b2b317b4044a94da343dd489e684a04f4ca90665864272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab7ea7e76402b517c198dc7ffbdbb38ab65f84f5242824efb291f523ece2d8e79434f9fe77da5ead57c5f16fed9a43b14e466358a6b4c3a1a8361e8199db7e4116e6031e72ada1c25a85ea221f56", @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) shutdown(r3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0x50, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x2e}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x674}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xd69}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xfffd}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x50}}, 0x40) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 12:10:49 executing program 4: ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000300)) pipe(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x800}, 0x0, 0x0, 0x1002, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @loopback}, {0x2, 0x0, @broadcast}, 0xa0}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f00000003c0)) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) creat(&(0x7f0000000240)='./file0\x00', 0x49) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000001700)={0x0, 0xffffffffffffffff, 0x6d36, 0x7, 0x4, 0x8}) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x0, @private=0xa010102}}, 0x0, 0x0, 0x4f, 0x0, "3c1c2fd629c4af55a8680f7a892e0865c7fbba0cdfa184016bc00618cdb5732d900802764f98b1af0cd43f34e89ab87a13a460acbb4433cb8a7aaa5797c2f5b5cc15058fbbef4c13daa3094bf3e22ec6"}, 0xd8) r1 = syz_io_uring_setup(0x37fe, &(0x7f0000000280)={0x0, 0x18d6, 0x4, 0x50001, 0x36e}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000340)) fcntl$setlease(r1, 0x400, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4) sendmmsg(r0, &(0x7f0000003bc0), 0x0, 0x20040080) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000000c0)={0x0, 0xfffefffffffffffd}) 12:10:49 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)=0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001700)=ANY=[@ANYRES32, @ANYRES32=r2, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c652fe1451d4e7b754bc7f05f0ff404807bf64d176a29993195992c14f39ee8328796f81d1886f6cb48f1ed71a941835b5840190114208ef9dda4756eab00fcd38d0a302906ffc3e8f25260ef7b4e28db855ed9e895bd4b0fbdedef955a9ddf4161dc9347ef97623a3ebf9ca8933a81653dd955d769a92740fbed0519a0fe8fb2bb1420fa5a24997c0cf4682cd464c3bcd44c267b10cfd7565652376257be8c2ef9d94e9ad1d44011543b4d0e2c77577a1157a58a7edab4a0981d3549776f00"/210]) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x4827d9d3570e76e1}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb62) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400ffbd0000"], 0x14}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup(r4) r5 = dup2(r1, r3) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x8010, r5, 0x10000000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@private, @in=@initdev}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000280)=0xe8) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 12:10:49 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'os2.', '!-\x00'}) ioctl$BLKTRACESETUP(r0, 0x1277, &(0x7f0000000540)={'\x00', 0x0, 0xd6d4, 0x0, 0x0, 0x80000001, 0xffffffffffffffff}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="54000000230000032abd7000fedbdf25000000000c001c00", @ANYRES32=0x0, @ANYBLOB="150000000c001c00", @ANYRES32=0x0, @ANYBLOB="01000000080016009467ffff150008001100080001070900ea446c73b20620348100000008000b0008000000"], 0x54}, 0x1, 0x0, 0x0, 0x20008802}, 0x20000000) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000001400)=ANY=[@ANYBLOB="580100001a000100fdffffff00000000fc020000000000000000000000000001ac1414bb000000000000000000000000fffd0000000000030000000000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000a300000000000033000000ac1414330000000000000000000000000000000000000000fcffffffffffffff060000000000000000000000000000000000000000040200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000025bd70000000000000000080"], 0x158}}, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, &(0x7f0000000080)) [ 1487.173234] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1487.174723] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1487.179680] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1487.190197] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1487.211511] audit: type=1326 audit(1751717449.098:1360): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12311 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1487.214431] audit: type=1326 audit(1751717449.098:1361): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12311 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1487.217704] audit: type=1326 audit(1751717449.102:1362): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12311 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1487.237666] audit: type=1326 audit(1751717449.117:1363): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12311 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1487.265219] audit: type=1326 audit(1751717449.117:1364): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12311 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=57 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1487.284770] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1487.284861] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1487.285702] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1487.287200] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1487.288682] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1487.294223] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:11:05 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fork() tkill(r0, 0x26) waitid(0x300000000000000, 0x0, 0x0, 0x4, 0x0) 12:11:05 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xc, &(0x7f0000000100)={0x5, 0xfffffffffffffffd}, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xffffffff000) 12:11:05 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)=0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001700)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=r2, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c652fe1451d4e7b754bc7f05f0ff404807bf64d176a29993195992c14f39ee8328796f81d1886f6cb48f1ed71a941835b5840190114208ef9dda4756eab00fcd38d0a302906ffc3e8f25260ef7b4e28db855ed9e895bd4b0fbdedef955a9ddf4161dc9347ef97623a3ebf9ca8933a81653dd955d769a92740fbed0519a0fe8fb2bb1420fa5a24997c0cf4682cd464c3bcd44c267b10cfd7565652376257be8c2ef9d94e9ad1d44011543b4d0e2c77577a1157a58a7edab4a0981d3549776f00"/210]) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x4827d9d3570e76e1}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb62) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400ffbd0000"], 0x14}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup(r4) r5 = dup2(r1, r3) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x8010, r5, 0x10000000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@private, @in=@initdev}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000280)=0xe8) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 12:11:05 executing program 7: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000018c0)=ANY=[@ANYBLOB="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"/369], 0x24}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000dc0)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000008c0)={r2, 0x5, 0x80000001}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="080500988400014637b5e6a174b7b2b317b4044a94da343dd489e684a04f4ca90665864272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab7ea7e76402b517c198dc7ffbdbb38ab65f84f5242824efb291f523ece2d8e79434f9fe77da5ead57c5f16fed9a43b14e466358a6b4c3a1a8361e8199db7e4116e6031e72ada1c25a85ea221f56", @ANYRES16, @ANYBLOB="04002cbd7000fddbdf2575000000c401f08067000b00677cfd4589c7a40e1aae6b18247eb36f74f8f6793b7df9ae3ca9cfb2f5e87ed1ff361592201a1151eabf57ad6fd1950cd215131f67634030aa5f484986ad830a6243bac401c3ee44bff7cea60e881d5f9b616582cf28ec620ccd97d4ceb48c6727530f00050001000100000005000f004000000008000a000000000005000f000400000038010c80050003000300000003010200a207624e07c5690d555d459080990de6741a392aa42eff746330a20bec78fd393092b5f99f54b2a9f6dadb55db3c0846814e79eb43bf7bcd6295c96e7ca16288a8b27c5a225a6d718ad49f0366f969983400ba504c865cca04e4fa00a4b246fa618936f70fe77c1c3e550a5d12d4a9108e7e4216bc693107c3bd4c06e98ec9399de0e98cf205057cbbf688d8a13dc55472fc31954b846e29dbd7d8889b34ead6c83c9b533b666abd65490f2a7e693d55d91f24d5078eb3d34940c02ea1125e7176e254c6bd5531ed067817f0b3278e3dc492571b7da828e728a6fa55742efa33f430739c320b794841adba4c2875044dce9c8959eebe4a5b52d68f9868719f00280004800a000600ffffffffffff00000a000600ffffffffffff00000a000600ffffffffffff00000c01f0800a000200ee90b393fc10000046000b005cbb9f225903f92e0cffa77bd5369da32f70909f5950f26e59525d4d3c41b9e512f4a5d3b7aaaf8a0e03f2aa73274b24a04b4a689bf05844d0d2ad278696b14fb4c50000b4000d80af0000001263800a6541e18dae533feb73677b5c9d5da0ee4d7366d47dd6fa0b14ca33d3433171a533a29930fb5e0d9ff2ca710ab0c8aa4b331d58b4a7b3cac9c9b4ef9e7cdb1d3d6da7f0877a5c3ce7ff9bf9e936b1bcbe732bd9037f9090bfdee1d3e45c7b700e6aefa488eb013b27cd7291a7b927dc10e794490c85dff0cb49a1dd13066b619ace5d6bf763b6858bf07eeb0f5514c3ce6c90d8457d79fcd2a3756ccd66b5194a5c69358e1199219e40ffdd6771943cb3fe33f442ae2ff2002c01f080050003000600000005000300020000000a000200957ccca020ad0000e4000b0049a0db966a0311d932607f2a479e651b881a56f4da7d14bde06c48822b0d353198bb85750dc9f0cca70174b813fe94ea80477bcf9dd6b03b9186edb85c476d8762dc273e83aaee35def167cc1c8faffc0e86fa311d66813cbea7e234d79e9d3acd30b5ae5a264e9576efabc94efd7a18b93eddabd9b046d12df487392f1217b77f05bd72f95130a2bda683b7a64c3d6477e3681d83c5e45e8fdae553114b304417851d9687ab3b9c6c7e91af7744d120000000332c31b35f4358643e4137a9e6b264a14e04605648b50e27e3bb5cbbdaac70655fdff371ece3e08885f0da8d700a000800080211000000000005000100000000000a000800080211000000000005000300c9000000f800f08008000a000100008004000500050010007f0000000a0002005a9cbd08ca8e000014000c800500030008000000050003005e000000c0000b003a3801c2eefaea9df8f27b808f751948873b3fa40dd675c2f1b45ab2dbcdf1903fb052565c23c23d861899509fb26a1f672416325f004d2fdd903c5fa86b4bf1e39074929e71f3a466d345a8e660cd8d401a4772051ab211e24ede74314ef8b7a2c04c8a87b4e5603f7592bc89521d454d3528dce3959d8613c413eafce02151dc1f76a1ace92831610ea0894d9f59407f66cbe556e636be5a3d01253ec1c755495e5196efdf7f155cba102e"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) shutdown(r3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0x50, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x2e}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x674}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xd69}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xfffd}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x50}}, 0x40) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 12:11:05 executing program 4: r0 = syz_open_dev$vcsa(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) syz_open_dev$sg(&(0x7f0000000880), 0x1ff, 0x0) fallocate(r1, 0xa, 0x0, 0x9) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0x0) r3 = pidfd_getfd(r0, r0, 0x0) ioctl$SG_GET_REQUEST_TABLE(r3, 0x2286, &(0x7f00000008c0)) writev(0xffffffffffffffff, &(0x7f0000000200), 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000140), 0x7a4, 0x200000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) writev(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000000200)="deed7b8230ed4ef502706f35627ddfe28df3f6e49344eeb2de5dc88d12b815c34e35bcfe31bb1252d2ee9e4037bcc1dda8b09f4f4479e06427169457b80026729a81631c8f9a50c0666eb8963a8ce821ae41f3eb2d36cb24a86c7827f39b9072eb41e0ad432cd1221ff716e4a1444e", 0x6f}, {&(0x7f00000000c0)="c1eeee908ecbc9c6442366bf85c5e240c47eb57d1285", 0x16}, {&(0x7f0000000180)="036beb069db4bbe71decc1155301a7df5c41f1fb4f28f6dae8c5ff945448889cac212cc76aefbc4f483b8575e0bad48064d38d1ac2c471ab31fc", 0x3a}, {&(0x7f0000000340)="3947a6", 0x3}, {&(0x7f0000000380)="78e63c0162b2fa58f101edb2b146cb8e455fe3aa3ad4556d4ef4c917d720eb7c4a127ddd1c530b8bb0dae3ee22579cfc8d71d59b74b5b28560578c155d529275aafdb2a734ca537415ff86821e51936126c177f46d28406843dafd7cd3108bce208a4efd4f58b955dda547cfad339352cf51bdb4a04208c6b5554e6b7fb07c1f6a3d5fac98bbc5", 0x87}, {&(0x7f0000000500)="5e2c9c3208b942c361f9ba2a1d23e3a9f44f1895032ac9e62f7f1914abaddc6a771ce042051922eaac64ec4e94f33429a2367e7fd2ed100ddcdaf5e1a0f23702d21ba4b2cc4a7ec57a8cfb058c5b4b87b7bd035ed60d47f45e9c6f0ea6dcf8da14ab900cfd40ed781c27e399b96052452d96719b1c72e3c7a3ae6ad83758814eb74af0ea4567c5da15bc5c17c161980aa997ea8cf2f34e5034ac201ac522dc2d7ac5713e538153add0e84d11934ed934253fd560f6bf694d740df3b6073bcf649d4fe8fda380c7a25a8976cddef40380188b5630e0327414e421b81327f62fd816686135be45f86885a35fc8a03f", 0xee}, {&(0x7f0000000440)="edf62a04543ee9eadbe57b71eb84f11f945aab5c3a8e", 0x16}, {&(0x7f0000000600)="2fc8a914aa7d5fce61ffafe89cd0b657de4d6f0cd6c106bcdc2b4e19ed171bec7e4bd0beffaf58155d18ffc7f7cb9b4cb331c774585c40378e3680f860ab8f40f7847bf1b39d708bb2de3eb56c2c076e77293b5780f4f32fe4f6f9677f32363e4ab33a77ff17d12b9032504c441e8edd16d22a482c1c0c71bad85ba137c507682c1f564adde285f24d5cd64b047996fcd949d9d6b59ab288f32c7dee4276460e95e61a5a7624b51771926a1bec426a20318996092e9408a5a3a8ee10812dbf203fef82cb3e09ac43071e851c6704a4bc3b7025cff5f132cad121", 0xda}, {&(0x7f0000000700)="58bf1ef50e8176eaf9f0ee894db108577546a2f66a54511af74f3844922791c613845f909701d14311067de6ec21073840f060a5833cbf1431ff7d1ff461d6a913c4247f1fb5b2e7d43ddacd68f96fa33c156b4438a1ae63477e0549f06ace18b47f3b8ebcf87dcaa7c8c0e70a56ea36c05827fcbc39f5e012c90dbdbb988078cd26c299944d1f0174430cc5e821c34dafb2", 0x92}], 0x9) r5 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x100000001) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r6, @ANYBLOB='\x00e1\x00']) newfstatat(0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', &(0x7f00000002c0), 0x800) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r2, 0x0) 12:11:05 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xffffffff000) (fail_nth: 17) 12:11:05 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x8) pwrite64(r1, &(0x7f0000000140)="afc9", 0x2, 0xffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x3ba4141e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x8, 0x0, 0x8000) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r4 = fcntl$dupfd(r3, 0x406, r3) sendmsg$inet6(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) [ 1503.340476] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. sendmsg$inet6(r4, &(0x7f0000000440)={&(0x7f0000000300)={0xa, 0x4e24, 0x4ec, @mcast1, 0x10000}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000340)="00f51635bbdf419041eee631a60bccf90717533d64090a31bd8f05adf8012a36cc6b139130fa29b1815ee43898befd2d9d60f06526face8e61abadf3f87f37aa40793ae3bb99536048fe3f251915834289ed20abc4b85952fc859988122cea640cfd62d6a099d663ec055f7609925f0c552aaccd6cded85d42e05b552b8bac69fd29bd", 0x83}], 0x1}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8080}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0xb0, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x20, 0x13, [{0x1}, {}, {0x6}, {0x12}, {0x4, 0x1}, {0x4}, {0x16}, {0x9, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {0x1b}, {0x24}, {0x12, 0x1}, {0x60, 0x1}, {0x18}, {0xc}, {0xc}, {0xb}, {0x5}, {0x60, 0x1}, {0x16}, {0x12, 0x1}, {0x36, 0x1}, {0x3, 0x1}, {0x60}, {0x2}, {0x24, 0x1}]}, @NL80211_ATTR_STA_WME={0x3c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x9}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x20}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x6}, @NL80211_STA_WME_MAX_SP={0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x81}]}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xe, 0x13, [{0x1b}, {0xc, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x12}, {0x24}, {0x42, 0x1}, {0xb}, {0x6c, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4}, 0x8040) ftruncate(r1, 0x91) [ 1503.359743] audit: type=1326 audit(1751717465.246:1365): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12355 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1503.364945] audit: type=1326 audit(1751717465.246:1366): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12355 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=57 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1503.381546] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1503.385546] FAULT_INJECTION: forcing a failure. [ 1503.385546] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1503.388497] CPU: 0 PID: 12361 Comm: syz-executor.0 Not tainted 5.10.239 #1 12:11:05 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = geteuid() stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) geteuid() setreuid(r1, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000100)={{}, {0x1, 0x2}, [{0x2, 0x7, r0}, {0x2, 0x1, 0xffffffffffffffff}, {0x2, 0x4}, {0x2, 0x4, 0xee01}, {0x2, 0x5, r1}], {0x4, 0x6}, [{0x8, 0x8, 0xffffffffffffffff}], {0x10, 0x3}, {0x20, 0x5}}, 0x54, 0x2) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) r4 = getegid() r5 = fork() tkill(r5, 0x26) waitid(0x1, r5, &(0x7f0000000100), 0x4, &(0x7f0000000500)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000002c0)={{0x1, r0, r2, r3, r4, 0x5, 0x6}, 0xfffeffff, 0x3, 0x3, 0x7ff, r5, 0xffffffffffffffff, 0x4}) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r6, 0x1277, &(0x7f0000000540)={'\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x2000, @fd_index=0x9, 0x117c, 0x1, 0x4, 0xd, 0x0, {0x0, r7}}, 0xfffffffe) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x2, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1, {0x0, r7}}, 0x95a) [ 1503.390152] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1503.392333] Call Trace: [ 1503.392935] dump_stack+0x107/0x167 [ 1503.393761] should_fail.cold+0x5/0xa [ 1503.394643] __alloc_pages_nodemask+0x182/0x600 [ 1503.395701] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 1503.397056] ? lock_acquire+0x197/0x470 [ 1503.397949] ? find_held_lock+0x2c/0x110 [ 1503.398869] ? jbd2_transaction_committed+0x111/0x150 [ 1503.400018] ? lock_downgrade+0x6d0/0x6d0 [ 1503.400489] audit: type=1326 audit(1751717465.287:1367): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12355 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1503.400948] ? ext4_map_blocks+0x87c/0x1910 [ 1503.400974] alloc_pages_current+0x187/0x280 [ 1503.400998] push_pipe+0x2b5/0x6d0 [ 1503.406791] audit: type=1326 audit(1751717465.293:1368): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12355 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1503.407189] iov_iter_zero+0x418/0xef0 [ 1503.407215] ? ext4_iomap_begin+0x1a0/0x700 [ 1503.407241] ? iov_iter_copy_from_user_atomic+0xdb0/0xdb0 [ 1503.411373] audit: type=1326 audit(1751717465.298:1369): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12364 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1503.412767] ? ext4_iomap_begin_report+0x5a0/0x5a0 [ 1503.412800] iomap_dio_actor+0x40f/0x560 [ 1503.412828] iomap_apply+0x289/0x810 [ 1503.412853] ? iomap_dio_rw+0x90/0x90 [ 1503.413875] audit: type=1326 audit(1751717465.298:1370): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12364 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1503.414599] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 1503.430149] ? delete_from_page_cache_batch+0xa30/0xa30 [ 1503.431354] ? mark_held_locks+0x9e/0xe0 [ 1503.432277] ? filemap_check_errors+0xa5/0x150 [ 1503.433312] __iomap_dio_rw+0x6cd/0x1110 [ 1503.434220] ? iomap_dio_rw+0x90/0x90 [ 1503.435110] ? iomap_dio_bio_actor+0xef0/0xef0 [ 1503.436144] ? down_read+0x10f/0x430 [ 1503.436978] ? down_write+0x160/0x160 [ 1503.437837] iomap_dio_rw+0x31/0x90 [ 1503.438666] ext4_file_read_iter+0x2c7/0x4c0 [ 1503.439657] generic_file_splice_read+0x455/0x6d0 [ 1503.440743] ? pipe_to_user+0x170/0x170 [ 1503.441643] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1503.442877] ? do_splice_to+0x8b/0x160 [ 1503.443747] ? pipe_to_user+0x170/0x170 [ 1503.444640] do_splice_to+0x10e/0x160 [ 1503.445495] splice_direct_to_actor+0x2fe/0x980 [ 1503.446554] ? pipe_to_sendpage+0x380/0x380 [ 1503.447531] ? do_splice_to+0x160/0x160 [ 1503.448421] ? security_file_permission+0xb1/0xe0 [ 1503.449527] do_splice_direct+0x1c4/0x290 [ 1503.450479] ? splice_direct_to_actor+0x980/0x980 [ 1503.451563] ? avc_policy_seqno+0x9/0x70 [ 1503.452473] ? security_file_permission+0xb1/0xe0 [ 1503.453571] do_sendfile+0x553/0x11e0 [ 1503.454451] ? do_pwritev+0x270/0x270 [ 1503.455307] ? wait_for_completion_io+0x270/0x270 [ 1503.456395] ? rcu_read_lock_any_held+0x75/0xa0 [ 1503.457438] ? vfs_write+0x354/0xb10 [ 1503.458280] __x64_sys_sendfile64+0x1d1/0x210 [ 1503.459292] ? __ia32_sys_sendfile+0x220/0x220 [ 1503.460331] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1503.461516] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1503.462693] do_syscall_64+0x33/0x40 [ 1503.463532] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1503.464688] RIP: 0033:0x7efcccb57b19 [ 1503.465524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1503.469693] RSP: 002b:00007efcca0cd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1503.471416] RAX: ffffffffffffffda RBX: 00007efcccc6af60 RCX: 00007efcccb57b19 [ 1503.473023] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1503.474638] RBP: 00007efcca0cd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1503.476247] R10: 00000ffffffff000 R11: 0000000000000246 R12: 0000000000000002 [ 1503.477854] R13: 00007ffdb544bb5f R14: 00007efcca0cd300 R15: 0000000000022000 [ 1503.521334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1503.523203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1503.526151] audit: type=1326 audit(1751717465.379:1371): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12355 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1503.528759] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1503.534496] audit: type=1326 audit(1751717465.379:1372): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12355 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1503.541382] audit: type=1326 audit(1751717465.379:1373): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12355 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1503.566732] audit: type=1326 audit(1751717465.389:1374): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12355 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1503.567766] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1503.573467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1503.582762] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:11:05 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)=0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001700)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=r2, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c652fe1451d4e7b754bc7f05f0ff404807bf64d176a29993195992c14f39ee8328796f81d1886f6cb48f1ed71a941835b5840190114208ef9dda4756eab00fcd38d0a302906ffc3e8f25260ef7b4e28db855ed9e895bd4b0fbdedef955a9ddf4161dc9347ef97623a3ebf9ca8933a81653dd955d769a92740fbed0519a0fe8fb2bb1420fa5a24997c0cf4682cd464c3bcd44c267b10cfd7565652376257be8c2ef9d94e9ad1d44011543b4d0e2c77577a1157a58a7edab4a0981d3549776f00"/210]) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x4827d9d3570e76e1}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb62) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400ffbd0000"], 0x14}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup(r4) r5 = dup2(r1, r3) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x8010, r5, 0x10000000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@private, @in=@initdev}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000280)=0xe8) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 12:11:05 executing program 7: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000018c0)=ANY=[@ANYBLOB="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"/369], 0x24}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000dc0)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000008c0)={r2, 0x5, 0x80000001}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="080500988400014637b5e6a174b7b2b317b4044a94da343dd489e684a04f4ca90665864272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab7ea7e76402b517c198dc7ffbdbb38ab65f84f5242824efb291f523ece2d8e79434f9fe77da5ead57c5f16fed9a43b14e466358a6b4c3a1a8361e8199db7e4116e6031e72ada1c25a85ea221f56", @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) shutdown(r3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0x50, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x2e}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x674}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xd69}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xfffd}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x50}}, 0x40) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 12:11:05 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xc, &(0x7f0000000100)={0x5, 0xfffffffffffffffd}, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xffffffff000) [ 1503.780565] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 12:11:05 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xffffffff000) (fail_nth: 18) [ 1503.813330] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. 12:11:05 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x98}}, 0x0) close_range(r1, r0, 0x0) fcntl$addseals(r1, 0x409, 0x8) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000440)=0x7, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd_index=0xffffffff, 0x8, &(0x7f0000000140)="ef3003e7d4d5730dd9bc0d2116cbd2ec2d4cef0397c67262d0882d05da47c1147ab3a8e1b3dfac797791d00529f0be39c7c3024d4751fcbfb4d3ec4b7b6dc1", 0xfffffffffffffcdc, 0x1e, 0x1}, 0x9) lseek(0xffffffffffffffff, 0xa5, 0x0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) r3 = add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, r2) add_key$keyring(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r2) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) request_key(&(0x7f0000000480)='dns_resolver\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000380)='\x00', r3) futimesat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000400)) r4 = add_key(&(0x7f0000000200)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, &(0x7f0000000640)="18726d0eed55eaa57fc580dc3a0b12e0a5ee08da294ac8119c4c73f93694f2a935d17a81959d084839f846dca8739131e4a9c45c6509af44529537eae3a4a4793a9a0aacfd7a75f2b566b874939829b82a35d20d1985a92c5d7ba971251e89286f64438d080e8e214a050893fd3fa27a56032a79c1d099b5108ecb2e5f36d3e7e1c749ad35c2064fa087cf6359507a36eb69853e0cdd920cbb7586aedf5a2e5a9a1a6b8d3cb6ad16918b01d07c92179dfae1ef58835b5fa4be28fbd3b3eac1c9f3cf74fbe20900c55d23902439133eecfafb2e0f", 0xd4, 0xffffffffffffffff) signalfd4(0xffffffffffffffff, &(0x7f00000002c0)={[0xe0ae]}, 0x8, 0x800) add_key(0x0, 0x0, 0x0, 0x0, r4) syz_open_procfs(0x0, 0x0) [ 1503.862003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1503.863761] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1503.865639] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1503.889058] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.6'. 12:11:05 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fork() tkill(r0, 0x26) waitid(0x400000000000000, 0x0, 0x0, 0x4, 0x0) 12:11:05 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)=0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001700)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=r2, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c652fe1451d4e7b754bc7f05f0ff404807bf64d176a29993195992c14f39ee8328796f81d1886f6cb48f1ed71a941835b5840190114208ef9dda4756eab00fcd38d0a302906ffc3e8f25260ef7b4e28db855ed9e895bd4b0fbdedef955a9ddf4161dc9347ef97623a3ebf9ca8933a81653dd955d769a92740fbed0519a0fe8fb2bb1420fa5a24997c0cf4682cd464c3bcd44c267b10cfd7565652376257be8c2ef9d94e9ad1d44011543b4d0e2c77577a1157a58a7edab4a0981d3549776f00"/210]) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x4827d9d3570e76e1}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb62) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400ffbd0000"], 0x14}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup(r4) r5 = dup2(r1, r3) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x8010, r5, 0x10000000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@private, @in=@initdev}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000280)=0xe8) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1503.929642] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1503.952815] FAULT_INJECTION: forcing a failure. [ 1503.952815] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1503.956099] CPU: 0 PID: 12488 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 1503.957724] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1503.959694] Call Trace: [ 1503.960317] dump_stack+0x107/0x167 [ 1503.961178] should_fail.cold+0x5/0xa [ 1503.962076] __alloc_pages_nodemask+0x182/0x600 [ 1503.963178] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 1503.964580] ? lock_acquire+0x197/0x470 [ 1503.965508] ? find_held_lock+0x2c/0x110 [ 1503.966474] ? jbd2_transaction_committed+0x111/0x150 [ 1503.967683] ? lock_downgrade+0x6d0/0x6d0 [ 1503.968651] ? ext4_map_blocks+0x87c/0x1910 [ 1503.969664] alloc_pages_current+0x187/0x280 [ 1503.970703] push_pipe+0x2b5/0x6d0 [ 1503.971545] iov_iter_zero+0x418/0xef0 [ 1503.972462] ? ext4_iomap_begin+0x1a0/0x700 [ 1503.973476] ? iov_iter_copy_from_user_atomic+0xdb0/0xdb0 [ 1503.974773] ? ext4_iomap_begin_report+0x5a0/0x5a0 [ 1503.975929] iomap_dio_actor+0x40f/0x560 [ 1503.976887] iomap_apply+0x289/0x810 [ 1503.977759] ? iomap_dio_rw+0x90/0x90 [ 1503.978660] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 1503.980014] ? delete_from_page_cache_batch+0xa30/0xa30 [ 1503.981254] ? mark_held_locks+0x9e/0xe0 [ 1503.982218] ? filemap_check_errors+0xa5/0x150 [ 1503.983299] __iomap_dio_rw+0x6cd/0x1110 [ 1503.984243] ? iomap_dio_rw+0x90/0x90 [ 1503.985152] ? iomap_dio_bio_actor+0xef0/0xef0 12:11:05 executing program 6: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r1) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x34}}, 0x0) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x20004010) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) ptrace$getsig(0x4202, r3, 0x3, &(0x7f00000000c0)) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000140)=""/69, &(0x7f00000001c0)=0x45) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000080)="ee", 0x1}], 0x100000000000037f) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) fcntl$dupfd(r5, 0x406, r5) setsockopt$inet6_udp_int(r5, 0x11, 0x0, &(0x7f0000000340)=0x1000, 0xffffff9c) [ 1503.986229] ? down_read+0x10f/0x430 [ 1503.987303] ? lock_chain_count+0x20/0x20 [ 1503.988269] ? down_write+0x160/0x160 [ 1503.989165] iomap_dio_rw+0x31/0x90 [ 1503.990016] ext4_file_read_iter+0x2c7/0x4c0 [ 1503.991058] generic_file_splice_read+0x455/0x6d0 [ 1503.992184] ? pipe_to_user+0x170/0x170 [ 1503.993123] ? fsnotify_perm.part.0+0x22d/0x620 [ 1503.994210] ? security_file_permission+0xb1/0xe0 [ 1503.995343] ? pipe_to_user+0x170/0x170 [ 1503.996271] do_splice_to+0x10e/0x160 [ 1503.997163] splice_direct_to_actor+0x2fe/0x980 [ 1503.998252] ? pipe_to_sendpage+0x380/0x380 [ 1503.999271] ? do_splice_to+0x160/0x160 [ 1504.000197] ? security_file_permission+0xb1/0xe0 [ 1504.001335] do_splice_direct+0x1c4/0x290 [ 1504.002307] ? splice_direct_to_actor+0x980/0x980 [ 1504.003434] ? avc_policy_seqno+0x9/0x70 [ 1504.004387] ? security_file_permission+0xb1/0xe0 [ 1504.005526] do_sendfile+0x553/0x11e0 [ 1504.006434] ? do_pwritev+0x270/0x270 [ 1504.007321] ? wait_for_completion_io+0x270/0x270 [ 1504.008451] ? rcu_read_lock_any_held+0x75/0xa0 [ 1504.009533] ? vfs_write+0x354/0xb10 [ 1504.010416] __x64_sys_sendfile64+0x1d1/0x210 [ 1504.011461] ? __ia32_sys_sendfile+0x220/0x220 [ 1504.012530] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1504.013752] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1504.014968] do_syscall_64+0x33/0x40 [ 1504.015836] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1504.017035] RIP: 0033:0x7efcccb57b19 [ 1504.017901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1504.022202] RSP: 002b:00007efcca0cd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1504.023985] RAX: ffffffffffffffda RBX: 00007efcccc6af60 RCX: 00007efcccb57b19 [ 1504.025648] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1504.027324] RBP: 00007efcca0cd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1504.029195] R10: 00000ffffffff000 R11: 0000000000000246 R12: 0000000000000002 [ 1504.030885] R13: 00007ffdb544bb5f R14: 00007efcca0cd300 R15: 0000000000022000 [ 1504.036573] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1504.038294] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1504.040186] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1504.054384] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 12:11:06 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="54000d0000000c001c32", @ANYRES32=0x0, @ANYBLOB="150000000c001c00", @ANYRES32=0x0, @ANYBLOB="01000000080016009467ffff150008001100080001070900ea446c73b20620348100000008000b0008000000"], 0x54}, 0x1, 0x0, 0x0, 0x20008802}, 0x20000000) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000001400)=ANY=[@ANYBLOB="580100001a000100fdffffff00000000fc020000000000000000000000000001ac1414bb000000000000000000000000fffd0000000000030000000000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000a300000000000033000000ac1414330000000000000000000000000000000000000000fcffffffffffffff060000000000000000000000000000000000000000040200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000025bd70000000000000000080"], 0x158}}, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000100)="d0bf3596fc9242f2c4c6b926c2de6733efa81ae8dc5f66e8af94023713454802a7b8c5072b539888c76c9948aef0eb6927f0dee33e58a9994a917ec1028c6c8eb1a85ed1a55c265e5a6ee4226db4041c6d3f635637b75a82d34de30e100ae4e96a5576c1c5440ae6886aefd559b69c1187d78d2ab21c80f3dccbb6c11bd52083cd8a74baa64e6e887d59775ac765b6b065d8df8f0879c327d19ae7a5673d64090da23d80c8acd7a54dcfcc02441740cb8d2dc42678250256440442ca0e93bffd81f17f657807f3e4fff7590b5ed6cacb441667d294", 0xd5}], 0x1) ioctl$BLKTRACESETUP(r0, 0x1277, &(0x7f0000000540)={'\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 12:11:06 executing program 7: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000018c0)=ANY=[@ANYBLOB="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"/370], 0x24}}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000dc0)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000008c0)={r2, 0x5, 0x80000001}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="080500988400014637b5e6a174b7b2b317b4044a94da343dd489e684a04f4ca90665864272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab7ea7e76402b517c198dc7ffbdbb38ab65f84f5242824efb291f523ece2d8e79434f9fe77da5ead57c5f16fed9a43b14e466358a6b4c3a1a8361e8199db7e4116e6031e72ada1c25a85ea221f56", @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) shutdown(r3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0x50, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x2e}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x674}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xd69}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xfffd}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x50}}, 0x40) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1504.165814] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1504.180869] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. 12:11:06 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xc, &(0x7f0000000100)={0x5, 0xfffffffffffffffd}, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xffffffff000) [ 1504.210269] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. 12:11:06 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) read$hidraw(r0, &(0x7f0000000000)=""/151, 0x97) ioctl$BLKTRACESETUP(r0, 0x1277, &(0x7f0000000540)={'\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) [ 1504.271356] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1504.273336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1504.282540] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1504.288347] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1504.290644] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1504.305601] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:11:06 executing program 6: syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0, 0x0) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)=@known='trusted.overlay.upper\x00', 0x0, 0x0) 12:11:06 executing program 7: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000018c0)=ANY=[@ANYBLOB="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"/370], 0x24}}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000dc0)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000008c0)={r2, 0x5, 0x80000001}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="080500988400014637b5e6a174b7b2b317b4044a94da343dd489e684a04f4ca90665864272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab7ea7e76402b517c198dc7ffbdbb38ab65f84f5242824efb291f523ece2d8e79434f9fe77da5ead57c5f16fed9a43b14e466358a6b4c3a1a8361e8199db7e4116e6031e72ada1c25a85ea221f56", @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) shutdown(r3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0x50, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x2e}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x674}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xd69}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xfffd}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x50}}, 0x40) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 12:11:06 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000002, 0x10, r1, 0x3b628000) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000d40)=ANY=[@ANYBLOB="7f454c4605070909060000000000000003000600090000008f0100000000000040000000000000002b01000000000000ffffff7fd1053800020022e480000200"/2608], 0xfffffffffffffe6c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fsetxattr$security_selinux(r2, &(0x7f0000000040), &(0x7f0000000140)='system_u:object_r:auditd_exec_t:s0\x00', 0x23, 0x2) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r2, &(0x7f0000000180)) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x8000) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000001c0)={0x8, 0xffffffe0, 0x40, 0xb160, 0x8}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0xe4, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0xd0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xcb, 0x3, "344627d9ca60441f3c67a120251617b901d8cd4a80b4eec5b3803a88fd30f0cef23a38ece689cbb12366dc737735e0138eecf8eb6a506f24e48fad56dea7bd676e0ab152fbe77ddcf2a9a2efc5cc35cfd1ab5a73fec10bcb9cededda2525b86fbfc404ce96d9c12a12431f0a0a8ee0036eaba7b6eb8b9c08e336fa0dd1f2d7207fc93e83492ae46f96266c215fbcdac0e4dc600955474ac2f115ad7a128d0882889094d89e5c3c7a22be78a578995eea8159086e2ed96a4f7c2c88a2e954827109af930232207a"}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x40054}, 0x20000001) sendfile(0xffffffffffffffff, r4, 0x0, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) dup2(r5, r3) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) 12:11:06 executing program 2: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x128) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x96200, 0x0) fcntl$lock(r2, 0x24, &(0x7f0000000140)={0x0, 0x4, 0x5, 0x100000000, 0xffffffffffffffff}) r3 = openat(r1, &(0x7f0000000040)='./file0\x00', 0x83b01, 0xc6) ioctl$BLKTRACESETUP(r0, 0x1277, &(0x7f0000000540)={'\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) r4 = syz_open_dev$rtc(&(0x7f0000000c00), 0x101, 0x8200) dup(r4) ioctl$RTC_PIE_OFF(r3, 0x7006) 12:11:06 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xffffffff000) (fail_nth: 19) [ 1504.422575] FAULT_INJECTION: forcing a failure. [ 1504.422575] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1504.424498] CPU: 1 PID: 12564 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 1504.425492] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1504.426693] Call Trace: [ 1504.427075] dump_stack+0x107/0x167 [ 1504.427596] should_fail.cold+0x5/0xa [ 1504.428147] __alloc_pages_nodemask+0x182/0x600 [ 1504.428816] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 1504.429675] ? lock_acquire+0x197/0x470 [ 1504.430243] ? find_held_lock+0x2c/0x110 [ 1504.430840] ? jbd2_transaction_committed+0x111/0x150 [ 1504.431577] ? lock_downgrade+0x6d0/0x6d0 [ 1504.432171] ? ext4_map_blocks+0x87c/0x1910 [ 1504.432794] alloc_pages_current+0x187/0x280 [ 1504.433433] push_pipe+0x2b5/0x6d0 [ 1504.433949] iov_iter_zero+0x418/0xef0 [ 1504.434518] ? ext4_iomap_begin+0x1a0/0x700 [ 1504.435139] ? iov_iter_copy_from_user_atomic+0xdb0/0xdb0 [ 1504.435930] ? ext4_iomap_begin_report+0x5a0/0x5a0 [ 1504.436645] iomap_dio_actor+0x40f/0x560 [ 1504.437235] iomap_apply+0x289/0x810 [ 1504.437771] ? iomap_dio_rw+0x90/0x90 [ 1504.438319] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 1504.439161] ? delete_from_page_cache_batch+0xa30/0xa30 [ 1504.439921] ? mark_held_locks+0x9e/0xe0 [ 1504.440511] ? filemap_check_errors+0xa5/0x150 [ 1504.441171] __iomap_dio_rw+0x6cd/0x1110 [ 1504.441751] ? iomap_dio_rw+0x90/0x90 [ 1504.442312] ? iomap_dio_bio_actor+0xef0/0xef0 [ 1504.442995] ? down_read+0x10f/0x430 [ 1504.443525] ? lock_chain_count+0x20/0x20 [ 1504.444116] ? down_write+0x160/0x160 [ 1504.444670] iomap_dio_rw+0x31/0x90 [ 1504.445195] ext4_file_read_iter+0x2c7/0x4c0 [ 1504.445830] generic_file_splice_read+0x455/0x6d0 [ 1504.446529] ? pipe_to_user+0x170/0x170 [ 1504.447106] ? fsnotify_perm.part.0+0x22d/0x620 [ 1504.447774] ? security_file_permission+0xb1/0xe0 [ 1504.448466] ? pipe_to_user+0x170/0x170 [ 1504.449037] do_splice_to+0x10e/0x160 [ 1504.449591] splice_direct_to_actor+0x2fe/0x980 [ 1504.450261] ? pipe_to_sendpage+0x380/0x380 [ 1504.450885] ? do_splice_to+0x160/0x160 [ 1504.451436] ? security_file_permission+0xb1/0xe0 [ 1504.452108] do_splice_direct+0x1c4/0x290 [ 1504.452678] ? splice_direct_to_actor+0x980/0x980 [ 1504.453343] ? avc_policy_seqno+0x9/0x70 [ 1504.453918] ? security_file_permission+0xb1/0xe0 [ 1504.454599] do_sendfile+0x553/0x11e0 [ 1504.455138] ? do_pwritev+0x270/0x270 [ 1504.455678] ? wait_for_completion_io+0x270/0x270 [ 1504.456351] ? rcu_read_lock_any_held+0x75/0xa0 [ 1504.456990] ? vfs_write+0x354/0xb10 [ 1504.457509] __x64_sys_sendfile64+0x1d1/0x210 [ 1504.458127] ? __ia32_sys_sendfile+0x220/0x220 [ 1504.458780] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1504.459520] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1504.460246] do_syscall_64+0x33/0x40 [ 1504.460765] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1504.461473] RIP: 0033:0x7efcccb57b19 [ 1504.461990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1504.464529] RSP: 002b:00007efcca0cd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1504.465597] RAX: ffffffffffffffda RBX: 00007efcccc6af60 RCX: 00007efcccb57b19 [ 1504.466603] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1504.467591] RBP: 00007efcca0cd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1504.468584] R10: 00000ffffffff000 R11: 0000000000000246 R12: 0000000000000002 [ 1504.469562] R13: 00007ffdb544bb5f R14: 00007efcca0cd300 R15: 0000000000022000 [ 1504.480423] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1504.481792] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1504.483089] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1520.368616] __nla_validate_parse: 1 callbacks suppressed [ 1520.368655] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 12:11:22 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xc, &(0x7f0000000100)={0x5, 0xfffffffffffffffd}, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xffffffff000) 12:11:22 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) stat(&(0x7f0000000080)='./file1\x00', &(0x7f0000000140)) r2 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000040)='.\x00', 0x2000003) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x100000001) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) r4 = open$dir(&(0x7f0000000200)='./file1\x00', 0x4400, 0x40) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0xe8) mount$9p_xen(&(0x7f0000000240), &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300), 0x202003, &(0x7f00000005c0)={'trans=xen,', {[{@nodevmap}, {@noextend}, {@debug={'debug', 0x3d, 0x81}}, {@access_client}, {@msize={'msize', 0x3d, 0x1f}}], [{@seclabel}, {@fowner_gt={'fowner>', r5}}]}}) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f00000000c0)='^-(*\x00', &(0x7f00000001c0)='./file1\x00', r4) r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x81, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x1c35, 0x6b1, 0x3, &(0x7f0000000340)={[0x401]}, 0x8) readv(r6, 0x0, 0x0) fcntl$setown(r6, 0x8, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40042409, 0x1) 12:11:22 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fork() tkill(r0, 0x26) waitid(0x500000000000000, 0x0, 0x0, 0x4, 0x0) 12:11:22 executing program 7: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000018c0)=ANY=[@ANYBLOB="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"/370], 0x24}}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000dc0)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000008c0)={r2, 0x5, 0x80000001}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="080500988400014637b5e6a174b7b2b317b4044a94da343dd489e684a04f4ca90665864272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab7ea7e76402b517c198dc7ffbdbb38ab65f84f5242824efb291f523ece2d8e79434f9fe77da5ead57c5f16fed9a43b14e466358a6b4c3a1a8361e8199db7e4116e6031e72ada1c25a85ea221f56", @ANYRES16, @ANYBLOB="04002cbd7000fddbdf2575000000c401f08067000b00677cfd4589c7a40e1aae6b18247eb36f74f8f6793b7df9ae3ca9cfb2f5e87ed1ff361592201a1151eabf57ad6fd1950cd215131f67634030aa5f484986ad830a6243bac401c3ee44bff7cea60e881d5f9b616582cf28ec620ccd97d4ceb48c6727530f00050001000100000005000f004000000008000a000000000005000f000400000038010c80050003000300000003010200a207624e07c5690d555d459080990de6741a392aa42eff746330a20bec78fd393092b5f99f54b2a9f6dadb55db3c0846814e79eb43bf7bcd6295c96e7ca16288a8b27c5a225a6d718ad49f0366f969983400ba504c865cca04e4fa00a4b246fa618936f70fe77c1c3e550a5d12d4a9108e7e4216bc693107c3bd4c06e98ec9399de0e98cf205057cbbf688d8a13dc55472fc31954b846e29dbd7d8889b34ead6c83c9b533b666abd65490f2a7e693d55d91f24d5078eb3d34940c02ea1125e7176e254c6bd5531ed067817f0b3278e3dc492571b7da828e728a6fa55742efa33f430739c320b794841adba4c2875044dce9c8959eebe4a5b52d68f9868719f00280004800a000600ffffffffffff00000a000600ffffffffffff00000a000600ffffffffffff00000c01f0800a000200ee90b393fc10000046000b005cbb9f225903f92e0cffa77bd5369da32f70909f5950f26e59525d4d3c41b9e512f4a5d3b7aaaf8a0e03f2aa73274b24a04b4a689bf05844d0d2ad278696b14fb4c50000b4000d80af0000001263800a6541e18dae533feb73677b5c9d5da0ee4d7366d47dd6fa0b14ca33d3433171a533a29930fb5e0d9ff2ca710ab0c8aa4b331d58b4a7b3cac9c9b4ef9e7cdb1d3d6da7f0877a5c3ce7ff9bf9e936b1bcbe732bd9037f9090bfdee1d3e45c7b700e6aefa488eb013b27cd7291a7b927dc10e794490c85dff0cb49a1dd13066b619ace5d6bf763b6858bf07eeb0f5514c3ce6c90d8457d79fcd2a3756ccd66b5194a5c69358e1199219e40ffdd6771943cb3fe33f442ae2ff2002c01f080050003000600000005000300020000000a000200957ccca020ad0000e4000b0049a0db966a0311d932607f2a479e651b881a56f4da7d14bde06c48822b0d353198bb85750dc9f0cca70174b813fe94ea80477bcf9dd6b03b9186edb85c476d8762dc273e83aaee35def167cc1c8faffc0e86fa311d66813cbea7e234d79e9d3acd30b5ae5a264e9576efabc94efd7a18b93eddabd9b046d12df487392f1217b77f05bd72f95130a2bda683b7a64c3d6477e3681d83c5e45e8fdae553114b304417851d9687ab3b9c6c7e91af7744d120000000332c31b35f4358643e4137a9e6b264a14e04605648b50e27e3bb5cbbdaac70655fdff371ece3e08885f0da8d700a000800080211000000000005000100000000000a000800080211000000000005000300c9000000f800f08008000a000100008004000500050010007f0000000a0002005a9cbd08ca8e000014000c800500030008000000050003005e000000c0000b003a3801c2eefaea9df8f27b808f751948873b3fa40dd675c2f1b45ab2dbcdf1903fb052565c23c23d861899509fb26a1f672416325f004d2fdd903c5fa86b4bf1e39074929e71f3a466d345a8e660cd8d401a4772051ab211e24ede74314ef8b7a2c04c8a87b4e5603f7592bc89521d454d3528dce3959d8613c413eafce02151dc1f76a1ace92831610ea0894d9f59407f66cbe556e636be5a3d01253ec1c755495e5196efdf7f155cba102e"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) shutdown(r3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0x50, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x2e}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x674}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xd69}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xfffd}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x50}}, 0x40) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 12:11:22 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xffffffff000) (fail_nth: 20) 12:11:22 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x84) ioctl$BLKTRACESETUP(r0, 0x1277, &(0x7f0000000540)={'\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 12:11:22 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0xc, 0x0, 0x0) r0 = syz_io_uring_setup(0xc96, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x5, 0x2b9}, &(0x7f0000940000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a85f508c53b74be1cc06a8682449c18237d779b4f25f709ca", 0x1a}, {0x0, 0x39}, {0x0}, {0x0}], 0x4}, 0x0, 0x4000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000040)={0x0, 0x5fb3, 0x0, 0x0, 0x3de}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000000c0)='comm\x00') r5 = syz_open_dev$sg(0x0, 0x0, 0x2001) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000dc0)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r5, 0xc400941d, &(0x7f00000008c0)={r6, 0x5, 0x80000001}) ioctl$BTRFS_IOC_DEV_INFO(r4, 0xd000941e, &(0x7f0000000880)={r6, "7f708bc1d598960910a789fcfa4ffbc0"}) io_submit(0x0, 0x5, &(0x7f00000007c0)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x2, 0xffffffffffffffff, &(0x7f0000000240)='weE<\b', 0x5, 0x2}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x3, 0x3ff, 0xffffffffffffffff, &(0x7f0000000380)="9bef6f353b52fe0a06b886070109e862131fa1285ee37730e3d9c689ed0964364e9cc17653fcf33722", 0x29, 0x4, 0x0, 0x1}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x6, 0x327, 0xffffffffffffffff, &(0x7f0000000600)="8647bf668c67e210b4841130bfb5fd", 0xf, 0x5, 0x0, 0x1, r4}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x5, 0x40, 0xffffffffffffffff, 0x0, 0x0, 0x9fa, 0x0, 0x2, r4}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x2, r0, &(0x7f0000000740)="804d3f7b5e45f2564b8bf014d8d3e92e5e965e77", 0x14, 0x0, 0x0, 0x0, r4}]) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000001400)=ANY=[@ANYBLOB="580100001a000100fdffffff00000000fc020000000000000000000000000001ac1414bb000000000000000000000000fffd0000000000030000000000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000a300000000000033000000ac1414330000000000000000000000000000000000000000fcffffffffffffff060000000000000000000000000000000000000000040200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000025bd70000000000000000080"], 0x158}}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd, 0x2, 0x0, 0x3c17, 0x3, 0x1}, 0x40) 12:11:22 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)=0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001700)=ANY=[@ANYBLOB="010000009bd7", @ANYRES32, @ANYRES32=r2, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c652fe1451d4e7b754bc7f05f0ff404807bf64d176a29993195992c14f39ee8328796f81d1886f6cb48f1ed71a941835b5840190114208ef9dda4756eab00fcd38d0a302906ffc3e8f25260ef7b4e28db855ed9e895bd4b0fbdedef955a9ddf4161dc9347ef97623a3ebf9ca8933a81653dd955d769a92740fbed0519a0fe8fb2bb1420fa5a24997c0cf4682cd464c3bcd44c267b10cfd7565652376257be8c2ef9d94e9ad1d44011543b4d0e2c77577a1157a58a7edab4a0981d3549776f00"/210]) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x4827d9d3570e76e1}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb62) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400ffbd0000"], 0x14}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup(r4) r5 = dup2(r1, r3) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x8010, r5, 0x10000000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@private, @in=@initdev}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000280)=0xe8) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1520.398994] kauditd_printk_skb: 20 callbacks suppressed [ 1520.399012] audit: type=1326 audit(1751717482.285:1395): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12660 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1520.414646] audit: type=1326 audit(1751717482.297:1396): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12660 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=57 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1520.426481] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1520.431535] FAULT_INJECTION: forcing a failure. [ 1520.431535] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1520.434671] CPU: 0 PID: 12664 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 1520.436344] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1520.438210] Call Trace: [ 1520.438819] dump_stack+0x107/0x167 [ 1520.439645] should_fail.cold+0x5/0xa [ 1520.440502] __alloc_pages_nodemask+0x182/0x600 [ 1520.441556] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 1520.442902] ? lock_acquire+0x197/0x470 [ 1520.443785] ? find_held_lock+0x2c/0x110 [ 1520.444694] ? jbd2_transaction_committed+0x111/0x150 [ 1520.445845] ? lock_downgrade+0x6d0/0x6d0 [ 1520.446772] ? ext4_map_blocks+0x87c/0x1910 [ 1520.447738] alloc_pages_current+0x187/0x280 [ 1520.448720] push_pipe+0x2b5/0x6d0 [ 1520.449526] iov_iter_zero+0x418/0xef0 [ 1520.450409] ? ext4_iomap_begin+0x1a0/0x700 [ 1520.451383] ? iov_iter_copy_from_user_atomic+0xdb0/0xdb0 [ 1520.452620] ? ext4_iomap_begin_report+0x5a0/0x5a0 [ 1520.453723] iomap_dio_actor+0x40f/0x560 [ 1520.454653] iomap_apply+0x289/0x810 [ 1520.455487] ? iomap_dio_rw+0x90/0x90 [ 1520.456341] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 1520.457632] ? delete_from_page_cache_batch+0xa30/0xa30 [ 1520.458843] ? mark_held_locks+0x9e/0xe0 [ 1520.459765] ? filemap_check_errors+0xa5/0x150 [ 1520.460790] __iomap_dio_rw+0x6cd/0x1110 [ 1520.461696] ? iomap_dio_rw+0x90/0x90 [ 1520.462575] ? iomap_dio_bio_actor+0xef0/0xef0 [ 1520.463604] ? down_read+0x10f/0x430 [ 1520.464434] ? lock_chain_count+0x20/0x20 [ 1520.465359] ? down_write+0x160/0x160 [ 1520.466214] iomap_dio_rw+0x31/0x90 [ 1520.467039] ext4_file_read_iter+0x2c7/0x4c0 [ 1520.468023] generic_file_splice_read+0x455/0x6d0 [ 1520.469109] ? pipe_to_user+0x170/0x170 [ 1520.470006] ? fsnotify_perm.part.0+0x22d/0x620 [ 1520.471058] ? security_file_permission+0xb1/0xe0 [ 1520.472131] ? pipe_to_user+0x170/0x170 [ 1520.473012] do_splice_to+0x10e/0x160 [ 1520.473868] splice_direct_to_actor+0x2fe/0x980 [ 1520.474924] ? pipe_to_sendpage+0x380/0x380 [ 1520.475892] ? do_splice_to+0x160/0x160 [ 1520.476781] ? security_file_permission+0xb1/0xe0 [ 1520.477865] do_splice_direct+0x1c4/0x290 [ 1520.478803] ? splice_direct_to_actor+0x980/0x980 [ 1520.479876] ? avc_policy_seqno+0x9/0x70 [ 1520.480791] ? security_file_permission+0xb1/0xe0 [ 1520.481879] do_sendfile+0x553/0x11e0 [ 1520.482751] ? do_pwritev+0x270/0x270 [ 1520.483598] ? wait_for_completion_io+0x270/0x270 [ 1520.484674] ? rcu_read_lock_any_held+0x75/0xa0 [ 1520.485716] ? vfs_write+0x354/0xb10 [ 1520.486572] __x64_sys_sendfile64+0x1d1/0x210 [ 1520.487578] ? __ia32_sys_sendfile+0x220/0x220 [ 1520.488605] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1520.489776] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1520.490944] do_syscall_64+0x33/0x40 [ 1520.491774] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1520.492916] RIP: 0033:0x7efcccb57b19 [ 1520.493751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1520.497893] RSP: 002b:00007efcca0cd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1520.499605] RAX: ffffffffffffffda RBX: 00007efcccc6af60 RCX: 00007efcccb57b19 [ 1520.501210] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1520.502813] RBP: 00007efcca0cd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1520.504409] R10: 00000ffffffff000 R11: 0000000000000246 R12: 0000000000000002 [ 1520.506008] R13: 00007ffdb544bb5f R14: 00007efcca0cd300 R15: 0000000000022000 [ 1520.531382] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1520.533067] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1520.534901] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1520.539320] audit: type=1326 audit(1751717482.324:1397): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12660 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1520.551679] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1520.553517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1520.555496] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1520.567239] audit: type=1326 audit(1751717482.330:1398): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12660 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1520.606016] audit: type=1326 audit(1751717482.330:1399): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12660 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1520.625775] audit: type=1326 audit(1751717482.330:1400): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12660 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1520.668220] audit: type=1326 audit(1751717482.370:1401): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12660 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1520.696387] audit: type=1326 audit(1751717482.371:1402): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12660 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1520.711155] audit: type=1326 audit(1751717482.525:1403): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12660 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1520.733956] audit: type=1326 audit(1751717482.526:1404): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12660 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 12:11:36 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)=0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001700)=ANY=[@ANYBLOB="010000009bd7", @ANYRES32, @ANYRES32=r2, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c652fe1451d4e7b754bc7f05f0ff404807bf64d176a29993195992c14f39ee8328796f81d1886f6cb48f1ed71a941835b5840190114208ef9dda4756eab00fcd38d0a302906ffc3e8f25260ef7b4e28db855ed9e895bd4b0fbdedef955a9ddf4161dc9347ef97623a3ebf9ca8933a81653dd955d769a92740fbed0519a0fe8fb2bb1420fa5a24997c0cf4682cd464c3bcd44c267b10cfd7565652376257be8c2ef9d94e9ad1d44011543b4d0e2c77577a1157a58a7edab4a0981d3549776f00"/210]) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x4827d9d3570e76e1}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb62) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400ffbd0000"], 0x14}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup(r4) r5 = dup2(r1, r3) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x8010, r5, 0x10000000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@private, @in=@initdev}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000280)=0xe8) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1534.826311] FAULT_INJECTION: forcing a failure. [ 1534.826311] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1534.828701] CPU: 0 PID: 12784 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 1534.829937] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1534.831421] Call Trace: [ 1534.831903] dump_stack+0x107/0x167 [ 1534.832551] should_fail.cold+0x5/0xa [ 1534.833232] __alloc_pages_nodemask+0x182/0x600 [ 1534.834071] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 1534.835155] ? lock_acquire+0x197/0x470 [ 1534.835865] ? find_held_lock+0x2c/0x110 [ 1534.836597] ? jbd2_transaction_committed+0x111/0x150 [ 1534.837522] ? lock_downgrade+0x6d0/0x6d0 [ 1534.838256] ? ext4_map_blocks+0x87c/0x1910 [ 1534.839043] alloc_pages_current+0x187/0x280 [ 1534.839831] push_pipe+0x2b5/0x6d0 [ 1534.840474] iov_iter_zero+0x418/0xef0 [ 1534.841177] ? ext4_iomap_begin+0x1a0/0x700 [ 1534.841950] ? iov_iter_copy_from_user_atomic+0xdb0/0xdb0 [ 1534.842939] ? ext4_iomap_begin_report+0x5a0/0x5a0 [ 1534.843832] iomap_dio_actor+0x40f/0x560 [ 1534.844573] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1534.844587] iomap_apply+0x289/0x810 [ 1534.844610] ? iomap_dio_rw+0x90/0x90 [ 1534.847717] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 1534.848762] ? delete_from_page_cache_batch+0xa30/0xa30 [ 1534.849714] ? mark_held_locks+0x9e/0xe0 [ 1534.850454] ? filemap_check_errors+0xa5/0x150 [ 1534.851286] __iomap_dio_rw+0x6cd/0x1110 [ 1534.852009] ? iomap_dio_rw+0x90/0x90 [ 1534.852705] ? iomap_dio_bio_actor+0xef0/0xef0 [ 1534.853532] ? down_read+0x10f/0x430 [ 1534.854195] ? lock_chain_count+0x20/0x20 [ 1534.854940] ? down_write+0x160/0x160 [ 1534.855631] iomap_dio_rw+0x31/0x90 [ 1534.856288] ext4_file_read_iter+0x2c7/0x4c0 [ 1534.857084] generic_file_splice_read+0x455/0x6d0 [ 1534.857950] ? pipe_to_user+0x170/0x170 [ 1534.858925] ? fsnotify_perm.part.0+0x22d/0x620 [ 1534.859759] ? security_file_permission+0xb1/0xe0 [ 1534.860622] ? pipe_to_user+0x170/0x170 [ 1534.861335] do_splice_to+0x10e/0x160 [ 1534.862030] splice_direct_to_actor+0x2fe/0x980 [ 1534.862888] ? pipe_to_sendpage+0x380/0x380 [ 1534.863662] ? do_splice_to+0x160/0x160 [ 1534.864372] ? security_file_permission+0xb1/0xe0 [ 1534.865243] do_splice_direct+0x1c4/0x290 [ 1534.865983] ? splice_direct_to_actor+0x980/0x980 [ 1534.866849] ? avc_policy_seqno+0x9/0x70 [ 1534.867572] ? security_file_permission+0xb1/0xe0 [ 1534.868438] do_sendfile+0x553/0x11e0 [ 1534.869129] ? do_pwritev+0x270/0x270 [ 1534.869803] ? wait_for_completion_io+0x270/0x270 [ 1534.870673] ? rcu_read_lock_any_held+0x75/0xa0 [ 1534.871506] ? vfs_write+0x354/0xb10 [ 1534.872169] __x64_sys_sendfile64+0x1d1/0x210 [ 1534.872969] ? __ia32_sys_sendfile+0x220/0x220 [ 1534.873788] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1534.874749] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1534.875646] do_syscall_64+0x33/0x40 [ 1534.876328] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1534.877227] RIP: 0033:0x7efcccb57b19 [ 1534.877899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1534.881241] RSP: 002b:00007efcca0cd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1534.882579] RAX: ffffffffffffffda RBX: 00007efcccc6af60 RCX: 00007efcccb57b19 [ 1534.883875] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1534.885132] RBP: 00007efcca0cd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1534.886442] R10: 00000ffffffff000 R11: 0000000000000246 R12: 0000000000000002 [ 1534.887678] R13: 00007ffdb544bb5f R14: 00007efcca0cd300 R15: 0000000000022000 12:11:36 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) r1 = pidfd_open(r0, 0x0) r2 = dup(r1) setns(r2, 0x2020000) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x105142, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) dup2(r3, 0xffffffffffffffff) r4 = perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @none}, &(0x7f0000000080)=0x40, 0x0) fcntl$lock(r6, 0x7, &(0x7f0000000180)={0x0, 0x2, 0x309c, 0x7}) dup2(r7, 0xffffffffffffffff) dup2(r5, r4) perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x2, 0x13}, 0x0, 0xff, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x2, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x198) faccessat2(0xffffffffffffffff, 0x0, 0x142, 0x200) 12:11:36 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fsetxattr$security_selinux(r1, &(0x7f0000000040), &(0x7f0000000140)='system_u:object_r:auditd_exec_t:s0\x00', 0x23, 0x2) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000)={0x0, 0xfffffffd}, 0x8) sendmmsg$sock(r0, &(0x7f0000000340), 0x0, 0x24048090) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e21, @loopback}, {0x2, 0x4e21, @remote}, 0x39, 0x0, 0x0, 0x0, 0xabd8, &(0x7f0000000080)='veth1_virt_wifi\x00', 0x7, 0x1, 0x8aa}) ioctl$BLKTRACESETUP(r2, 0x1277, &(0x7f0000000540)={'\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 12:11:36 executing program 6: syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x1, 0x3, 0x4, 0xa3, 0x0, 0xffffffffffffff7f, 0x80, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000340), 0x4}, 0x4068, 0x8, 0x1a9eca6b, 0x2, 0x0, 0x8001, 0x4a, 0x0, 0x1, 0x0, 0x2}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x4007, @fd_index=0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) r2 = signalfd(r0, &(0x7f0000000200)={[0xfffffffffffffffd]}, 0x8) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000240), 0x2}, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_setup(0x4d4f, &(0x7f0000000080)={0x0, 0x8797}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r7) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000940)={0x0, "06f67b39af495be66b82d72419b421d1"}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r4, 0x50009417, &(0x7f0000001940)={{r2}, 0x0, 0xa, @inherit={0x60, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000000000000000300000000000000c20000000000000003000000000000000d000000000000005c0000000000000001000080000000007effffffffffffff9c0000000000008c460000000000000000000080000000000600000000000000"]}, @devid}) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="2549ba2b8019000000aa1a00000000", @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB=',cache=mmap,cache=none,\x00']) 12:11:36 executing program 7: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000018c0)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000001bd81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c030519e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065f14982b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc00100000000000000e073ebbcea086bc8e8da27d76939786776a523785c8d9f855bdebf1edf10e03336ab01cd5cf01d1029cd73f7ed80e25303ae4adcc92c32141d362f09f0ddfd8ac96f4ac935755951deec4790aad73f2a0d0ea95e61d823c36e79179300"/370], 0x24}}, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000dc0)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000008c0)={r2, 0x5, 0x80000001}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="080500988400014637b5e6a174b7b2b317b4044a94da343dd489e684a04f4ca90665864272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab7ea7e76402b517c198dc7ffbdbb38ab65f84f5242824efb291f523ece2d8e79434f9fe77da5ead57c5f16fed9a43b14e466358a6b4c3a1a8361e8199db7e4116e6031e72ada1c25a85ea221f56", @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) shutdown(r3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0x50, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x2e}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x674}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xd69}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xfffd}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x50}}, 0x40) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 12:11:36 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fork() tkill(r0, 0x26) waitid(0x600000000000000, 0x0, 0x0, 0x4, 0x0) 12:11:36 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xffffffff000) (fail_nth: 21) 12:11:36 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xc, &(0x7f0000000100)={0x5, 0xfffffffffffffffd}, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xffffffff000) [ 1534.907373] audit: type=1326 audit(1751717496.794:1405): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12788 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1534.914926] audit: type=1326 audit(1751717496.801:1406): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12788 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=57 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1534.915367] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1534.929307] audit: type=1326 audit(1751717496.816:1407): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12788 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1534.936198] audit: type=1326 audit(1751717496.823:1408): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12788 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1534.947662] audit: type=1326 audit(1751717496.823:1409): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12788 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1534.955589] 9pnet: Insufficient options for proto=fd [ 1534.963156] audit: type=1326 audit(1751717496.828:1410): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12788 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1534.979899] audit: type=1326 audit(1751717496.866:1411): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12788 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1534.990803] audit: type=1326 audit(1751717496.866:1412): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12788 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 12:11:36 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300010000000000a4200000ffff73766a6800000000ff0300000000000000000000000000000a004b462266095dbfb16b8faf2a403c8900000000002709ea4cd54fa608f3a6ed1424ca359683b849", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000006122a7161c0c0f31d316abaf997bf53e0000008f9cb0ec0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005b075dbc30b8ab22000000000000000000ddecc26e00"/112], 0xb8}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r2 = fcntl$dupfd(r1, 0x406, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={0x150, 0x36, 0x1, 0x70bd25, 0x25dfdbff, {0x10}, [@generic="b737f05807084bbb9537aabfead056e83551e4bad4e6a0003270169af56d1c836e7783cb799488b6b39a8ee7cea96935c6ab5afb6ad1e6969e9f7ee5eb2e3a36cc19108c1fe97c027f051d98a768e8ce84e5b286a70be7ad24027c4631b94fd10778b51c8227fe754ca257a1daae48499c84700d14ea8e97a85ea2cb6c3193651bb8f5f8c6407baf7426d212a2892c18df5b5ad1627dc6f5a11460af97eeae8ae24fd800192b49d772de3a45817723c6d217d8f81bf7b9a1b60be04e83859307a114754869a8fb4bb55ce100ada9b25e3aaf4f6a54a370fd8e6051f8589226fb3d22aea1064df4714c558afb8c7fa06f106e7dd0", @generic="b19b46f810e8da75796382170e12d12aed6b658cf568cf7478320784796e3eaa1f47d4ed1d51169184443e2e7c3fecac25054cb65a9969b0a624735501435ccfbe747679c02dd6"]}, 0x150}, 0x1, 0x0, 0x0, 0x20000014}, 0x4000000) r3 = syz_io_uring_setup(0x5606, &(0x7f0000000040)={0x0, 0xef33, 0x2, 0x1, 0x256}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000340)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000016, 0x30, r3, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x52cb, 0x2}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) pread64(0xffffffffffffffff, &(0x7f00000010c0)=""/4088, 0xff8, 0x0) syz_open_dev$mouse(&(0x7f0000000100), 0x201, 0xa0000) [ 1535.005101] audit: type=1326 audit(1751717496.872:1413): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12788 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 12:11:36 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x8004) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x2df}}, './file0\x00'}) recvmmsg$unix(r3, &(0x7f0000000980)=[{{&(0x7f00000003c0), 0x6e, &(0x7f0000000480)=[{&(0x7f0000000440)=""/36, 0x24}], 0x1, &(0x7f00000004c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc0}}, {{&(0x7f0000000580), 0x6e, &(0x7f0000000900)=[{&(0x7f0000000600)=""/151, 0x97}, {&(0x7f00000006c0)=""/179, 0xb3}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000000780)=""/197, 0xc5}, {&(0x7f0000000880)=""/74, 0x4a}], 0x5}}], 0x2, 0x40000000, &(0x7f0000000a00)) r4 = memfd_create(&(0x7f0000000200)='@x\xad\x86\f\"\xd1\xe33\xc95\x9c\xe7rx\x04\x04\x98-,\xfbG\xf3\xa5\xa9\xf2\xa8`\x89\t\"F5\x85\xa7m\xa5AO\xf6+@i\x83:Wi\xf9\xd1\x1az\x01\xf3\x19\x1e\xe4\xbdf\xe1{|\xe9\xb1\"\x17\xe1\xb8\x86\x9a\xb2h\x1f\xe9\x85R\xc9I\xcf\x00i\x88\x01/\x91\x92\x8c\xde\x9b\xdc.\xb3\xc8\xa8\xa6\xf9M\xd5\x02\xff\xddk\f}\x81#\xde\xd1-\x97\x84\x16\xaeHh\xbe\xd5\xa4M1Vb\xda!\xce\xc8\xfd\xc0\xff\x0e\x8f~\xbcT\a\x7f\xcf\xd2\xe2\"\xbe\vUCl\xcd*4<\xc7E\xc6J\xa8H\xf4\xdc\xdf&3Y+r\a\x95D\xd9\xa4B[\bL\xaaBi\xf65\x1cNZ\x06`L\xcc\xe5=\xb6\xd1\x14\x94\x87\x16\xef\x1b\xdcH!3\x16\x83\xde\x8cL0\x8c\xc5Z\x10\x05?\xfb]\xfd\xe4,\xfd\xc54E\x857\x03\x1fJ\xe1@^O\x8f\xd9\x18D\a\x91}\xee\xddh@\x8c\f\xed_\x03\xe8\xc1[+|\xebA\xb8\xe0\xf9\x82\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xac\xb9\xa2\xb5\xa2\xa4>\xc8\xd4\xfaC\x02\x18q\xc0p\x0e\xef\xbe\xd6\x93}\xa1&\xa1^\xab\x14\x97R:\x8fMe\x05m\xc2\x03\xb2\x1b\xa44m\x82\xad\xbe\xd7\xa1\xa4\xeb`\xbbs\x91\xe5mW\xde\x17G\x8d\xf6\xdbs%\x02\x05\xaf\x89\xccq~yd\x8e|ny\xe1\x05\xcf\xadk\xe7\x82\xbc\xb6', 0x0) ftruncate(r4, 0x7ff) finit_module(r4, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x108000}) fcntl$dupfd(r4, 0x406, r0) [ 1535.019268] audit: type=1326 audit(1751717496.873:1414): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12788 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 12:11:36 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xc, &(0x7f0000000100)={0x5, 0xfffffffffffffffd}, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r1, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0xffffffff000) 12:11:36 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fork() tkill(r0, 0x26) waitid(0x700000000000000, 0x0, 0x0, 0x4, 0x0) [ 1535.089464] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1535.091186] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1535.092634] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1535.094131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1535.095784] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1535.098620] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1535.143413] Module has invalid ELF structures 12:11:37 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xffffffff000) (fail_nth: 22) 12:11:37 executing program 7: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000018c0)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000001bd81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c030519e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065f14982b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc00100000000000000e073ebbcea086bc8e8da27d76939786776a523785c8d9f855bdebf1edf10e03336ab01cd5cf01d1029cd73f7ed80e25303ae4adcc92c32141d362f09f0ddfd8ac96f4ac935755951deec4790aad73f2a0d0ea95e61d823c36e79179300"/370], 0x24}}, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000dc0)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000008c0)={r2, 0x5, 0x80000001}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="080500988400014637b5e6a174b7b2b317b4044a94da343dd489e684a04f4ca90665864272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab7ea7e76402b517c198dc7ffbdbb38ab65f84f5242824efb291f523ece2d8e79434f9fe77da5ead57c5f16fed9a43b14e466358a6b4c3a1a8361e8199db7e4116e6031e72ada1c25a85ea221f56", @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) shutdown(r3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0x50, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x2e}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x674}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xd69}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xfffd}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x50}}, 0x40) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1535.233416] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1535.271699] FAULT_INJECTION: forcing a failure. [ 1535.271699] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1535.273717] CPU: 0 PID: 12833 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 1535.274771] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1535.276009] Call Trace: [ 1535.276406] dump_stack+0x107/0x167 [ 1535.276954] should_fail.cold+0x5/0xa [ 1535.277527] __alloc_pages_nodemask+0x182/0x600 [ 1535.278220] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 1535.279121] ? lock_acquire+0x197/0x470 [ 1535.279710] ? find_held_lock+0x2c/0x110 [ 1535.280316] ? jbd2_transaction_committed+0x111/0x150 [ 1535.281088] ? lock_downgrade+0x6d0/0x6d0 [ 1535.281704] ? ext4_map_blocks+0x87c/0x1910 [ 1535.282351] alloc_pages_current+0x187/0x280 [ 1535.283014] push_pipe+0x2b5/0x6d0 [ 1535.283551] iov_iter_zero+0x418/0xef0 [ 1535.284133] ? ext4_iomap_begin+0x1a0/0x700 [ 1535.284773] ? iov_iter_copy_from_user_atomic+0xdb0/0xdb0 [ 1535.285598] ? ext4_iomap_begin_report+0x5a0/0x5a0 [ 1535.286333] iomap_dio_actor+0x40f/0x560 [ 1535.286951] iomap_apply+0x289/0x810 [ 1535.287502] ? iomap_dio_rw+0x90/0x90 [ 1535.288075] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 1535.288937] ? delete_from_page_cache_batch+0xa30/0xa30 [ 1535.289721] ? mark_held_locks+0x9e/0xe0 [ 1535.290337] ? filemap_check_errors+0xa5/0x150 [ 1535.291024] __iomap_dio_rw+0x6cd/0x1110 [ 1535.291627] ? iomap_dio_rw+0x90/0x90 [ 1535.292205] ? iomap_dio_bio_actor+0xef0/0xef0 [ 1535.292894] ? down_read+0x10f/0x430 [ 1535.293449] ? lock_chain_count+0x20/0x20 [ 1535.294068] ? down_write+0x160/0x160 [ 1535.294633] iomap_dio_rw+0x31/0x90 [ 1535.295190] ext4_file_read_iter+0x2c7/0x4c0 [ 1535.295841] generic_file_splice_read+0x455/0x6d0 [ 1535.296554] ? pipe_to_user+0x170/0x170 [ 1535.297145] ? fsnotify_perm.part.0+0x22d/0x620 [ 1535.297833] ? security_file_permission+0xb1/0xe0 [ 1535.298549] ? pipe_to_user+0x170/0x170 [ 1535.299148] do_splice_to+0x10e/0x160 [ 1535.299709] splice_direct_to_actor+0x2fe/0x980 [ 1535.300397] ? pipe_to_sendpage+0x380/0x380 [ 1535.301031] ? do_splice_to+0x160/0x160 [ 1535.301628] ? security_file_permission+0xb1/0xe0 [ 1535.302339] do_splice_direct+0x1c4/0x290 [ 1535.302961] ? splice_direct_to_actor+0x980/0x980 [ 1535.303666] ? avc_policy_seqno+0x9/0x70 [ 1535.304266] ? security_file_permission+0xb1/0xe0 [ 1535.304986] do_sendfile+0x553/0x11e0 [ 1535.305561] ? do_pwritev+0x270/0x270 [ 1535.306118] ? wait_for_completion_io+0x270/0x270 [ 1535.306833] ? rcu_read_lock_any_held+0x75/0xa0 [ 1535.307512] ? vfs_write+0x354/0xb10 [ 1535.308069] __x64_sys_sendfile64+0x1d1/0x210 [ 1535.308733] ? __ia32_sys_sendfile+0x220/0x220 [ 1535.309411] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1535.310183] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1535.310959] do_syscall_64+0x33/0x40 [ 1535.311502] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1535.312250] RIP: 0033:0x7efcccb57b19 [ 1535.312789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1535.315510] RSP: 002b:00007efcca0cd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1535.316615] RAX: ffffffffffffffda RBX: 00007efcccc6af60 RCX: 00007efcccb57b19 [ 1535.317649] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1535.318691] RBP: 00007efcca0cd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1535.319732] R10: 00000ffffffff000 R11: 0000000000000246 R12: 0000000000000002 [ 1535.320769] R13: 00007ffdb544bb5f R14: 00007efcca0cd300 R15: 0000000000022000 12:11:37 executing program 4: syz_mount_image$nfs4(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x6, &(0x7f0000000440)=[{&(0x7f00000000c0)="2c904d1ca407a98b0cc056bc73ce4deed4e1765ed40935199e7331f3fd3e51484f4514cace3e1ed22c0384ab15f1e10f3f9ce75b85338a6ebd14ed7d989d60451b990bea0a38ed25782bb9ba29f2e2848a444be3568a5a7315669858aa1f6038b323d810fcbf51c389644fec957491d00427d2", 0x73, 0x101}, {&(0x7f0000000140)="bbe6e94585f4d43982b9b28d8ceeea006289accc2c81ac17dfeac0d9f57f22109cb32878d047d53fda7ed523211725c24eb43b14ec81e9fe7759ce1b02cdbab05b0770276dc2dfba77c9860c203a848b49db0252d35dc010684e781b1af04f0f5f8a9ec6eca400034d24ba1c73bbfd3996805898bfe676110a8fbe05fb049387897d0c7c393602d4f2ae9bed904f4d7e6bf7022ca141ae3da0437fc807590a200ca52adabfee419c9f81d406ac29d7cccdbd6627073325651b0121897da6c767167a2c6d9f3e4ec97bbc29ba5189", 0xce, 0x1}, {&(0x7f0000000240)="7033729aa7c821d11617cb858ff7a33a27bd21c07fe8b8f0bf7b41a2141d4811d37cda6f9d5ef05376f6e161305571c52d3c5873cc2d4564e9a669bc92fcd433d68c3bbf2871f81cf776c33cc5c82959ef382ff32b6d681738748b3de6509ad671bf1afa", 0x64, 0x7ff}, {&(0x7f00000002c0)="13bad5c204cc086eac4d474b4889e4c89ac8ebd15088181dc41ee7a0d005a24361543fda58b0188e304ede46f322cac9f44d4a69a3f9d29b98a1abad3bd4644ecb57a871a82d8044671509f5284490620690d1c85600b2998a3f5a669b7b1596d6b58d2d5997ab66496b1379a276a29b9d85d8a70e47375af26a74191b4dc13ef17bb45418e648510e3646a4768d0e5347e8322da867137d2c0cbf9491f9db", 0x9f, 0x7fffffff}, {0xfffffffffffffffd, 0x0, 0x5}, {&(0x7f0000000500)="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", 0x186, 0x9}], 0x2a0a081, &(0x7f0000000000)=ANY=[@ANYRES16=0x0]) 12:11:37 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)=0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001700)=ANY=[@ANYBLOB="010000009bd7", @ANYRES32, @ANYRES32=r2, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c652fe1451d4e7b754bc7f05f0ff404807bf64d176a29993195992c14f39ee8328796f81d1886f6cb48f1ed71a941835b5840190114208ef9dda4756eab00fcd38d0a302906ffc3e8f25260ef7b4e28db855ed9e895bd4b0fbdedef955a9ddf4161dc9347ef97623a3ebf9ca8933a81653dd955d769a92740fbed0519a0fe8fb2bb1420fa5a24997c0cf4682cd464c3bcd44c267b10cfd7565652376257be8c2ef9d94e9ad1d44011543b4d0e2c77577a1157a58a7edab4a0981d3549776f00"/210]) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x4827d9d3570e76e1}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb62) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400ffbd0000"], 0x14}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup(r4) r5 = dup2(r1, r3) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x8010, r5, 0x10000000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@private, @in=@initdev}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000280)=0xe8) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 12:11:37 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xc, &(0x7f0000000100)={0x5, 0xfffffffffffffffd}, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r1, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0xffffffff000) 12:11:37 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0xeb, 0x0, 0x0, 0x10000000}) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x103401, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) fcntl$dupfd(r1, 0x406, r2) mknodat$loop(r1, &(0x7f0000000080)='./file0\x00', 0x200, 0x0) 12:11:37 executing program 2: mknod$loop(&(0x7f0000000600)='./file1/file1\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x0) statx(r0, &(0x7f0000000400)='./file1/file0\x00', 0x0, 0x77baea28dc8b509d, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', r1, r2, 0x1000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) setxattr$system_posix_acl(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000010006000000000002000200", @ANYRES32=0xee00, @ANYBLOB="040000004840fd58331ba4ae", @ANYRES32=r2, @ANYBLOB="08000300", @ANYRES32=r3, @ANYBLOB="10000200000000002000040000000000"], 0x3c, 0x3) ioctl$BLKTRACESETUP(r0, 0x1277, &(0x7f0000000000)={'\x00', 0x0, 0x0, 0x200, 0x0, 0x8000000, 0xffffffffffffffff}) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x16) r5 = open$dir(&(0x7f0000000540)='./file0/file0\x00', 0x400ac0, 0x80) mkdirat(r5, &(0x7f0000000580)='./file1/file0\x00', 0x236) r6 = accept$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x1c) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r7, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) fcntl$dupfd(r7, 0x406, r7) io_submit(0x0, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x8, 0x5, r7, &(0x7f0000000440)="2605e433d705d2f2d006e2da74dea1edece6c39b4aa6ff86ad4db96cce189ad4c02743613a4f404f77ff61b3d9e522d2c05a7c3489660e20308ce81c2bbe16ce13e31ef539e0055083887cebb98dfd2588718dca66c875f1285975857ebd22cf9bb32e6fb917e3c18848bbfd1032b03166b18928e9a42f3a2fee93383edaa8af307242e4bf5218a0565748796da932919572684a58aa882de48b83c338354fafcfc6ac07df5510f3968d9718e8aba28a736e48e36a02450d4b3422fd7447ce0db572c2c1c87374", 0xc7, 0x200, 0x0, 0x2, r4}]) openat(0xffffffffffffffff, &(0x7f00000005c0)='./file1\x00', 0x20001, 0x108) ioctl$F2FS_IOC_SET_PIN_FILE(r6, 0x4004f50d, &(0x7f0000000140)=0x1) [ 1535.339498] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. 12:11:37 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="6e0428bd7000fedbdf251000000008003a000180000005002d00000000000800320003000000"], 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x800) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x5, &(0x7f0000000700)=0x0) io_submit(r2, 0x37, &(0x7f0000000700)) 12:11:37 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fork() tkill(r0, 0x26) waitid(0xa00000000000000, 0x0, 0x0, 0x4, 0x0) [ 1535.390775] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1535.392583] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1535.394239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1535.412234] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1535.413961] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1535.415576] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:11:37 executing program 4: mmap$usbmon(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x10, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1c0c2, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x833}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$nl_generic(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000f71300210c0000000000557c565ae4320000000af0000004005f8008000000", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) syncfs(r2) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x32100, 0x0) copy_file_range(r3, &(0x7f0000000080)=0xffffffffffff1890, 0xffffffffffffffff, &(0x7f00000000c0)=0x8000, 0x1, 0x0) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000100)={0xfffffffe, 0x80}) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r4, 0x4c00, 0x0) ioctl$LOOP_SET_STATUS(r4, 0x4c02, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0xb, &(0x7f0000ffe000/0x2000)=nil) ioctl$RFKILL_IOCTL_NOINPUT(0xffffffffffffffff, 0x5201) setresuid(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x4, &(0x7f0000000180)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB='\r\x00\x00\x00\x00\x00\x00\x00']) ioctl$LOOP_SET_STATUS(r4, 0x4c02, &(0x7f00000002c0)={0x0, {}, 0x0, {}, 0xff, 0x3, 0x12, 0x14, "89f5e098115db60136d1d378e45f29636f0a74d7fd2b954ac53340fa745e40721eec0c08b7d035177b2bf6830e4e381a21ec20409ee100", "bf1047a99b9c26db92c45dc422ff6a112317d290329812cbd09ae21835b7290d", [0x3, 0x8]}) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) 12:11:37 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xc, &(0x7f0000000100)={0x5, 0xfffffffffffffffd}, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r1, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0xffffffff000) 12:11:37 executing program 6: r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f0000000b80)={0x4, 0xce7}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) renameat2(r0, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000280)='./file1/file0\x00', 0x2) r2 = dup(0xffffffffffffffff) fcntl$getown(r0, 0x9) pwrite64(r0, &(0x7f0000000340), 0x0, 0x0) futimesat(r2, &(0x7f0000000180)='./file1/file0/file0\x00', &(0x7f0000000400)) flock(r0, 0x1) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000bc0)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="ffffff7f000000002e2f66696c1665300022d3ca43e6b2c507b2b0d3f8e3c4fd342c9fe0ca06f1ac7b9252658f6c04b73358d958a1dbb89145f07d5dcefbb3dbe0075a1d52b5d138d0fb75e0feb9ac286b17bbc0316ac64c3ffbd8571760e0d944"]) accept4$unix(0xffffffffffffffff, &(0x7f0000000200)=@abs, &(0x7f00000002c0)=0x6e, 0xc0000) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000540)={0x0, 0x8001, 0x2, 0x1}) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000940)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendmsg$nl_generic(r0, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000250000f628bd706ed72d7ce98fe400fedbdf2509000b00076fedc72c8ddc2040d24b0c8f952c15b4239ed14c3bd22ecad71d46c6d29c47d6f837fdf4b0633aacf66aaa72"], 0x14}, 0x1, 0x0, 0x0, 0x48040}, 0x800) truncate(&(0x7f0000000380)='./file1/file0\x00', 0x12000000) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffd0b2d6a350000000000000000000000000100010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000008000000000000000000000000000400"/256]) unshare(0x48020200) 12:11:37 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)=0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001700)=ANY=[@ANYBLOB="010000009bd77e7d3d", @ANYRES32, @ANYRES32=r2, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c652fe1451d4e7b754bc7f05f0ff404807bf64d176a29993195992c14f39ee8328796f81d1886f6cb48f1ed71a941835b5840190114208ef9dda4756eab00fcd38d0a302906ffc3e8f25260ef7b4e28db855ed9e895bd4b0fbdedef955a9ddf4161dc9347ef97623a3ebf9ca8933a81653dd955d769a92740fbed0519a0fe8fb2bb1420fa5a24997c0cf4682cd464c3bcd44c267b10cfd7565652376257be8c2ef9d94e9ad1d44011543b4d0e2c77577a1157a58a7edab4a0981d3549776f00"/210]) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x4827d9d3570e76e1}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb62) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400ffbd0000"], 0x14}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup(r4) r5 = dup2(r1, r3) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x8010, r5, 0x10000000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@private, @in=@initdev}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000280)=0xe8) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 12:11:37 executing program 2: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0/../file0\x00']) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040)=[0xffffffffffffffff], 0x1) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, &(0x7f0000000540)={'\x00', 0x0, 0x0, 0x0, 0x1, 0x1000000, 0xffffffffffffffff}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000100)="98a5a41377d372341cb69977bd58b7a5edb6fcf80c8bdb56f03cd0afe222a83b2dc873a0e477ae868ba879e3e85d7fbafadae168240a6323594f9f5a1cbbf05d1291450f189ba38dfff4d2a01c64cc0587dde31895e65a622c1cdfdc7345383b1530", 0x62}, {&(0x7f0000000180)="a54561514de81d5fd4d87e5047c08667fdb4f427b597b8c9c7cac4101e1124520f1538cf43c34c96622ce0b0189a7add9c47e91f8f4abdaa450930fbcba9890aab83f232dd869acb7426970f8a9e40d285fa1c0b01b793742d5e72f7e5397598e86e1d8562d3682b40c0f88a51b8f66c5cc32d15b25803c1c3ca08446dfa1531b550b4e6ee6888f06d5a404dd78cf4f090589a59ab84c2b00db9e1506d9ce2ef9d4a070d8b27538df8e8a9920ae789d2c9eb128a74ff12e5668b483b601f4651b614083a7bc094e71772580bf3", 0xcd}, {&(0x7f0000000280)="3a87a21c184091cc93ff0a2d6823c5d22750706e8e719ccf648afd13855406d78b10369e9920d45ff06bc845bcd1cce4d45fc62c494b6eb444e4cc58225c0b820516d9870043dc7c2b5f76e10214dadeaae0df6938360bcc948cb872d47e1798db5ab30ce7471e060b1cabf72feeada7dba09f3dcd0f22af6484ed900455cd", 0x7f}, {&(0x7f00000008c0)="99e7193de035f449c2abc2e07904eeb8236ab2130c90b0252fbcd2c8789f286145de75b8ce9543c9d3aed2564e6b63ab4c95f8e7bf6b04d3afef322d00999d3adf8114eac413b3bcbd9c2c6fc1afbd235aef3947ccff5045459f917d1f42edf220f2598ba9feb8705643933c6346b05b14eda17c36dfc82287b6852b0d211374a9fc3dec70cb58c897b5902aedef580bea6be2b81b9b7c7dbb1de86e1ce19f06ed0589dd90ddc8c623a3b798cbd949c02ded3710dd2c1696597f41b5dd57bf2a4f03fcf82d905d801194cbc24182318ba28100e32b39fbe55951c26b39e541cd3a2f099353c6bdf29f4ab7e496b33c685aa7de876383d311", 0xf8}, {&(0x7f0000000440)="488393023ecdbb1caa8268e7a09a1d06e02272f58b4ae6d0369cb50e7399096c484776b8e3e0d8026adcd35b74364ecdf71b88b5613189a2c24f30c12379eb494d33eab24dcadce0b591057434cf7a98bb37ac1d906cbc08afb5393a4acb473a6d4147a9da2f5ca6cdbbf95dc23d2ad9061608b10b7782c6c2b6e9bfb0fba7fb8aa9bf0ade71c645a53efaaad066f5b09a5dc371c85a9764c5ddde2598166f41851b7d48f26595efa56929545ece29b9ca5eba2ba614782ddd6b89c672592d8b406b94c45c4aa2ed49f644b75fd1b99e8706946bc864cac390df45", 0xdb}, {&(0x7f00000005c0)="050946427b0ad3a8bac291afbe390513c274883d6036b13cc8a1a663b751ba05249ebebc22c47207f3c8b3e754ee9c566159a72c57f2c86a16078a5fc74cb3f9bd7a12632789cf124a2aacb2c71484549c1d4626f157974d190f0d37716013e70acce590f6e2696e18d0c0c95b4d6c1ba8daf6f40f8b528b98eb0264f68a61c5d3cf666b62a4b67786fae9", 0x8b}], 0x6, &(0x7f0000000700)}, 0x4040) [ 1535.485506] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1535.513172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1535.514869] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1535.516497] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1550.851087] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1550.861771] FAULT_INJECTION: forcing a failure. [ 1550.861771] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1550.864099] CPU: 1 PID: 12974 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 1550.865150] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1550.866402] Call Trace: [ 1550.866820] dump_stack+0x107/0x167 [ 1550.867379] should_fail.cold+0x5/0xa [ 1550.867962] __alloc_pages_nodemask+0x182/0x600 [ 1550.868675] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 1550.869592] ? lock_acquire+0x197/0x470 [ 1550.870191] ? find_held_lock+0x2c/0x110 [ 1550.870825] ? jbd2_transaction_committed+0x111/0x150 [ 1550.871623] ? lock_downgrade+0x6d0/0x6d0 12:11:52 executing program 6: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="eb00000033af360f010000007204000000000000003084879b7b855fda33f7d2b9b640b359f72952fb83a827d5463170c1d3a410b9dfed3ffaecf2cf3fbf102654a69e404be809f7d91b23e685ccbda965450cbbcbec3ccb7ea1562be196a097e887b0399667025f64a6cb7be2f0114053eb776af261a673faedd10233da5cf20ff941299ba19caaa822a9565f3f7c601830beac42f9835f36244eaa64aa83a7ee2f4f3c3f8354fd3fc341cddec41ca85198e49be16dc445df15319852e8dd89081d5122b2d2c0f9d23640cce97ec0302411ab10dbc19ce37e2caee646c01a1ad23abeaf1e11fe7e7c8e33834845a1000000000000000000"]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_type(r0, &(0x7f0000000000), 0x2, 0x0) 12:11:52 executing program 7: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000018c0)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000001bd81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c030519e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065f14982b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc00100000000000000e073ebbcea086bc8e8da27d76939786776a523785c8d9f855bdebf1edf10e03336ab01cd5cf01d1029cd73f7ed80e25303ae4adcc92c32141d362f09f0ddfd8ac96f4ac935755951deec4790aad73f2a0d0ea95e61d823c36e79179300"/370], 0x24}}, 0x0) perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000dc0)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000008c0)={r2, 0x5, 0x80000001}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="080500988400014637b5e6a174b7b2b317b4044a94da343dd489e684a04f4ca90665864272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab7ea7e76402b517c198dc7ffbdbb38ab65f84f5242824efb291f523ece2d8e79434f9fe77da5ead57c5f16fed9a43b14e466358a6b4c3a1a8361e8199db7e4116e6031e72ada1c25a85ea221f56", @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) shutdown(r3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0x50, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x2e}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x674}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xd69}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xfffd}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x50}}, 0x40) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 12:11:52 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fork() tkill(r0, 0x26) waitid(0x1000000000000000, 0x0, 0x0, 0x4, 0x0) 12:11:52 executing program 4: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x100000000000000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f800002000400000eb4e408f4c9170db", 0x25}], 0x0, &(0x7f0000001500)=ANY=[]) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000003c0)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x520e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffd}, 0x0, 0xc, 0xffffffffffffffff, 0x0) statfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=""/5) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x80) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) setresuid(0xee00, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x100000000, 0x5, &(0x7f0000001540)=[{&(0x7f0000001240)="32ad6b3cc0162b8580e1e3394ae8f674d22f03020ddce6389124f193759f94f073080b01993e9c1a1abe060d6527880f1701bd4aafe1ac038f810d7046", 0x3d, 0x3}, {&(0x7f0000001280)="be02ed363a43b06481eac78b7416058fdb625677f2e58f59c74b728b8cbcef379d248b4faa8ff2dc9436d17d7eda308a32533f8a8bc600733a11be3f1080e7b6e120443ed0f1aeaa704e82ee6710e11b4b7fc1340ac7837307849d75d7fd8dd754a801d93b7c67affbeecf6d1745a8af00b7662b0b5bd00bde74753971e0a486aefeee99e45a51f33d9188f417f8", 0x8e, 0x8}, {&(0x7f0000001680)="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", 0x13d, 0x3ff}, {&(0x7f0000001440)="901c0c5da76f501c45afb6bbacf7caf62fa669fe8fc238ed8adcfcb514bf5dec84f15e7625a86fb7f1edbf93138c4c8d54e4ec909b8a58a8b45cd72b0df897256a2b77953c94654031638f9cd35d051a727ebbbd696c5ff64f80925c95261c70e5bb", 0x62, 0x80000000}, {&(0x7f00000014c0)="9d92feb4f1ee323ffd9f3f052b7522827f7c6773829e738bf0f009e42c585bb8be5bd59c3e8e7595bb8b25ccab88aac4c058116ca86ddce74e4fe8baee313ca41208341f774696cb4c6f6033da81a10c89d5ec8da13b92376e", 0x59, 0x9}], 0x1204000, &(0x7f0000001340)={[{@session={'session', 0x3d, 0x3c}}, {@map_acorn}, {@map_acorn}, {@gid={'gid', 0x3d, 0xffffffffffffffff}}, {@gid={'gid', 0x3d, 0xffffffffffffffff}}], [{@euid_lt}, {@euid_eq}]}) getresgid(&(0x7f00000010c0), &(0x7f0000001100)=0x0, &(0x7f0000001140)) r1 = getuid() msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000180)={{0x2, 0x0, r0, r1, 0x0, 0x100, 0x3}, 0x0, 0x0, 0x7, 0x5, 0x0, 0x1, 0xff, 0x4, 0x8, 0x3, 0x0, 0xffffffffffffffff}) 12:11:52 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xffffffff000) (fail_nth: 23) 12:11:52 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)=0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001700)=ANY=[@ANYBLOB="010000009bd77e7d3d", @ANYRES32, @ANYRES32=r2, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c652fe1451d4e7b754bc7f05f0ff404807bf64d176a29993195992c14f39ee8328796f81d1886f6cb48f1ed71a941835b5840190114208ef9dda4756eab00fcd38d0a302906ffc3e8f25260ef7b4e28db855ed9e895bd4b0fbdedef955a9ddf4161dc9347ef97623a3ebf9ca8933a81653dd955d769a92740fbed0519a0fe8fb2bb1420fa5a24997c0cf4682cd464c3bcd44c267b10cfd7565652376257be8c2ef9d94e9ad1d44011543b4d0e2c77577a1157a58a7edab4a0981d3549776f00"/210]) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x4827d9d3570e76e1}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb62) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400ffbd0000"], 0x14}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup(r4) r5 = dup2(r1, r3) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x8010, r5, 0x10000000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@private, @in=@initdev}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000280)=0xe8) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 12:11:52 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xc, &(0x7f0000000100)={0x5, 0xfffffffffffffffd}, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r1, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0xffffffff000) 12:11:52 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r0, 0x1277, &(0x7f0000000540)={'\x00', 0x20, 0x0, 0x0, 0x0, 0x7, 0xffffffffffffffff}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0xafe, @remote}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) fcntl$dupfd(r1, 0x406, r1) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x441440, 0x49) r3 = fcntl$dupfd(r1, 0x0, r2) r4 = syz_open_dev$mouse(&(0x7f0000000140), 0x80, 0x240801) write$bt_hci(r4, &(0x7f0000000180)={0x1, @le_conn_update={{0x2013, 0xe}, {0xc8, 0x7, 0x2, 0x52, 0x8001, 0x8, 0x31}}}, 0x12) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x2, @local}, 0x1c) [ 1550.872353] ? ext4_map_blocks+0x87c/0x1910 [ 1550.873147] alloc_pages_current+0x187/0x280 [ 1550.873843] push_pipe+0x2b5/0x6d0 [ 1550.874401] iov_iter_zero+0x418/0xef0 [ 1550.875022] ? ext4_iomap_begin+0x1a0/0x700 [ 1550.875691] ? iov_iter_copy_from_user_atomic+0xdb0/0xdb0 [ 1550.876528] ? ext4_iomap_begin_report+0x5a0/0x5a0 [ 1550.877269] iomap_dio_actor+0x40f/0x560 [ 1550.877888] iomap_apply+0x289/0x810 [ 1550.878452] ? iomap_dio_rw+0x90/0x90 [ 1550.879030] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 1550.879888] ? delete_from_page_cache_batch+0xa30/0xa30 [ 1550.880686] ? mark_held_locks+0x9e/0xe0 [ 1550.881302] ? filemap_check_errors+0xa5/0x150 [ 1550.881983] __iomap_dio_rw+0x6cd/0x1110 [ 1550.882591] ? iomap_dio_rw+0x90/0x90 [ 1550.883200] ? iomap_dio_bio_actor+0xef0/0xef0 [ 1550.883883] ? down_read+0x10f/0x430 [ 1550.884439] ? lock_chain_count+0x20/0x20 [ 1550.885057] ? down_write+0x160/0x160 [ 1550.885640] iomap_dio_rw+0x31/0x90 [ 1550.886195] ext4_file_read_iter+0x2c7/0x4c0 [ 1550.886864] generic_file_splice_read+0x455/0x6d0 [ 1550.887576] ? pipe_to_user+0x170/0x170 [ 1550.888190] ? fsnotify_perm.part.0+0x22d/0x620 [ 1550.888888] ? security_file_permission+0xb1/0xe0 [ 1550.889598] ? pipe_to_user+0x170/0x170 [ 1550.890206] do_splice_to+0x10e/0x160 [ 1550.890788] splice_direct_to_actor+0x2fe/0x980 [ 1550.891490] ? pipe_to_sendpage+0x380/0x380 [ 1550.892133] ? do_splice_to+0x160/0x160 [ 1550.892724] ? security_file_permission+0xb1/0xe0 [ 1550.893446] do_splice_direct+0x1c4/0x290 [ 1550.894073] ? splice_direct_to_actor+0x980/0x980 [ 1550.894787] ? avc_policy_seqno+0x9/0x70 [ 1550.895409] ? security_file_permission+0xb1/0xe0 [ 1550.896144] do_sendfile+0x553/0x11e0 [ 1550.896709] ? do_pwritev+0x270/0x270 [ 1550.897289] ? wait_for_completion_io+0x270/0x270 [ 1550.898000] ? rcu_read_lock_any_held+0x75/0xa0 [ 1550.898692] ? vfs_write+0x354/0xb10 [ 1550.899249] __x64_sys_sendfile64+0x1d1/0x210 [ 1550.899923] ? __ia32_sys_sendfile+0x220/0x220 [ 1550.900601] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1550.901394] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1550.902147] do_syscall_64+0x33/0x40 [ 1550.902707] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1550.903463] RIP: 0033:0x7efcccb57b19 [ 1550.904016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1550.906703] RSP: 002b:00007efcca0cd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1550.907870] RAX: ffffffffffffffda RBX: 00007efcccc6af60 RCX: 00007efcccb57b19 [ 1550.908906] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1550.909969] RBP: 00007efcca0cd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1550.911013] R10: 00000ffffffff000 R11: 0000000000000246 R12: 0000000000000002 [ 1550.912059] R13: 00007ffdb544bb5f R14: 00007efcca0cd300 R15: 0000000000022000 12:11:52 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='.\x00', 0x3f) ioctl$BLKTRACESETUP(r0, 0x1277, &(0x7f0000000540)={'\x00', 0x0, 0x0, 0xd66e, 0x0, 0x0, 0xffffffffffffffff}) 12:11:52 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8922, &(0x7f0000000300)={'wlan1\x00'}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x40}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x3e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}], @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x2}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8000}], @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x81}, @NL80211_ATTR_MAC={0xa}]}, 0x74}, 0x1, 0x0, 0x0, 0x4048044}, 0x24000010) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) 12:11:52 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xc, &(0x7f0000000100)={0x5, 0xfffffffffffffffd}, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r1, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0xffffffff000) [ 1551.012428] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1551.030022] kauditd_printk_skb: 16 callbacks suppressed [ 1551.030040] audit: type=1326 audit(1751717512.916:1431): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12984 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1551.048223] wlan1: mtu less than device minimum [ 1551.051913] wlan1: mtu less than device minimum [ 1551.054341] audit: type=1326 audit(1751717512.940:1432): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=12984 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1551.065870] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1551.068054] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1551.069773] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1551.074187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1551.075920] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1551.079450] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:12:07 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fork() tkill(r0, 0x26) waitid(0x2000000000000000, 0x0, 0x0, 0x4, 0x0) 12:12:07 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)=0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001700)=ANY=[@ANYBLOB="010000009bd77e7d3d", @ANYRES32, @ANYRES32=r2, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c652fe1451d4e7b754bc7f05f0ff404807bf64d176a29993195992c14f39ee8328796f81d1886f6cb48f1ed71a941835b5840190114208ef9dda4756eab00fcd38d0a302906ffc3e8f25260ef7b4e28db855ed9e895bd4b0fbdedef955a9ddf4161dc9347ef97623a3ebf9ca8933a81653dd955d769a92740fbed0519a0fe8fb2bb1420fa5a24997c0cf4682cd464c3bcd44c267b10cfd7565652376257be8c2ef9d94e9ad1d44011543b4d0e2c77577a1157a58a7edab4a0981d3549776f00"/210]) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x4827d9d3570e76e1}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb62) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400ffbd0000"], 0x14}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup(r4) r5 = dup2(r1, r3) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x8010, r5, 0x10000000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@private, @in=@initdev}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000280)=0xe8) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 12:12:07 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x8d, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)=ANY=[@ANYBLOB="010000001100000018000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x90) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x2ff, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, 0x0, 0x24048411) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = gettid() r7 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r7}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) syz_io_uring_setup(0x404c, &(0x7f0000000280)={0x0, 0x9b21, 0x8, 0x2, 0x1d9, 0x0, r7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x1f, 0x3f, 0x9, 0x20, 0x0, 0x0, 0x4, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000040), 0x6}, 0x40000, 0x0, 0x0, 0x6, 0x7, 0x6, 0x5, 0x0, 0x1000, 0x0, 0x4}, r6, 0x0, r7, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_80211_join_ibss(&(0x7f0000000080)='wlan1\x00', 0x0, 0x0, 0x0) 12:12:07 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) 12:12:07 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xc, &(0x7f0000000100)={0x5, 0xfffffffffffffffd}, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r1, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0xffffffff000) 12:12:07 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xffffffff000) (fail_nth: 24) 12:12:07 executing program 7: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000018c0)=ANY=[@ANYBLOB="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"/370], 0x24}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000dc0)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000008c0)={r2, 0x5, 0x80000001}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="080500988400014637b5e6a174b7b2b317b4044a94da343dd489e684a04f4ca90665864272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab7ea7e76402b517c198dc7ffbdbb38ab65f84f5242824efb291f523ece2d8e79434f9fe77da5ead57c5f16fed9a43b14e466358a6b4c3a1a8361e8199db7e4116e6031e72ada1c25a85ea221f56", @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) shutdown(r3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0x50, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x2e}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x674}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xd69}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xfffd}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x50}}, 0x40) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 12:12:07 executing program 6: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x0, 0x7f, 0x5, 0x20000}, {0x5, 0x0, 0x7, 0x3}]}) r1 = syz_open_dev$rtc(&(0x7f00000003c0), 0x5a, 0x155582) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, &(0x7f0000000580)=ANY=[@ANYBLOB="070000000700000000ef58f610129eff000000007ed8487c35c97ce46beb701972822fc77944469551eeab973cb29e75191bfb557169acb18adb91366b97bdd67cf36eaf7a206f8447e700e0f0fbed2e04a72f6dd0a09c088bba805f8b8e19f5473d9b67b05ad720bb9d00a3c6b95dbf8b50458aed9870000000000000000000"]) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000500)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101982, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) ioctl$LOOP_SET_STATUS(r2, 0x4c00, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000440)={0x0, {}, 0x0, {}, 0xa9, 0x12, 0x1d, 0x19, "6e60147ae2fcdc3f1d52584aebeafaa0edd69266edf29bbff612a7a730c97b72b322d0b8aff13a679593d52a3c987ef7c88e49e70f44c10f719a7c0f41774981", "f8258a6ec00c2423b3415e80f5dcc6b04bdfa5322086b2c40bc141347fe2216a", [0x100000001, 0x9]}) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000280), 0x220000, 0x0) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f00000002c0)={0x0, {}, 0x0, {}, 0xfff, 0x0, 0x13, 0x0, "a33ffde15ac5e3597997ca8986bc6d30fb365a162412350d2dbb5f02e4b9158f3b699d557e93639a919a636fc399cb69327ad1688070049903904fc96628577b", "2f87934459fd43a9829984709a2e821126913d74f3d1ad8285ca2e3a4a403d99", [0xffff, 0x80]}) creat(&(0x7f0000000040)='./file1\x00', 0xc8) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000140)=ANY=[@ANYBLOB="9789cdc1a58bb7523a45992fbb476b7ba2f081093dc89803cc6745a634a85feaf8ebcd4ec14543c88d990c72ba873c4073a7537a63495141fd6432925ef7240019f7bd2bc2541505748aaf5c8bad5ffbb966b332d87a3c99b80c16f31f281131ef91e6"]) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000, 0x4, &(0x7f0000ffb000/0x3000)=nil) dup2(r0, r2) open(&(0x7f0000000080)='./file0/file0\x00', 0x309d00, 0x17a) acct(&(0x7f00000001c0)='./file1\x00') acct(&(0x7f0000000380)='./file1\x00') perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1565.424004] audit: type=1326 audit(1751717527.310:1433): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13107 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1565.443230] audit: type=1326 audit(1751717527.310:1434): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13107 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1565.461156] FAULT_INJECTION: forcing a failure. [ 1565.461156] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1565.463140] CPU: 0 PID: 13128 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 1565.464162] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1565.465224] Call Trace: [ 1565.465623] dump_stack+0x107/0x167 [ 1565.466161] should_fail.cold+0x5/0xa [ 1565.466731] __alloc_pages_nodemask+0x182/0x600 [ 1565.467430] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 1565.468315] ? lock_acquire+0x197/0x470 [ 1565.468900] ? find_held_lock+0x2c/0x110 [ 1565.469505] ? jbd2_transaction_committed+0x111/0x150 [ 1565.470255] ? lock_downgrade+0x6d0/0x6d0 [ 1565.470868] ? ext4_map_blocks+0x87c/0x1910 [ 1565.471507] alloc_pages_current+0x187/0x280 [ 1565.472156] push_pipe+0x2b5/0x6d0 [ 1565.472681] iov_iter_zero+0x418/0xef0 [ 1565.473256] ? ext4_iomap_begin+0x1a0/0x700 [ 1565.473903] ? iov_iter_copy_from_user_atomic+0xdb0/0xdb0 [ 1565.474712] ? ext4_iomap_begin_report+0x5a0/0x5a0 [ 1565.475452] iomap_dio_actor+0x40f/0x560 [ 1565.476051] iomap_apply+0x289/0x810 [ 1565.476596] ? iomap_dio_rw+0x90/0x90 [ 1565.477158] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 1565.478013] ? delete_from_page_cache_batch+0xa30/0xa30 [ 1565.478785] ? mark_held_locks+0x9e/0xe0 [ 1565.479394] ? filemap_check_errors+0xa5/0x150 [ 1565.480069] __iomap_dio_rw+0x6cd/0x1110 [ 1565.480663] ? iomap_dio_rw+0x90/0x90 [ 1565.481235] ? iomap_dio_bio_actor+0xef0/0xef0 [ 1565.481911] ? down_read+0x10f/0x430 [ 1565.482455] ? lock_chain_count+0x20/0x20 [ 1565.483067] ? down_write+0x160/0x160 [ 1565.483628] iomap_dio_rw+0x31/0x90 [ 1565.484163] ext4_file_read_iter+0x2c7/0x4c0 [ 1565.484809] generic_file_splice_read+0x455/0x6d0 [ 1565.485516] ? pipe_to_user+0x170/0x170 [ 1565.486101] ? fsnotify_perm.part.0+0x22d/0x620 [ 1565.486778] ? security_file_permission+0xb1/0xe0 [ 1565.487487] ? pipe_to_user+0x170/0x170 [ 1565.488072] do_splice_to+0x10e/0x160 [ 1565.488631] splice_direct_to_actor+0x2fe/0x980 [ 1565.489306] ? pipe_to_sendpage+0x380/0x380 [ 1565.489938] ? do_splice_to+0x160/0x160 [ 1565.490516] ? security_file_permission+0xb1/0xe0 [ 1565.491229] do_splice_direct+0x1c4/0x290 [ 1565.491835] ? splice_direct_to_actor+0x980/0x980 [ 1565.492529] ? avc_policy_seqno+0x9/0x70 [ 1565.493126] ? security_file_permission+0xb1/0xe0 [ 1565.493838] do_sendfile+0x553/0x11e0 [ 1565.494398] ? do_pwritev+0x270/0x270 [ 1565.494956] ? wait_for_completion_io+0x270/0x270 [ 1565.495658] ? rcu_read_lock_any_held+0x75/0xa0 [ 1565.496329] ? vfs_write+0x354/0xb10 [ 1565.496879] __x64_sys_sendfile64+0x1d1/0x210 [ 1565.497531] ? __ia32_sys_sendfile+0x220/0x220 [ 1565.498197] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1565.498968] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1565.499727] do_syscall_64+0x33/0x40 [ 1565.500260] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1565.500996] RIP: 0033:0x7efcccb57b19 [ 1565.501468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1565.504124] RSP: 002b:00007efcca0cd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1565.504610] audit: type=1326 audit(1751717527.310:1435): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13107 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=57 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1565.505221] RAX: ffffffffffffffda RBX: 00007efcccc6af60 RCX: 00007efcccb57b19 [ 1565.505228] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1565.505235] RBP: 00007efcca0cd1d0 R08: 0000000000000000 R09: 0000000000000000 12:12:07 executing program 2: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x1, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r0, 0x1277, &(0x7f0000000540)={'\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) [ 1565.505241] R10: 00000ffffffff000 R11: 0000000000000246 R12: 0000000000000002 [ 1565.505248] R13: 00007ffdb544bb5f R14: 00007efcca0cd300 R15: 0000000000022000 [ 1565.530706] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1565.569458] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 12:12:07 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xffffffff000) (fail_nth: 25) [ 1565.574802] Process accounting resumed [ 1565.588156] audit: type=1326 audit(1751717527.328:1436): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13107 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1565.591699] audit: type=1326 audit(1751717527.329:1437): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13107 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1565.595750] audit: type=1326 audit(1751717527.329:1438): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13107 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1565.599501] audit: type=1326 audit(1751717527.329:1439): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13107 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1565.603494] audit: type=1326 audit(1751717527.329:1440): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13107 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1565.607402] audit: type=1326 audit(1751717527.330:1441): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13107 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1565.611840] audit: type=1326 audit(1751717527.336:1442): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13107 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 12:12:07 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xc, &(0x7f0000000100)={0x5, 0xfffffffffffffffd}, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x0) [ 1565.630211] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1565.631868] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1565.633674] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1565.658169] Process accounting resumed [ 1565.660480] Process accounting resumed [ 1565.662425] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1565.665142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1565.678984] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1565.685236] FAULT_INJECTION: forcing a failure. [ 1565.685236] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1565.688146] CPU: 1 PID: 13233 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 1565.689543] Process accounting resumed [ 1565.689670] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1565.689679] Call Trace: [ 1565.692639] dump_stack+0x107/0x167 [ 1565.693447] should_fail.cold+0x5/0xa [ 1565.694295] __alloc_pages_nodemask+0x182/0x600 [ 1565.695331] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1565.696517] ? trace_hardirqs_on+0x5b/0x180 [ 1565.697468] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 1565.698786] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1565.700003] ? alloc_pages_current+0x18f/0x280 [ 1565.701017] alloc_pages_current+0x187/0x280 [ 1565.701995] push_pipe+0x2b5/0x6d0 [ 1565.702792] iov_iter_zero+0x418/0xef0 [ 1565.703672] ? ext4_iomap_begin+0x1a0/0x700 [ 1565.704630] ? iov_iter_copy_from_user_atomic+0xdb0/0xdb0 [ 1565.705848] ? ext4_iomap_begin_report+0x5a0/0x5a0 [ 1565.706956] iomap_dio_actor+0x40f/0x560 [ 1565.707863] iomap_apply+0x289/0x810 [ 1565.708690] ? iomap_dio_rw+0x90/0x90 [ 1565.709535] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 1565.710815] ? delete_from_page_cache_batch+0xa30/0xa30 [ 1565.711999] ? mark_held_locks+0x9e/0xe0 [ 1565.712909] ? filemap_check_errors+0xa5/0x150 [ 1565.713927] __iomap_dio_rw+0x6cd/0x1110 [ 1565.714819] ? iomap_dio_rw+0x90/0x90 [ 1565.715687] ? iomap_dio_bio_actor+0xef0/0xef0 [ 1565.716705] ? down_read+0x10f/0x430 [ 1565.717523] ? lock_chain_count+0x20/0x20 [ 1565.718432] ? down_write+0x160/0x160 [ 1565.719289] iomap_dio_rw+0x31/0x90 [ 1565.720095] ext4_file_read_iter+0x2c7/0x4c0 [ 1565.721069] generic_file_splice_read+0x455/0x6d0 [ 1565.722131] ? pipe_to_user+0x170/0x170 [ 1565.723026] ? fsnotify_perm.part.0+0x22d/0x620 [ 1565.724055] ? security_file_permission+0xb1/0xe0 [ 1565.725122] ? pipe_to_user+0x170/0x170 [ 1565.726000] do_splice_to+0x10e/0x160 [ 1565.726843] splice_direct_to_actor+0x2fe/0x980 [ 1565.727879] ? pipe_to_sendpage+0x380/0x380 [ 1565.728834] ? do_splice_to+0x160/0x160 [ 1565.729713] ? security_file_permission+0xb1/0xe0 [ 1565.730785] do_splice_direct+0x1c4/0x290 [ 1565.731705] ? splice_direct_to_actor+0x980/0x980 [ 1565.732766] ? avc_policy_seqno+0x9/0x70 [ 1565.733670] ? security_file_permission+0xb1/0xe0 [ 1565.734746] do_sendfile+0x553/0x11e0 [ 1565.735609] ? do_pwritev+0x270/0x270 [ 1565.736450] ? wait_for_completion_io+0x270/0x270 [ 1565.737517] ? rcu_read_lock_any_held+0x75/0xa0 [ 1565.738542] ? vfs_write+0x354/0xb10 [ 1565.739377] __x64_sys_sendfile64+0x1d1/0x210 [ 1565.740367] ? __ia32_sys_sendfile+0x220/0x220 [ 1565.741386] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1565.742543] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1565.743694] do_syscall_64+0x33/0x40 [ 1565.744518] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1565.745649] RIP: 0033:0x7efcccb57b19 [ 1565.746477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1565.750548] RSP: 002b:00007efcca0cd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1565.752252] RAX: ffffffffffffffda RBX: 00007efcccc6af60 RCX: 00007efcccb57b19 [ 1565.753816] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1565.755403] RBP: 00007efcca0cd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1565.756976] R10: 00000ffffffff000 R11: 0000000000000246 R12: 0000000000000002 [ 1565.758560] R13: 00007ffdb544bb5f R14: 00007efcca0cd300 R15: 0000000000022000 12:12:23 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xffffffff000) (fail_nth: 26) 12:12:23 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)=0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001700)=ANY=[@ANYBLOB="010000009bd77e7d3db3c2", @ANYRES32, @ANYRES32=r2, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c652fe1451d4e7b754bc7f05f0ff404807bf64d176a29993195992c14f39ee8328796f81d1886f6cb48f1ed71a941835b5840190114208ef9dda4756eab00fcd38d0a302906ffc3e8f25260ef7b4e28db855ed9e895bd4b0fbdedef955a9ddf4161dc9347ef97623a3ebf9ca8933a81653dd955d769a92740fbed0519a0fe8fb2bb1420fa5a24997c0cf4682cd464c3bcd44c267b10cfd7565652376257be8c2ef9d94e9ad1d44011543b4d0e2c77577a1157a58a7edab4a0981d3549776f00"/210]) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x4827d9d3570e76e1}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb62) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400ffbd0000"], 0x14}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup(r4) r5 = dup2(r1, r3) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x8010, r5, 0x10000000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@private, @in=@initdev}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000280)=0xe8) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 12:12:23 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fork() tkill(r0, 0x26) waitid(0x3000000000000000, 0x0, 0x0, 0x4, 0x0) 12:12:23 executing program 6: syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1}, @l2cap_cid_le_signaling={{}, @l2cap_disconn_rsp={{0x7, 0x2}, {0x5, 0x10}}}}, 0xffffffffffffffcd) syz_open_dev$evdev(&(0x7f00000001c0), 0x0, 0x4000) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xe3}, "6a3be92ffb2e5df82ce0ef4fe2736064b212afd27fe51ad97047365642ffbeda7232c79b379f1448e215abd9f87bdf817d32c5ca2f26693d97636e0366db4c778878f4f66c50c053de1a471065142b76da19c967d2bba1eb72a6e6fe1fa029f1228370ddd081125f0ac9a22314ff38c980e80a09e22731b9d353051625fc984545cf95bd91b467af86b29f573ff1fc7c7d2cf4d2e5a52eb51eee156b4ffe93f217464ad66ecb687082646c8e1815a95eff90d5346e66f28d5e827ddf512346d1685188e9aef97ea388a08cc1e68a62b0532dfd6f24640f824b32b69b404fb59d25f8fd"}, 0xe7) syz_emit_vhci(&(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT, 0x2) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_hardware_error={{0x10, 0x1}, {0x7}}}, 0x4) syz_emit_vhci(&(0x7f0000000140)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x1, 0xa}, @l2cap_cid_signaling={{0x6}, [@l2cap_info_req={{0xa, 0x1, 0x2}}]}}, 0xf) 12:12:23 executing program 7: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000018c0)=ANY=[@ANYBLOB="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"/370], 0x24}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000dc0)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000008c0)={r2, 0x5, 0x80000001}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="080500988400014637b5e6a174b7b2b317b4044a94da343dd489e684a04f4ca90665864272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab7ea7e76402b517c198dc7ffbdbb38ab65f84f5242824efb291f523ece2d8e79434f9fe77da5ead57c5f16fed9a43b14e466358a6b4c3a1a8361e8199db7e4116e6031e72ada1c25a85ea221f56", @ANYRES16, @ANYBLOB="04002cbd7000fddbdf2575000000c401f08067000b00677cfd4589c7a40e1aae6b18247eb36f74f8f6793b7df9ae3ca9cfb2f5e87ed1ff361592201a1151eabf57ad6fd1950cd215131f67634030aa5f484986ad830a6243bac401c3ee44bff7cea60e881d5f9b616582cf28ec620ccd97d4ceb48c6727530f00050001000100000005000f004000000008000a000000000005000f000400000038010c80050003000300000003010200a207624e07c5690d555d459080990de6741a392aa42eff746330a20bec78fd393092b5f99f54b2a9f6dadb55db3c0846814e79eb43bf7bcd6295c96e7ca16288a8b27c5a225a6d718ad49f0366f969983400ba504c865cca04e4fa00a4b246fa618936f70fe77c1c3e550a5d12d4a9108e7e4216bc693107c3bd4c06e98ec9399de0e98cf205057cbbf688d8a13dc55472fc31954b846e29dbd7d8889b34ead6c83c9b533b666abd65490f2a7e693d55d91f24d5078eb3d34940c02ea1125e7176e254c6bd5531ed067817f0b3278e3dc492571b7da828e728a6fa55742efa33f430739c320b794841adba4c2875044dce9c8959eebe4a5b52d68f9868719f00280004800a000600ffffffffffff00000a000600ffffffffffff00000a000600ffffffffffff00000c01f0800a000200ee90b393fc10000046000b005cbb9f225903f92e0cffa77bd5369da32f70909f5950f26e59525d4d3c41b9e512f4a5d3b7aaaf8a0e03f2aa73274b24a04b4a689bf05844d0d2ad278696b14fb4c50000b4000d80af0000001263800a6541e18dae533feb73677b5c9d5da0ee4d7366d47dd6fa0b14ca33d3433171a533a29930fb5e0d9ff2ca710ab0c8aa4b331d58b4a7b3cac9c9b4ef9e7cdb1d3d6da7f0877a5c3ce7ff9bf9e936b1bcbe732bd9037f9090bfdee1d3e45c7b700e6aefa488eb013b27cd7291a7b927dc10e794490c85dff0cb49a1dd13066b619ace5d6bf763b6858bf07eeb0f5514c3ce6c90d8457d79fcd2a3756ccd66b5194a5c69358e1199219e40ffdd6771943cb3fe33f442ae2ff2002c01f080050003000600000005000300020000000a000200957ccca020ad0000e4000b0049a0db966a0311d932607f2a479e651b881a56f4da7d14bde06c48822b0d353198bb85750dc9f0cca70174b813fe94ea80477bcf9dd6b03b9186edb85c476d8762dc273e83aaee35def167cc1c8faffc0e86fa311d66813cbea7e234d79e9d3acd30b5ae5a264e9576efabc94efd7a18b93eddabd9b046d12df487392f1217b77f05bd72f95130a2bda683b7a64c3d6477e3681d83c5e45e8fdae553114b304417851d9687ab3b9c6c7e91af7744d120000000332c31b35f4358643e4137a9e6b264a14e04605648b50e27e3bb5cbbdaac70655fdff371ece3e08885f0da8d700a000800080211000000000005000100000000000a000800080211000000000005000300c9000000f800f08008000a000100008004000500050010007f0000000a0002005a9cbd08ca8e000014000c800500030008000000050003005e000000c0000b003a3801c2eefaea9df8f27b808f751948873b3fa40dd675c2f1b45ab2dbcdf1903fb052565c23c23d861899509fb26a1f672416325f004d2fdd903c5fa86b4bf1e39074929e71f3a466d345a8e660cd8d401a4772051ab211e24ede74314ef8b7a2c04c8a87b4e5603f7592bc89521d454d3528dce3959d8613c413eafce02151dc1f76a1ace92831610ea0894d9f59407f66cbe556e636be5a3d01253ec1c755495e5196efdf7f155cba102e"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) shutdown(r3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0x50, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x2e}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x674}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xd69}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xfffd}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x50}}, 0x40) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 12:12:23 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xc, &(0x7f0000000100)={0x5, 0xfffffffffffffffd}, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x0) 12:12:23 executing program 4: sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, 0x0, 0x0) r0 = openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)={0x400000, 0x81, 0x17}, 0x18) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000780)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000880)=ANY=[@ANYBLOB="4800000001040101000000000000000005000007080003400000000106000640000700000a000200000000040200000008000440000052e30600064000020000050001000100000049308712afbf28c706f169e93a83c7ec81e7e9e67e2ccb24cbe1acbe78186cdfe64572ad66b373ee58dd156402d51dde2082c232131f00eff2ad55a44ca4ffc358a20cc2dfae15f67bcc00918670a8535f223de35ed68d9a447dc5d9dc81591f87bd57c7d397aed60b2d8f3190252ed55d493f3ffbbb3e93e675ed45a6b54cdd7ae0afc8221afd347f1c89d5bcdd520a5d8eaea336132a51eb813c6bca54a5c9581f62aadf47a7673e5ae7abc72b140ce47680be4f6779fa522da4597bb7ef740b69b4239a5f2c29572179fe53193abbf2fa414c3f530cf1819de04b1dc03afd22331e21ec35e631ec4a4a3ae31cdff8a7bcf500f2f3b3cfe1c9d3e325ab8b7be436b17711fa93e6"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x41) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r1}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x78, r5}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@remote, 0x0, r5}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="8e053f46f4b6ce4f66341d2fc83ff91d9e9b4d42f4f91c6d807525b0fd94785ef463ea97f44a424c7eab7ea3ecebbc1190f5a6f1693e8b96b89eb71598cc20e771d31d4989ce4b9a87da95622afe969643b1daf1ef350934ae6b25c512d69e518c3afcde70b453d6f9863666c53bfdd00031d1470aa2e647bdd3a8bb766a1e445d2d842e9c80b09783823ee22cf620fccfd7c9c868e81a7dfb5488986ed9114c27e61cbbbeaa68dce75e47df29c18fdf34f5d979e433cd3511", 0xb9}], 0x1, &(0x7f0000000340)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @loopback, @loopback}}}, @ip_tos_int={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @multicast2, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0x81}}], 0xa0}}], 0x1, 0x8010) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x2f, 0x8, 0x4, 0x7ff, 0x40, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7, 0x7, 0x1, 0x4}}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="0b00080013192f262f2d0000080000006401010014001000fe8000000000000000000000000000bb08000a00ac1e000100"], 0x120}}, 0x0) 12:12:23 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$BLKTRACESETUP(r1, 0x1277, &(0x7f0000000540)={'\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) fcntl$dupfd(r2, 0x406, r2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="54000000230000032abd7000fedbdf25000000000c001c00", @ANYRES32=0x0, @ANYBLOB="150000000c001c00", @ANYRES32=0x0, @ANYBLOB="01000000080016009467ffff150008001100080001070900ea446c73b20620348100000008000b0008000000"], 0x54}, 0x1, 0x0, 0x0, 0x20008802}, 0x20000000) sendmsg$nl_xfrm(r3, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000001400)=ANY=[@ANYBLOB="580100001a000100fdffffff00000000fc020000000000000000000000000001ac1414bb000000000000000000000000fffd0000000000030000000000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000a300000000000033000000ac1414330000000000000000000000000000000000000000fcffffffffffffff060000000000000000000000000000000000000000040200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000025bd70000000000000000080"], 0x158}}, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000140)={0x2, 0x0, 0x7}) [ 1581.169667] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1581.171530] kauditd_printk_skb: 3 callbacks suppressed [ 1581.171548] audit: type=1326 audit(1751717543.058:1446): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13244 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1581.175394] FAULT_INJECTION: forcing a failure. [ 1581.175394] name failslab, interval 1, probability 0, space 0, times 0 [ 1581.179661] CPU: 1 PID: 13246 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 1581.180641] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1581.181793] Call Trace: [ 1581.182181] dump_stack+0x107/0x167 [ 1581.182687] should_fail.cold+0x5/0xa [ 1581.183235] ? create_object.isra.0+0x3a/0xa20 [ 1581.183870] should_failslab+0x5/0x20 [ 1581.184407] kmem_cache_alloc+0x5b/0x310 [ 1581.184977] create_object.isra.0+0x3a/0xa20 [ 1581.185595] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1581.186302] kmem_cache_alloc+0x159/0x310 [ 1581.186886] jbd2__journal_start+0x190/0x7e0 [ 1581.187510] __ext4_journal_start_sb+0x214/0x390 [ 1581.188180] ext4_dirty_inode+0xbc/0x130 [ 1581.188739] ? ext4_setattr+0x20f0/0x20f0 [ 1581.189320] __mark_inode_dirty+0x492/0xd40 [ 1581.189918] touch_atime+0x5ea/0x6e0 [ 1581.190444] ? atime_needs_update+0x600/0x600 [ 1581.191071] ext4_file_read_iter+0x344/0x4c0 [ 1581.191693] generic_file_splice_read+0x455/0x6d0 [ 1581.192360] ? pipe_to_user+0x170/0x170 [ 1581.192916] ? fsnotify_perm.part.0+0x22d/0x620 [ 1581.193578] ? security_file_permission+0xb1/0xe0 [ 1581.193939] audit: type=1326 audit(1751717543.072:1447): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13244 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=57 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1581.194248] ? pipe_to_user+0x170/0x170 [ 1581.199596] do_splice_to+0x10e/0x160 [ 1581.200124] splice_direct_to_actor+0x2fe/0x980 [ 1581.200771] ? pipe_to_sendpage+0x380/0x380 [ 1581.201367] ? do_splice_to+0x160/0x160 [ 1581.201927] ? security_file_permission+0xb1/0xe0 [ 1581.202596] do_splice_direct+0x1c4/0x290 [ 1581.203189] ? splice_direct_to_actor+0x980/0x980 [ 1581.203848] ? avc_policy_seqno+0x9/0x70 [ 1581.204411] ? security_file_permission+0xb1/0xe0 [ 1581.205087] do_sendfile+0x553/0x11e0 [ 1581.205623] ? do_pwritev+0x270/0x270 [ 1581.206146] ? wait_for_completion_io+0x270/0x270 [ 1581.206815] ? rcu_read_lock_any_held+0x75/0xa0 [ 1581.207461] ? vfs_write+0x354/0xb10 [ 1581.207979] __x64_sys_sendfile64+0x1d1/0x210 [ 1581.208626] ? __ia32_sys_sendfile+0x220/0x220 [ 1581.209265] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1581.210008] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1581.210739] do_syscall_64+0x33/0x40 [ 1581.211260] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1581.211970] RIP: 0033:0x7efcccb57b19 [ 1581.212483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1581.215030] RSP: 002b:00007efcca0cd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1581.216078] RAX: ffffffffffffffda RBX: 00007efcccc6af60 RCX: 00007efcccb57b19 [ 1581.217064] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1581.218054] RBP: 00007efcca0cd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1581.219050] R10: 00000ffffffff000 R11: 0000000000000246 R12: 0000000000000002 [ 1581.220041] R13: 00007ffdb544bb5f R14: 00007efcca0cd300 R15: 0000000000022000 [ 1581.224426] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1581.227122] Bluetooth: hci7: hardware error 0x07 [ 1581.237530] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1581.241352] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.4'. 12:12:23 executing program 6: write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x10) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000340)) perf_event_open(&(0x7f0000001500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x3, 0x1, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001640)) r0 = syz_open_procfs(0x0, &(0x7f0000001580)='net/snmp\x00') readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001780)=""/251, 0xfb}, {&(0x7f0000001880)=""/102, 0x66}, {&(0x7f0000001900)=""/130, 0x82}, {&(0x7f00000019c0)=""/95, 0x5f}], 0x4) readv(r0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4095, 0xfff}], 0x17) syz_open_procfs(0x0, &(0x7f0000000280)='fd/4\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000001e00)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="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"]) getdents(r1, &(0x7f0000000380)=""/215, 0xd7) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)={'U-', 0x7fffffff}, 0x16, 0x2) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0/file1\x00', 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000001740)={0x40002000}) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) fsetxattr$security_selinux(r2, &(0x7f0000000240), &(0x7f00000002c0)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x6a4e5309ea842515) openat$bsg(0xffffffffffffff9c, &(0x7f00000014c0), 0x103, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) unshare(0x48020200) [ 1581.281082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1581.283130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1581.285043] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1581.311552] sysfs: cannot create duplicate filename '/class/ieee80211/€˜§°ÇÛ ”uòQÇC !' [ 1581.313911] CPU: 0 PID: 13256 Comm: syz-executor.4 Not tainted 5.10.239 #1 [ 1581.315672] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1581.317779] Call Trace: [ 1581.318450] dump_stack+0x107/0x167 [ 1581.319392] sysfs_warn_dup.cold+0x1c/0x29 [ 1581.320455] sysfs_do_create_link_sd+0x122/0x140 [ 1581.321652] sysfs_create_link+0x5f/0xc0 [ 1581.322680] device_add+0x703/0x1c50 [ 1581.323634] ? devlink_add_symlinks+0x970/0x970 [ 1581.324806] ? ieee80211_set_bitrate_flags+0x202/0x620 [ 1581.326125] wiphy_register+0x1da6/0x2850 [ 1581.327166] ? wiphy_unregister+0xb90/0xb90 [ 1581.328275] ? ieee80211_register_hw+0x17e9/0x38b0 [ 1581.329510] ? check_memory_region+0x198/0x1f0 [ 1581.330661] ieee80211_register_hw+0x23c5/0x38b0 [ 1581.331884] ? ieee80211_ifa6_changed+0x4d0/0x4d0 [ 1581.333093] ? net_generic+0xdb/0x2b0 [ 1581.334063] ? lockdep_init_map_type+0x2c7/0x780 [ 1581.335268] ? memset+0x20/0x50 [ 1581.336101] ? __hrtimer_init+0x12c/0x270 [ 1581.337173] mac80211_hwsim_new_radio+0x1d04/0x4290 [ 1581.338433] ? hwsim_send_nullfunc_ps+0x80/0x80 [ 1581.339588] ? hwsim_new_radio_nl+0x967/0x1080 [ 1581.340719] ? memcpy+0x39/0x60 [ 1581.341541] hwsim_new_radio_nl+0x991/0x1080 [ 1581.342638] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 1581.343950] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 1581.345584] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 1581.347181] genl_family_rcv_msg_doit+0x22d/0x330 [ 1581.348372] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 1581.350003] ? cap_capable+0x1cd/0x230 [ 1581.350993] ? ns_capable+0xe2/0x110 [ 1581.351934] genl_rcv_msg+0x36a/0x5a0 [ 1581.352891] ? genl_get_cmd+0x480/0x480 [ 1581.353884] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 1581.355194] ? lock_release+0x680/0x680 [ 1581.356182] ? __lockdep_reset_lock+0x180/0x180 [ 1581.357343] netlink_rcv_skb+0x14b/0x430 [ 1581.358351] ? genl_get_cmd+0x480/0x480 [ 1581.359345] ? netlink_ack+0xab0/0xab0 [ 1581.360318] ? netlink_deliver_tap+0x1c4/0xcc0 [ 1581.361448] ? is_vmalloc_addr+0x7b/0xb0 [ 1581.362454] genl_rcv+0x24/0x40 [ 1581.363276] netlink_unicast+0x54e/0x800 [ 1581.364286] ? netlink_attachskb+0x870/0x870 [ 1581.365388] netlink_sendmsg+0x90f/0xe00 [ 1581.366398] ? netlink_unicast+0x800/0x800 [ 1581.367467] ? netlink_unicast+0x800/0x800 [ 1581.368517] __sock_sendmsg+0x154/0x190 [ 1581.369501] ____sys_sendmsg+0x70d/0x870 [ 1581.370507] ? sock_write_iter+0x3d0/0x3d0 [ 1581.371567] ? do_recvmmsg+0x6d0/0x6d0 [ 1581.372524] ? perf_trace_lock+0xd1/0x490 [ 1581.373561] ? __lockdep_reset_lock+0x180/0x180 [ 1581.374704] ___sys_sendmsg+0xf3/0x170 [ 1581.375675] ? sendmsg_copy_msghdr+0x160/0x160 [ 1581.376796] ? __fget_files+0x2cf/0x520 [ 1581.377768] ? lock_downgrade+0x6d0/0x6d0 [ 1581.378779] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1581.380103] ? trace_hardirqs_on+0x5b/0x180 [ 1581.381158] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1581.382497] ? __fget_files+0x2f8/0x520 [ 1581.383486] ? __fget_light+0xea/0x290 [ 1581.384448] __sys_sendmsg+0xe5/0x1b0 [ 1581.385378] ? __sys_sendmsg_sock+0x40/0x40 [ 1581.386439] ? io_schedule_timeout+0x140/0x140 [ 1581.387583] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1581.388872] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1581.390125] ? trace_hardirqs_on+0x5b/0x180 [ 1581.391188] do_syscall_64+0x33/0x40 [ 1581.392087] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1581.393334] RIP: 0033:0x7f4e3f5dbb19 [ 1581.394233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1581.398713] RSP: 002b:00007f4e3cb51188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1581.400565] RAX: ffffffffffffffda RBX: 00007f4e3f6eef60 RCX: 00007f4e3f5dbb19 [ 1581.402292] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000007 [ 1581.404031] RBP: 00007f4e3f635f6d R08: 0000000000000000 R09: 0000000000000000 [ 1581.405754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1581.407488] R13: 00007ffece0122ef R14: 00007f4e3cb51300 R15: 0000000000022000 [ 1581.419904] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. 12:12:23 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xffffffff000) (fail_nth: 27) 12:12:23 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xc, &(0x7f0000000100)={0x5, 0xfffffffffffffffd}, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x0) 12:12:23 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fork() tkill(r0, 0x26) waitid(0x4800000000000000, 0x0, 0x0, 0x4, 0x0) [ 1581.462392] FAULT_INJECTION: forcing a failure. [ 1581.462392] name failslab, interval 1, probability 0, space 0, times 0 [ 1581.465248] CPU: 0 PID: 13375 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 1581.466871] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1581.468824] Call Trace: [ 1581.469447] dump_stack+0x107/0x167 [ 1581.470302] should_fail.cold+0x5/0xa [ 1581.471201] ? iter_file_splice_write+0x165/0xc90 [ 1581.472327] should_failslab+0x5/0x20 [ 1581.473207] __kmalloc+0x72/0x390 [ 1581.474022] iter_file_splice_write+0x165/0xc90 [ 1581.475130] ? generic_splice_sendpage+0x140/0x140 [ 1581.476265] ? pipe_to_user+0x170/0x170 [ 1581.477210] ? security_file_permission+0xb1/0xe0 [ 1581.478333] ? generic_splice_sendpage+0x140/0x140 [ 1581.479477] direct_splice_actor+0x10f/0x170 [ 1581.480501] splice_direct_to_actor+0x387/0x980 [ 1581.481586] ? pipe_to_sendpage+0x380/0x380 [ 1581.482591] ? do_splice_to+0x160/0x160 [ 1581.483517] ? security_file_permission+0xb1/0xe0 [ 1581.484644] do_splice_direct+0x1c4/0x290 [ 1581.485602] ? splice_direct_to_actor+0x980/0x980 [ 1581.486709] ? avc_policy_seqno+0x9/0x70 [ 1581.487667] ? security_file_permission+0xb1/0xe0 [ 1581.488785] do_sendfile+0x553/0x11e0 [ 1581.489673] ? do_pwritev+0x270/0x270 [ 1581.490549] ? wait_for_completion_io+0x270/0x270 [ 1581.491677] ? rcu_read_lock_any_held+0x75/0xa0 [ 1581.492749] ? vfs_write+0x354/0xb10 [ 1581.493608] __x64_sys_sendfile64+0x1d1/0x210 [ 1581.494636] ? __ia32_sys_sendfile+0x220/0x220 [ 1581.495699] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1581.496906] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1581.498100] do_syscall_64+0x33/0x40 [ 1581.498959] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1581.500146] RIP: 0033:0x7efcccb57b19 [ 1581.501002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1581.505210] RSP: 002b:00007efcca0cd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1581.506955] RAX: ffffffffffffffda RBX: 00007efcccc6af60 RCX: 00007efcccb57b19 [ 1581.508589] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1581.510217] RBP: 00007efcca0cd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1581.511846] R10: 00000ffffffff000 R11: 0000000000000246 R12: 0000000000000002 [ 1581.513470] R13: 00007ffdb544bb5f R14: 00007efcca0cd300 R15: 0000000000022000 [ 1581.515380] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1581.516295] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1581.517227] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1581.530488] audit: type=1326 audit(1751717543.417:1448): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13376 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1581.540061] audit: type=1326 audit(1751717543.425:1449): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13376 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=57 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 12:12:23 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r0, 0x1277, &(0x7f0000000540)={'\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x400) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x850, 0x1) 12:12:23 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)=0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001700)=ANY=[@ANYBLOB="010000009bd77e7d3db3c2", @ANYRES32, @ANYRES32=r2, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c652fe1451d4e7b754bc7f05f0ff404807bf64d176a29993195992c14f39ee8328796f81d1886f6cb48f1ed71a941835b5840190114208ef9dda4756eab00fcd38d0a302906ffc3e8f25260ef7b4e28db855ed9e895bd4b0fbdedef955a9ddf4161dc9347ef97623a3ebf9ca8933a81653dd955d769a92740fbed0519a0fe8fb2bb1420fa5a24997c0cf4682cd464c3bcd44c267b10cfd7565652376257be8c2ef9d94e9ad1d44011543b4d0e2c77577a1157a58a7edab4a0981d3549776f00"/210]) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x4827d9d3570e76e1}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb62) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400ffbd0000"], 0x14}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup(r4) r5 = dup2(r1, r3) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x8010, r5, 0x10000000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@private, @in=@initdev}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000280)=0xe8) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 12:12:23 executing program 7: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000018c0)=ANY=[@ANYBLOB="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"/370], 0x24}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000dc0)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000008c0)={r2, 0x5, 0x80000001}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="080500988400014637b5e6a174b7b2b317b4044a94da343dd489e684a04f4ca90665864272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab7ea7e76402b517c198dc7ffbdbb38ab65f84f5242824efb291f523ece2d8e79434f9fe77da5ead57c5f16fed9a43b14e466358a6b4c3a1a8361e8199db7e4116e6031e72ada1c25a85ea221f56", @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) shutdown(r3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0x50, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x2e}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x674}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xd69}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xfffd}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x50}}, 0x40) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 12:12:23 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000100)=0x3f, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0002005efe1aff99f80000002a94220eeb00"/36], 0x1c}}, 0x0) 12:12:23 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = fork() tkill(r0, 0x26) waitid(0x1, r0, &(0x7f0000000100), 0x4, &(0x7f0000000500)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1277, &(0x7f0000000540)={'\x00', 0x0, 0x0, 0x100000, 0x0, 0x0, r0}) [ 1581.646116] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 12:12:23 executing program 4: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f00000008c0)={{r0}, "618c4faf97da639c735d89d91780970cb237992c698950fd2a9ba2f98d634f6e0e981b948dcea7c58726589b979525b6fffedb9fba9bec5550e23aaed46f45e880eced21d3b9a6e72a8dcbb72729e87d8a4612b809da70a8676f9fbc80076593860e16fafc339dd49b8eb14b02d6ac891719153fc72b2e4b4b08ed834aafa5f3eef7ebccbb8a3e7cd6b28d1d9e445e69711106b94b6d21c04022c81c9130cd69718369df47efb6d5ad3eacbd1f57ff81a90531a722d1880cd5a0e7f037dd750d6f78a030f3df6aae1507a5f96427eaa53eab72781b8269336d2a4094807666b302a4aa6d2320947b7dba8196f4fbdf2fd1c1cc31daad3012cf8e5da57866691ca9495f3a6ff0048d92a58803e02cb9e48d1558e1ff17d87751770939632be99a972e9ddd42685b922b4f9bf336b5a20fda5aa0c92977d7f6ab63af2b64a293f98856d5c22f207de813f7af96e1a325ff8c0e76dc3684811e0236c964e3ea773181986e1c282e9b0cb3f64822412c6c68f2367fb03c17cac3981cc9117d532264c4edb0e54e1cfdc13576f4b11069d3fb183ffd965562730ed9c95abdf3bd127848a7d03b8f8071b52e773e41e899fd6fc88ce5cc265b03a6813d348b31ddd399647854bbccc04b18bffcb8663c7d1e1f1bb1dd3c18b9e736dcf824216ba81837d7f267df5496daa80d25f083acd98814ac39d744675d91464667c85a9e17657e3cc46aa93f9295fe598368a57d335ee193958d51df033a76ac47c2bf9be973553d82d259ff6b3cba6bb13fce94293bf3ea6c684bd18c85d48bcd8e63ff8a1598409cf01642349eb29c798b88ea7d2b0c5e458a61d779f96b8b991f77c6d095868bdbbd0eb69a21f57b8c10e1e57bf72a691bc4d8a6782cc6a755f0d685919a7b010ecb0c7fe4dc51e9f0b761a6a30a2263a08c6b803b724da37025c821555254e70560d04ffb499d9ba48182e7dc3b9cbf5a60d916ff28d825cd34be484e2d837dde86e100c3309e3532883662de67ebb27ab71be6fa0c9721ad800215e2700d17077d99c75636bde86915c365ca118948deabb34d75571acbd64282b37943fa9816181f331e323e85f325e8b19d980e836d6c8c7bc89f6a9e4074a082f240ce5933c580304ab2507e514127e6858fb201affbeedc699eaae5ab45c044fadc3d9894da8c6c6608028e0d64835fdebae75a0ccecbc373476e41fa1f03ef5399d456be80fa52dc078c10139d00a37fb5239ce3bdbd268f11736c85c5730dce168f5806f90741010a57154248268b28a075d6a1d8f48356db88b5981c1b033a9c93783962bb8bfe2385455206076b4655de625ee29755d1194bd46509656c5e0dbd342d768808b20bdbcf6df075eab5b720bafc8fc3f9ca87c8bafe43068a85432bd8635f0638e4bb420e155e906ce9dd884d149dd2fb3a650f87422709807742593018193a33bf2b859209172a1cb0e80b867de33f7a37c5b37cb97f57c58536fd86d728384cc7e05e6756a7b11ea1125c7f376fdd3918808f48a273accfffbc66a4688f5084b612abd0d62ff19acd0f897670d942e9fdad4e6a5767029ac45cf6acc4b50d5d5871a1f2aa9f9c364e342c6ae30f5ffe8c52b4d3d3d338e917d5f2a56e3cbd28624a7c24ac53599c48c200fbc152ca93c6d59525a4a648b1a0c0e011c6b71a2922097802402106982f46fbd9039b3a35856aaf1f64cacdd701cde0b9206c993176c695d8e446eee0638877d8f9051c013478b331bf4375068531b82e85090fa7d61c71b9715fe9a994a7a6cc64cee041ab325fb233de7fe6be3dc58eaee5ecce45d800b408c50ee5bc1401b391f2303a5c975053c6c76079493466ea0d5fe302abd5fae604efe1352c70e8783ef30f33585e010be759bd948faf2963fdd036346fd568f85e65d977e18805444f1bdcc5dcd1de821258e26bddc8a79f8f8f0d601c3c3241903f189f33d2e063185031d5fcc30fe1674b228f771c8e5f2f6340aab0ddd00615fbbabe79c9d6a2a15c1827c60c30286a6c985479865a95d64dbe319bc863a3892705266c881aede0927a8d70914a722143115a32039cb959fded163c117bc3bc656e4d8c246ac377de932942ea331a9d5753bdf6f2e17ed100461d0b8c8df67ae6cf9ea7fa075a067a8c65835ed10ad68d6323462720df2e1f5ade653077b2b93b4ac63b9da02470453abde891ad66bd6e316df379492e2a19fbe2453867bd433bb215306aee627ad058ae8a7490f9290b7a677858484cd7442cf3ef9a6d166a78c5a67217fc3d00d0cc71997e5cab2067e650b93bb91d5e8a4f9bf06164e7993d749354e84f2583ce0a4426d0b8ecc0e7049ed63059b78c509df8b65b2a66891869c4a1d39cc5cf0d9d582a3f257279c2cbb97bdf6e3e31f1e1cf3a72dc07575c06666402fdca6e1837bcdeea33ba0a8bc2c9836234dfa3edefd3fe1183f512be7a5f8f5e6e7fc9b8fc7a68f0e54e96f54f85227fcad8003406f573bf0edf6ef6f49c7ff7eea2d09c940cf3a1b2319cc2986f5e870ccd1121a3af6ffb60122bdd26926a4101237b6954e0491550dc7c86124b941b57c1910976b1847e6991acac4e95f66a524234461a305bf9692701b9413746e999746b89782ecafb2d025813b50e0e1f24ad1ab886d7254e4ca0f5e95e84e437a6aa22ed9e124a9a3265702f4da365bbef4a108ec5ab3340b52baff9b6bec7bbd35d8567d1b51a21b7bddca21d300fbfa897ab9b83f657b76711bf46acf973ca379a9606410c2e933884d85239ac418023be5a0eb7bea118f4ef603ac8e32f0ba28c5a7c7954f8112cc4fa232bf69c63c64c2fd4c3ec960ef3ea40354df17c1dbe9ee30a63ad5738f6fb4a50b3c84ff8226c35195bcd02a4e8784c074b6d22da8cc4ef8fce30d556443b59a1e904f77974ec608cae1440ba6e82553d37589606fb5a21687f91f2c4d80c41ead39f70fedfce9f2432b99bb79907e9006a4588d7e824437a6426bce8efe30ed057e9324e43a0eef8effb8d9c050390bc37fb362eff53cc7597ec089d0005dc3fb09a22855b16f05daa86a4f700f0d3a29d401cafea19640b710be49bfef966610fe729b61d4e2dde155b29ab1ae0c856099689580b80dcd88e7390c4ced18985ed1e106f07386a6277db8b8a3f58ecbfa3f3e8fb9e8149a9aaa72006ff8e2cd4cd1dcc7f31265b64c19f25b0fdecabfec10127f61b539dcdcc7948c0747d03aaf9eec519e38dab80628ded7dab70bd15092fa7be36535d17e8953fdfab40d4536eaf701fa4fbdd274bad1a08114fc71c6b6c672c5817da4f5fad26c4af8140d09dc6b60486c4131de2e782d7126e029170f51f3bd7df03a51aa679a99607fedd9ce93c7779b9c0d78657c86e1a8ba6a640b6703e1c54c192a85ef7eeae31e0b64ea23d38517abc2155e001587a7d8cef8b44b67946ed20660e2e050e88ad9d223793aa6ff21e607e3bcc044dc200b2a89956d0c22a89d7a60cdf5657ae72f47d6518b6ad05253962afb4c1dd65c3bbe80ad256b71a2a250875c176beefb087396209aed745ae100e55dde8d531af87e29394d8a0dcb68d2c1adbc0dc6dd98fc92fd1c0d08dc7ee21c32431afd234c3b0a36db9fdb37993ed8d9021250184c2f6c24bafcb7c916214d68aae34ce0b7a9d379dbb13acfe77567b43be46cd0c72f21208d02d7888ec9d3cf5bb19aef0b68ec21ae475a26ace76ca392078d35dbfb559c0ee41a70df85e731c4b6122e30f494bbfc3c93c69488f075bae0daa742d8fab382fe52a7ce070a6e8186570046e180ee5a9389272e33bb347a4d964bc675f8ffb439548e5115320a9e59e1571ae0767c06b93933598c5a5f8b5f331d0d00a91cba413631882c6a29a7c5c5a3e2f2c799c46b601d29bd04eb752c2e341036b822c57b2cd0a87cf8f19b877afc352257a7fb899f0aaba82193979e7cf981097cabc4af5ee0a94a2884387dabd36309960b829cb50699f7d9453e8ff805bb9b1ceb4dcc1351ddc0bc8181b607eee4366eaaa474d4dc53a0cbcf691aec2fae048ba031dec39076338f6a0f4bc33790a34f439feeb801655b91784b53096b29ab07d8833c7024eea3103b7b7cbe89072c9e5007e24950425e1f4b3fcf7a1f7367df8bcde68c41990933c2264c05c719098fb126488fd04cc3f1dccacc8e6b1d40cdfc5ea2ffda590c523351fb748664dd855ae371a744b8b2bf999537ca6134f4af1a437e54c540d1f1c6d66d07fd87710c00209c06824ab2a2599882a8d3bf47eceb6d49830bdf4f0b0500fcc3f6f308eb038a69d9fee7196fe942841244ce58ab825eeaab75129f54f1d873be78140aaed9a7f757fc6b1a182df9b354db1b495b116662ef189cc4f3256314ec33b44c383256bf6eb5a2651cc3fd70b100628a66f99818dfc5ed390eaa5ccc25d4add74dd92a4f9a3c6347d14b67c6196c2423a05b4098bb36f3718dd483487645a623e1d3685e741963b77c225ddb950ab87351594ccfab5f719fb6ca3e7cb031c946d1bb4cf8b673c700cd7fa6832ccce64a3a1cc40dd11eaa20835d9e65bb89c3f9726c33b8d99cc1b5bff43aef214081ca69843f0de276caaff4845fb7660b55d9b09b56d734f94e3147bcb7a1144ac672248f0e8333c499551133dfff92ffb53036377ef660b14f9a73854297489a7cfbf8af3cdee83b1419140e4333db3d2544d4a24b881df5016ceed0511b90cb88bd27591aee28e018c533cfe3bf5737cde2d31f8cc68018c5a1b0684181590c6a7c6f0dad83901732ab66b85b686ce632ba22527327237b6e0edca638d9b5a6ee1a831288793033868bcc19b913998c65ca3f32e805af552eccb6cc648b4e31d0b31f2faf7ba051da10490dd855ba7931171df5ce219c0f004d6f1fd51a9c6e4644e7138a10892ca7466adcbb69cabd70258dd9fb7c0f366a3b98dea097d0e524dbc1f5a8b3ddb84fe1f12b60e978287d101a7166885e24d4e9fb2443c9c6d96335657e81d328de0281f37e08cd782d5456334ad78e6380889b31ec005e5aa030732c94ea7ed0b9cd91cdd570c72dbd67f246ec10e42390fdc3b2b9361d951031d45f1820a04d5ec6f333c54d5909184c84cd57e521707392bb1edc428c83168fbace40691fd25f57d0a6b16515885c05558ff967877277209284b93c7dbd3b3ede4c714d1e9c460ab300a519f741c9b18ce43b19d0759b4daea9c5cd0dfeb4c5b0db95a5d72e4c2a11e229e140bf027e18f565ef1e3142b6f6e4368e89561cf3a810a61e9de779381ee7bbdbfaef4a45841e0163244cec748881d292d4c5fed11070de62a6a302a7f8002c1726ed770916af3a441ccd417fcc044ef705e420abce69673111e7dfc48ba4299103fb902044f0a2773856efdec001aa01258a5e778e62f748a8ad0db11be8c041bbd82ea9b2ef604db41b927f7d95f8b4a207af87d18685e9f36afe40f2580260ac18eae9e27fa5ff55999b901ebffb7651a3df8a6113cbdb28e609c8a3eefecbe57c4846b5e24d46c9c111f9db65f958bda005480e04bcd84fc286903490c7ed17aad270138088096b13adb2e99361c0aab2ca86d8d60f2942b08e60816e8d752435cca7a8d0586c25eff3edea8a33ab3a4d297eed26a2e98f2573ee2daf3f9eeb7f88d7260a83cd4219458804b520858191cd54c8a6968a9367d37840924af63c613bb9005358d4120bd1cf6ec464a76568ce3a18464eb5e47ea751b8c9dca4b17f2547b9c43788cd10f81d239b79443d6231d507588ab2f064fe36399ccd13cbd30"}) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f00000000c0)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x34, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @pid}]}, @nested={0xc, 0x27, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}]}, 0x34}}, 0x0) r2 = timerfd_create(0x8, 0x800) accept$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, &(0x7f0000000100)=0x10) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, 0x12, 0xc21}, 0x14}}, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) sendmsg$TIPC_NL_LINK_RESET_STATS(r5, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}]}]}, 0x24}}, 0x4000) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001d00210c0000000b0000000004000200080000f681e1b400000000008c0694e49b920301e7a9b36365e2a29b70898acdd1804f5a6c8a493b505928a3d84c21d43ef4cc1e65297e1510ae0b1765caa5ba91b22867c75b560309474e9f02989305eff56a5f5f173ae48f36dc3942d9190ee6985d05ff7033933c96d26b1faacb133445460a332aeb8955ae3f4b897e8be3729abceb60c8ebca947c16e27613f2dae979c304edc22a455620e7ced5ca357904752286654b86b9d06d50e52175680c27510dd6fa543524f34c56ae30"], 0x1c}}, 0x0) 12:12:23 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xffffffff000) (fail_nth: 28) [ 1581.692333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1581.694123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1581.695939] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1581.698121] audit: type=1326 audit(1751717543.584:1450): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13376 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1581.702025] FAULT_INJECTION: forcing a failure. [ 1581.702025] name failslab, interval 1, probability 0, space 0, times 0 [ 1581.705497] CPU: 1 PID: 13448 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 1581.705503] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1581.705507] Call Trace: [ 1581.705523] dump_stack+0x107/0x167 [ 1581.705535] should_fail.cold+0x5/0xa [ 1581.705549] ? create_object.isra.0+0x3a/0xa20 [ 1581.705562] should_failslab+0x5/0x20 [ 1581.705572] kmem_cache_alloc+0x5b/0x310 [ 1581.705586] create_object.isra.0+0x3a/0xa20 [ 1581.705595] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1581.705608] kmem_cache_alloc+0x159/0x310 [ 1581.705624] jbd2__journal_start+0x190/0x7e0 [ 1581.705638] __ext4_journal_start_sb+0x214/0x390 [ 1581.705652] ext4_dirty_inode+0xbc/0x130 [ 1581.705660] ? ext4_setattr+0x20f0/0x20f0 [ 1581.705669] __mark_inode_dirty+0x492/0xd40 [ 1581.705684] touch_atime+0x5ea/0x6e0 [ 1581.705695] ? atime_needs_update+0x600/0x600 [ 1581.705713] ext4_file_read_iter+0x344/0x4c0 [ 1581.705727] generic_file_splice_read+0x455/0x6d0 [ 1581.705738] ? pipe_to_user+0x170/0x170 [ 1581.705755] ? fsnotify_perm.part.0+0x22d/0x620 [ 1581.705768] ? security_file_permission+0xb1/0xe0 [ 1581.705779] ? pipe_to_user+0x170/0x170 [ 1581.705794] do_splice_to+0x10e/0x160 [ 1581.705806] splice_direct_to_actor+0x2fe/0x980 [ 1581.705820] ? pipe_to_sendpage+0x380/0x380 [ 1581.705833] ? do_splice_to+0x160/0x160 [ 1581.705842] ? security_file_permission+0xb1/0xe0 [ 1581.705858] do_splice_direct+0x1c4/0x290 [ 1581.705869] ? splice_direct_to_actor+0x980/0x980 [ 1581.705877] ? avc_policy_seqno+0x9/0x70 [ 1581.705891] ? security_file_permission+0xb1/0xe0 [ 1581.705908] do_sendfile+0x553/0x11e0 [ 1581.705926] ? do_pwritev+0x270/0x270 [ 1581.705938] ? wait_for_completion_io+0x270/0x270 [ 1581.705951] ? rcu_read_lock_any_held+0x75/0xa0 [ 1581.705960] ? vfs_write+0x354/0xb10 [ 1581.705973] __x64_sys_sendfile64+0x1d1/0x210 [ 1581.705983] ? __ia32_sys_sendfile+0x220/0x220 [ 1581.705997] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1581.706008] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1581.706020] do_syscall_64+0x33/0x40 [ 1581.706030] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1581.706038] RIP: 0033:0x7efcccb57b19 [ 1581.706049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1581.706054] RSP: 002b:00007efcca0cd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1581.706068] RAX: ffffffffffffffda RBX: 00007efcccc6af60 RCX: 00007efcccb57b19 [ 1581.706074] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1581.706081] RBP: 00007efcca0cd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1581.706088] R10: 00000ffffffff000 R11: 0000000000000246 R12: 0000000000000002 [ 1581.706094] R13: 00007ffdb544bb5f R14: 00007efcca0cd300 R15: 0000000000022000 [ 1581.708019] audit: type=1326 audit(1751717543.594:1451): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13376 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 12:12:23 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xffffffff000) (fail_nth: 29) [ 1581.781589] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1581.809251] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 1581.811346] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 12:12:23 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r0, 0x1277, &(0x7f0000000540)={'\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) [ 1581.827187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1581.828138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1581.829024] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1581.842022] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13504 comm=syz-executor.4 [ 1581.860220] FAULT_INJECTION: forcing a failure. [ 1581.860220] name failslab, interval 1, probability 0, space 0, times 0 [ 1581.863315] CPU: 0 PID: 13506 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 1581.865018] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1581.867057] Call Trace: [ 1581.867716] dump_stack+0x107/0x167 [ 1581.868611] should_fail.cold+0x5/0xa [ 1581.869547] ? iter_file_splice_write+0x165/0xc90 [ 1581.870731] should_failslab+0x5/0x20 [ 1581.871669] __kmalloc+0x72/0x390 [ 1581.872529] iter_file_splice_write+0x165/0xc90 [ 1581.873684] ? generic_splice_sendpage+0x140/0x140 [ 1581.874884] ? pipe_to_user+0x170/0x170 [ 1581.875894] ? security_file_permission+0xb1/0xe0 [ 1581.877073] ? generic_splice_sendpage+0x140/0x140 [ 1581.878283] direct_splice_actor+0x10f/0x170 [ 1581.879373] splice_direct_to_actor+0x387/0x980 [ 1581.880523] ? pipe_to_sendpage+0x380/0x380 [ 1581.881584] ? do_splice_to+0x160/0x160 [ 1581.882562] ? security_file_permission+0xb1/0xe0 [ 1581.883759] do_splice_direct+0x1c4/0x290 [ 1581.884779] ? splice_direct_to_actor+0x980/0x980 [ 1581.885961] ? avc_policy_seqno+0x9/0x70 [ 1581.886967] ? security_file_permission+0xb1/0xe0 [ 1581.888161] do_sendfile+0x553/0x11e0 [ 1581.889095] ? do_pwritev+0x270/0x270 [ 1581.890018] ? wait_for_completion_io+0x270/0x270 [ 1581.891194] ? rcu_read_lock_any_held+0x75/0xa0 [ 1581.892325] ? vfs_write+0x354/0xb10 [ 1581.893236] __x64_sys_sendfile64+0x1d1/0x210 [ 1581.894332] ? __ia32_sys_sendfile+0x220/0x220 [ 1581.895459] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1581.896737] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1581.898006] do_syscall_64+0x33/0x40 [ 1581.898918] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1581.900178] RIP: 0033:0x7efcccb57b19 [ 1581.901085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1581.905725] RSP: 002b:00007efcca0cd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1581.907593] RAX: ffffffffffffffda RBX: 00007efcccc6af60 RCX: 00007efcccb57b19 [ 1581.909354] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1581.911093] RBP: 00007efcca0cd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1581.912838] R10: 00000ffffffff000 R11: 0000000000000246 R12: 0000000000000002 [ 1581.914573] R13: 00007ffdb544bb5f R14: 00007efcca0cd300 R15: 0000000000022000 [ 1581.970530] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 1581.971941] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. 12:12:37 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r2 = fcntl$dupfd(r1, 0x406, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r0, 0x8000, 0xfffffffffffffffb}) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {0x6}}, './file0\x00'}) open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x2000) getdents64(r4, &(0x7f0000000a80)=""/224, 0x3c) [ 1596.091736] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1596.097762] FAULT_INJECTION: forcing a failure. [ 1596.097762] name failslab, interval 1, probability 0, space 0, times 0 [ 1596.100469] CPU: 0 PID: 13519 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 1596.101969] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1596.104012] Call Trace: [ 1596.104590] dump_stack+0x107/0x167 [ 1596.105382] should_fail.cold+0x5/0xa [ 1596.106212] ? alloc_pipe_info+0x10a/0x590 [ 1596.107133] should_failslab+0x5/0x20 [ 1596.107971] kmem_cache_alloc_trace+0x55/0x320 [ 1596.109086] alloc_pipe_info+0x10a/0x590 [ 1596.109972] splice_direct_to_actor+0x774/0x980 [ 1596.110984] ? _cond_resched+0x10/0x30 [ 1596.111833] ? inode_security+0x107/0x140 [ 1596.112723] ? pipe_to_sendpage+0x380/0x380 [ 1596.113652] ? avc_policy_seqno+0x9/0x70 [ 1596.114526] ? selinux_file_permission+0x92/0x520 [ 1596.115576] ? do_splice_to+0x160/0x160 [ 1596.116437] ? security_file_permission+0xb1/0xe0 [ 1596.117485] do_splice_direct+0x1c4/0x290 [ 1596.118369] ? splice_direct_to_actor+0x980/0x980 [ 1596.119403] ? avc_policy_seqno+0x9/0x70 [ 1596.120272] ? security_file_permission+0xb1/0xe0 [ 1596.121312] do_sendfile+0x553/0x11e0 [ 1596.122131] ? do_pwritev+0x270/0x270 [ 1596.122940] ? wait_for_completion_io+0x270/0x270 [ 1596.123974] ? rcu_read_lock_any_held+0x75/0xa0 [ 1596.124960] ? vfs_write+0x354/0xb10 [ 1596.125759] __x64_sys_sendfile64+0x1d1/0x210 [ 1596.126716] ? __ia32_sys_sendfile+0x220/0x220 [ 1596.127705] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1596.128822] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1596.129909] do_syscall_64+0x33/0x40 [ 1596.130674] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1596.131735] RIP: 0033:0x7faa9a814b19 [ 1596.132505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1596.136314] RSP: 002b:00007faa97d8a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1596.137886] RAX: ffffffffffffffda RBX: 00007faa9a927f60 RCX: 00007faa9a814b19 [ 1596.139358] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1596.140800] RBP: 00007faa97d8a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1596.142257] R10: 00000ffffffff000 R11: 0000000000000246 R12: 0000000000000001 [ 1596.143715] R13: 00007ffe551f30cf R14: 00007faa97d8a300 R15: 0000000000022000 12:12:37 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)=0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001700)=ANY=[@ANYBLOB="010000009bd77e7d3db3c2", @ANYRES32, @ANYRES32=r2, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c652fe1451d4e7b754bc7f05f0ff404807bf64d176a29993195992c14f39ee8328796f81d1886f6cb48f1ed71a941835b5840190114208ef9dda4756eab00fcd38d0a302906ffc3e8f25260ef7b4e28db855ed9e895bd4b0fbdedef955a9ddf4161dc9347ef97623a3ebf9ca8933a81653dd955d769a92740fbed0519a0fe8fb2bb1420fa5a24997c0cf4682cd464c3bcd44c267b10cfd7565652376257be8c2ef9d94e9ad1d44011543b4d0e2c77577a1157a58a7edab4a0981d3549776f00"/210]) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x4827d9d3570e76e1}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb62) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400ffbd0000"], 0x14}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup(r4) r5 = dup2(r1, r3) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x8010, r5, 0x10000000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@private, @in=@initdev}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000280)=0xe8) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 12:12:37 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xffffffff000) (fail_nth: 30) 12:12:37 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r0, 0x1277, &(0x7f0000000540)={'\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 12:12:37 executing program 7: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000018c0)=ANY=[@ANYBLOB="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"/370], 0x24}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000dc0)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000008c0)={r2, 0x5, 0x80000001}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="080500988400014637b5e6a174b7b2b317b4044a94da343dd489e684a04f4ca90665864272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab7ea7e76402b517c198dc7ffbdbb38ab65f84f5242824efb291f523ece2d8e79434f9fe77da5ead57c5f16fed9a43b14e466358a6b4c3a1a8361e8199db7e4116e6031e72ada1c25a85ea221f56", @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) shutdown(r3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0x50, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x2e}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x674}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xd69}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xfffd}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x50}}, 0x40) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 12:12:37 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fork() tkill(r0, 0x26) waitid(0x4c00000000000000, 0x0, 0x0, 0x4, 0x0) 12:12:37 executing program 6: r0 = fork() tkill(r0, 0x26) waitid(0x1, r0, &(0x7f0000000100), 0x4, &(0x7f0000000500)) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4383, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x3, @perf_config_ext={0x6}, 0x40000, 0x0, 0x0, 0x0, 0xdd, 0x0, 0x0, 0x0, 0x100000}, r0, 0xd, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x2204, &(0x7f00000002c0)={0x0, 0x0, 0x1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0xa2c0792771366ceb}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 12:12:37 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xc, &(0x7f0000000100)={0x5, 0xfffffffffffffffd}, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xffffffff000) (fail_nth: 1) [ 1596.154751] FAULT_INJECTION: forcing a failure. [ 1596.154751] name failslab, interval 1, probability 0, space 0, times 0 [ 1596.157448] CPU: 1 PID: 13527 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 1596.158892] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1596.160614] Call Trace: [ 1596.161173] dump_stack+0x107/0x167 [ 1596.162030] should_fail.cold+0x5/0xa [ 1596.162944] ? create_object.isra.0+0x3a/0xa20 [ 1596.164048] should_failslab+0x5/0x20 [ 1596.164948] kmem_cache_alloc+0x5b/0x310 [ 1596.165900] ? igrab+0xc0/0xc0 [ 1596.166666] create_object.isra.0+0x3a/0xa20 [ 1596.167712] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1596.168912] __kmalloc+0x16e/0x390 [ 1596.169757] iter_file_splice_write+0x165/0xc90 [ 1596.170870] ? generic_splice_sendpage+0x140/0x140 [ 1596.172033] ? pipe_to_user+0x170/0x170 [ 1596.173020] ? security_file_permission+0xb1/0xe0 [ 1596.174185] ? generic_splice_sendpage+0x140/0x140 [ 1596.175358] direct_splice_actor+0x10f/0x170 [ 1596.176386] splice_direct_to_actor+0x387/0x980 [ 1596.177482] ? pipe_to_sendpage+0x380/0x380 [ 1596.178498] ? do_splice_to+0x160/0x160 [ 1596.179424] ? security_file_permission+0xb1/0xe0 [ 1596.180588] do_splice_direct+0x1c4/0x290 [ 1596.181578] ? splice_direct_to_actor+0x980/0x980 [ 1596.182726] ? avc_policy_seqno+0x9/0x70 [ 1596.183720] ? security_file_permission+0xb1/0xe0 [ 1596.184892] do_sendfile+0x553/0x11e0 [ 1596.185832] ? do_pwritev+0x270/0x270 [ 1596.186742] ? wait_for_completion_io+0x270/0x270 [ 1596.188025] ? rcu_read_lock_any_held+0x75/0xa0 [ 1596.189237] ? vfs_write+0x354/0xb10 [ 1596.190134] __x64_sys_sendfile64+0x1d1/0x210 [ 1596.191203] ? __ia32_sys_sendfile+0x220/0x220 [ 1596.192309] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1596.193557] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1596.194798] do_syscall_64+0x33/0x40 [ 1596.195697] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1596.196915] RIP: 0033:0x7efcccb57b19 [ 1596.197800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1596.202148] RSP: 002b:00007efcca0cd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1596.203949] RAX: ffffffffffffffda RBX: 00007efcccc6af60 RCX: 00007efcccb57b19 [ 1596.205630] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1596.207296] RBP: 00007efcca0cd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1596.208988] R10: 00000ffffffff000 R11: 0000000000000246 R12: 0000000000000002 [ 1596.210677] R13: 00007ffdb544bb5f R14: 00007efcca0cd300 R15: 0000000000022000 [ 1596.215938] audit: type=1326 audit(1751717558.102:1452): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13524 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1596.221966] audit: type=1326 audit(1751717558.102:1453): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13524 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1596.234621] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 12:12:38 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xc, &(0x7f0000000100)={0x5, 0xfffffffffffffffd}, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xffffffff000) (fail_nth: 2) [ 1596.268221] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1596.269779] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1596.273378] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1596.287956] audit: type=1326 audit(1751717558.173:1454): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13524 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=57 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1596.299664] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1596.301334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1596.303368] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1596.307564] FAULT_INJECTION: forcing a failure. [ 1596.307564] name failslab, interval 1, probability 0, space 0, times 0 [ 1596.310525] CPU: 0 PID: 13540 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 1596.311901] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1596.313520] Call Trace: [ 1596.314034] dump_stack+0x107/0x167 [ 1596.314744] should_fail.cold+0x5/0xa [ 1596.315488] ? create_object.isra.0+0x3a/0xa20 [ 1596.316367] should_failslab+0x5/0x20 [ 1596.317096] kmem_cache_alloc+0x5b/0x310 [ 1596.317880] create_object.isra.0+0x3a/0xa20 [ 1596.318722] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1596.319710] kmem_cache_alloc_trace+0x151/0x320 [ 1596.320617] alloc_pipe_info+0x10a/0x590 [ 1596.321401] splice_direct_to_actor+0x774/0x980 [ 1596.322298] ? _cond_resched+0x10/0x30 [ 1596.323041] ? inode_security+0x107/0x140 [ 1596.323846] ? pipe_to_sendpage+0x380/0x380 [ 1596.324672] ? avc_policy_seqno+0x9/0x70 [ 1596.325449] ? selinux_file_permission+0x92/0x520 [ 1596.326375] ? do_splice_to+0x160/0x160 [ 1596.327138] ? security_file_permission+0xb1/0xe0 [ 1596.328083] do_splice_direct+0x1c4/0x290 [ 1596.328883] ? splice_direct_to_actor+0x980/0x980 [ 1596.329807] ? avc_policy_seqno+0x9/0x70 [ 1596.330595] ? security_file_permission+0xb1/0xe0 [ 1596.331531] do_sendfile+0x553/0x11e0 [ 1596.332264] ? do_pwritev+0x270/0x270 [ 1596.332989] ? wait_for_completion_io+0x270/0x270 [ 1596.333916] ? rcu_read_lock_any_held+0x75/0xa0 [ 1596.334798] ? vfs_write+0x354/0xb10 [ 1596.335501] __x64_sys_sendfile64+0x1d1/0x210 [ 1596.336318] ? __ia32_sys_sendfile+0x220/0x220 [ 1596.337153] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1596.338118] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1596.339068] do_syscall_64+0x33/0x40 [ 1596.339758] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1596.340690] RIP: 0033:0x7faa9a814b19 [ 1596.341370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1596.344742] RSP: 002b:00007faa97d8a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1596.346136] RAX: ffffffffffffffda RBX: 00007faa9a927f60 RCX: 00007faa9a814b19 [ 1596.347498] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1596.348838] RBP: 00007faa97d8a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1596.350146] R10: 00000ffffffff000 R11: 0000000000000246 R12: 0000000000000001 [ 1596.351452] R13: 00007ffe551f30cf R14: 00007faa97d8a300 R15: 0000000000022000 12:12:38 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r0, 0x1277, &(0x7f0000000540)={'\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r1 = syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2, 0x3, &(0x7f0000000340)=[{&(0x7f0000000100)="db6610b515ca76f8349e36306ae05f0f4730a73b4685d8bfbd1a25c51df7b3e9e872b239f76a36cf65df2523988338cc17a6ee94a12fc4a5d472605c4315676f67a091e7aa8938f15f6799bf6bafa35f1a754ef1dfb2869b16815bde53abf1556ca6416677e1852cdeeaf921526d2ad321268588d1e6d807ca033fdd24618f9f2f3ba68ad17277ec4d79bbcfa38b3fa585b4fd0c393bb05878079ea57fbe26533b7e805ce5b7e36fa64573113dd977bcb70e67b6d9a90bedde22602a550980926bd5fb84762b60e897cd", 0xca, 0x8}, {&(0x7f0000000200)="37e4591d9ff29b5f1d3c2a5bcba01b00e86e824cc1e62c67b4e87e2d3ef7a0a9c4cb6770a83a0e0edcdd0fe0dbaca962573033fc52262e5c3f9c25aa26fdd51683b00814f297ab39089afa2b583f6a7ed6518ad05dcee0e9ca09b19ade674c950c4980d481d751a851819f9eeabc10a86a074b37f5bfcbc23721bf2284da91f0f75cfdfa0158ccecdcc810319918e4af49e5d574cf7914dd84bb921b5873783fb118f83087f42e97e595ec1908e9", 0xae, 0x2}, {&(0x7f00000002c0)="7bb7c4a4ab04d681996b72139190ce7836bf0dc68ca5cffb79c882a764f227c988eabf78702999bd6f6f8ba58e09ed9730e6f0cda42297cd9f3235080615c72da972353e7e5ff210414d826454a92ba6e4d76464db68c6310d6bbbac5fdf1ac2b8a459d8207d4edfcc4d44fc0e443f94fab8c8b5e918cb12524a3da081", 0x7d, 0xf21}], 0x20, &(0x7f0000000080)={[{@dots}, {@fat=@flush}, {@dots}, {@nodots}], [{@func={'func', 0x3d, 'MMAP_CHECK'}}, {@measure}]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f00000005c0)={0x6, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x9, "0b4200c90d3bbf"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000015c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000017c0)={r2, r3, "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", "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"}) 12:12:38 executing program 7: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000018c0)=ANY=[@ANYBLOB="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"/370], 0x24}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000dc0)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000008c0)={r2, 0x5, 0x80000001}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="080500988400014637b5e6a174b7b2b317b4044a94da343dd489e684a04f4ca90665864272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab7ea7e76402b517c198dc7ffbdbb38ab65f84f5242824efb291f523ece2d8e79434f9fe77da5ead57c5f16fed9a43b14e466358a6b4c3a1a8361e8199db7e4116e6031e72ada1c25a85ea221f56", @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) shutdown(r3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0x50, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x2e}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x674}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xd69}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xfffd}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x50}}, 0x40) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 12:12:38 executing program 4: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8, 0x10000000000009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x1418c3) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000500)={0x0, 0xe00, 0x1, 'queue0\x00', 0xb8}) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001700)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @multicast1}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x14, 0x2, 0x1, 0x101, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x2004c000}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$9p_fd(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="fd89646e6f2d27900d52225683", @ANYBLOB="a2d891b0aab0672cc68a796be9fe269e22625d5a1acef65f9ed9ef575c99517ff901c8e9ce3c0fb104e18bd510e5fad60db9790642b9c744199c5de691e46a202cab2d26166b8656cae6162ad199b4ae57b29509b487aebf387b8dc372032d928b5c3573a3d06bd84cc3b46c037f4503c6d02653df1e48250d4fd63e3b31284d23269c6d480bb510ed590c0cd4db68e42ca229dd9ad388c5f1904d919185ad628c5f7f8fd2f2799c2489cfd49736f145089974d1526ab44a118ed155d9fc3a387bedf619c9f9dd9a04669ff11f82ff9d5b3bc1f46470ec4aa772e218313c3db6766b84a3406d4af3f961c41cbacfbb2e8af85ff5efa024e3f4871f8a9b996142d899c233ee64bef604f0a69fc4894f44cf4052e15ba3f921a68bf20854731a6dee75ffc07c66b0c4861dc805d68c30f12f09896abb39a303dd914ba04a26d71df52e1708fbf1936d68bb45d745a4a0f9a0298bdb642e7bf8df45e383ca7776fe1fe7048f121a7baaaba1815686c8dd66456c50675be0dd64a4868f537982489447df30f9477f14eb974cfa0c6392b859ebafd474c4c59534ff83990b1d7d8dc0a858c347cd4c163a3a8fa8a7969252d03f0b263f815b6ab927362d4ec2152f270c2027226db1a4338af2af9f88a0722d594682aeaeca2d703cea62d89a7441f90b90cd843adb0efe22ee1f97df11bb493da0fa1c55314e585da5d156df25a89b795bb9ccf93263f6e8218d634200782b6665d762a87f2660f15b2750cde379c117d3f483d692138a1463e6cef910a2de0bd78d43763f5c351fab8259b93d5686bb7045855b2625055c4f0a21415d154ab99e44c0812d3fb5560905450158b122e34c72f9d1feb0483df14943bf7d028d970eb0564d269e5d10a59bd14b9ec4e1a7aedfd30d759253477756410fd571e10dd1cd0f4801c6482a854b321a0c7972300a22be43cc302cf66ada5c899b6e12d7ef919c02e71c7ad8dfc850a9de0c78bbb7cbd0c59864013eb15f866653578916af5a1366c7fcac233a", @ANYRESHEX, @ANYBLOB="2c636169742d5f2a1816b2d3b064755b6368653d6d6d61702c63616368653d6c6f6f73652c000000000000ffff6163f3003d6d6d61702c667363006e7465e15ddcbc7973613d212c6f626a5f747970653d63616368653d6c6f6f73652c0000000000000000000000000000f879df265ed06f0a4b3a358e5862e6a4efdc637ab37de1ffc452d6149a3f4ed418587bd927a1f6bfa57e87c1cb78e6a89aad9baab9474f90a5834a6219436e4134eea2f8c53373379eba32f37833c28c2a67af53f772053d5f0ec353a8506519eaabac2dd10519"]) execveat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', &(0x7f0000000340)=[&(0x7f0000000080)='t\x82ans=?d,', &(0x7f00000000c0), &(0x7f0000000200)='fs\xc11\x1aiext\x84\xba}\xbf\x95\xd6\x10\x04\x00\x00\x01c(tc\xa7\xd6:\xfe\x88\xfe\x96i/', &(0x7f0000000180)='cache=mmap'], &(0x7f0000000740)=[&(0x7f0000000280)='h\x00W;\x7f\x91-\xff\x06\x9c\x02\xdc~\xe9\x16\x04\xe6\x84dz\xc3\xab\x9a\x98\xfa\x7f\xdc\x16\xd1wdz\x98 \xc9>\x7f \x02\xda{\xfa}$a\x89\x87\x04\xcc\xe6H8\x0e\xcfk\x13\xea\xc5\xe7)\x04Er\x12\xab\xb2\x1b\xa6vT\xf9D5S\xeakI\xdd\xd4{\xcb%lB\xfe\tE\xc5]&\x03\xf2\\\x9f\xee\x1bUd\xd8HD\rg\xe9\xcb', &(0x7f0000000700)='trans=fd,'], 0x400) fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000300), &(0x7f0000000600)={0x0, 0xfb, 0x9c, 0x1, 0x21, "4a0056d1e33b878fdfc33efad0564a04", "c25335d6125fcda002a8df04fc8621eb039eb634402c296bbfc3c9276c90a46b45f65774386b652c879ba14f869d5267d42e575e9ef5692a7d6304102526c53e3476b1d9a21477ff6c5c3811d61af46adb3f6d4666eaebdb0a341e8d125c7352d993aa03fe91661bf12615c6ae527aa06593bb5aa30a5d41bdeb20c57af7f4b5217f92bd67869d"}, 0x9c, 0x2) r4 = syz_open_procfs(0x0, &(0x7f00000005c0)='fdinfo/3\x00') pread64(0xffffffffffffffff, &(0x7f0000004d40)=""/102400, 0x19000, 0xffc0000000000000) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000004, 0x11, r4, 0x10000000) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0x1, 0x0, 0x1, 0x8, 0x0, 0x8000000000000000, 0x83c02, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0xdaf5d965ca766dbd, @perf_bp={&(0x7f0000000240), 0x9}, 0x39, 0x80, 0x3, 0x4, 0x9, 0x9, 0x1, 0x0, 0xffffffff, 0x0, 0x9}, 0x0, 0xa, r2, 0x19) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f00000003c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000040)) syz_io_uring_submit(0x0, r5, &(0x7f0000000140)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0xa, &(0x7f00000001c0)={0x77359400}}, 0x7fff) 12:12:38 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) chroot(&(0x7f0000000000)='./file0\x00') ioctl$BLKTRACESETUP(r0, 0x1277, &(0x7f0000000540)={'\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 12:12:38 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)=0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001700)=ANY=[@ANYBLOB="010000009bd77e7d3db3c295", @ANYRES32, @ANYRES32=r2, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c652fe1451d4e7b754bc7f05f0ff404807bf64d176a29993195992c14f39ee8328796f81d1886f6cb48f1ed71a941835b5840190114208ef9dda4756eab00fcd38d0a302906ffc3e8f25260ef7b4e28db855ed9e895bd4b0fbdedef955a9ddf4161dc9347ef97623a3ebf9ca8933a81653dd955d769a92740fbed0519a0fe8fb2bb1420fa5a24997c0cf4682cd464c3bcd44c267b10cfd7565652376257be8c2ef9d94e9ad1d44011543b4d0e2c77577a1157a58a7edab4a0981d3549776f00"/210]) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x4827d9d3570e76e1}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb62) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400ffbd0000"], 0x14}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup(r4) r5 = dup2(r1, r3) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x8010, r5, 0x10000000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@private, @in=@initdev}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000280)=0xe8) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1596.483084] audit: type=1400 audit(1751717558.369:1455): avc: denied { map } for pid=13580 comm="syz-executor.4" path="/proc/13580/fdinfo/3" dev="proc" ino=36120 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=file permissive=1 [ 1596.488738] audit: type=1400 audit(1751717558.369:1456): avc: denied { execute } for pid=13580 comm="syz-executor.4" path="/proc/13580/fdinfo/3" dev="proc" ino=36120 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=file permissive=1 12:12:38 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xffffffff000) (fail_nth: 31) [ 1596.525186] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1596.579668] audit: type=1326 audit(1751717558.466:1457): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13524 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1596.586331] audit: type=1326 audit(1751717558.466:1458): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13524 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1596.624434] FAULT_INJECTION: forcing a failure. [ 1596.624434] name failslab, interval 1, probability 0, space 0, times 0 [ 1596.628128] CPU: 1 PID: 13662 Comm: syz-executor.0 Not tainted 5.10.239 #1 [ 1596.630003] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1596.632159] Call Trace: [ 1596.632866] dump_stack+0x107/0x167 [ 1596.633874] should_fail.cold+0x5/0xa [ 1596.634902] ? create_object.isra.0+0x3a/0xa20 [ 1596.636021] should_failslab+0x5/0x20 [ 1596.637033] kmem_cache_alloc+0x5b/0x310 [ 1596.638078] create_object.isra.0+0x3a/0xa20 [ 1596.639326] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1596.640657] kmem_cache_alloc+0x159/0x310 [ 1596.641675] jbd2__journal_start+0x190/0x7e0 [ 1596.642748] __ext4_journal_start_sb+0x214/0x390 [ 1596.644002] ext4_dirty_inode+0xbc/0x130 [ 1596.645058] ? ext4_setattr+0x20f0/0x20f0 [ 1596.646208] __mark_inode_dirty+0x492/0xd40 [ 1596.647364] generic_update_time+0x21c/0x370 [ 1596.648446] file_update_time+0x43a/0x520 [ 1596.649485] ? evict_inodes+0x470/0x470 [ 1596.650178] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1596.650428] ? down_write_killable+0x180/0x180 [ 1596.651481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1596.652522] ? __kernel_text_address+0x9/0x40 [ 1596.652551] file_modified+0x7d/0xa0 [ 1596.653618] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1596.654506] ext4_buffered_write_iter+0xf9/0x4a0 [ 1596.654535] ext4_file_write_iter+0x3ab/0x1530 [ 1596.658802] ? stack_trace_save+0x8c/0xc0 [ 1596.659886] ? stack_trace_consume_entry+0x160/0x160 [ 1596.661108] ? ext4_file_read_iter+0x4c0/0x4c0 [ 1596.662181] ? kasan_save_stack+0x32/0x40 [ 1596.663208] ? kasan_save_stack+0x1b/0x40 [ 1596.664251] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1596.665487] ? iter_file_splice_write+0x165/0xc90 [ 1596.666602] ? direct_splice_actor+0x10f/0x170 [ 1596.667765] ? splice_direct_to_actor+0x387/0x980 [ 1596.669059] ? do_splice_direct+0x1c4/0x290 [ 1596.670062] ? do_sendfile+0x553/0x11e0 [ 1596.670987] ? __x64_sys_sendfile64+0x1d1/0x210 [ 1596.672160] ? do_syscall_64+0x33/0x40 [ 1596.673120] ? entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1596.674565] do_iter_readv_writev+0x476/0x750 [ 1596.675708] ? new_sync_write+0x660/0x660 [ 1596.676739] ? avc_policy_seqno+0x9/0x70 [ 1596.677842] ? selinux_file_permission+0x92/0x520 [ 1596.679104] ? security_file_permission+0xb1/0xe0 [ 1596.680297] do_iter_write+0x191/0x700 [ 1596.681208] ? trace_hardirqs_on+0x5b/0x180 [ 1596.682218] vfs_iter_write+0x70/0xa0 [ 1596.683113] iter_file_splice_write+0x726/0xc90 [ 1596.684215] ? generic_splice_sendpage+0x140/0x140 [ 1596.685371] ? security_file_permission+0xb1/0xe0 [ 1596.686482] ? generic_splice_sendpage+0x140/0x140 [ 1596.687627] direct_splice_actor+0x10f/0x170 [ 1596.688648] splice_direct_to_actor+0x387/0x980 [ 1596.689732] ? pipe_to_sendpage+0x380/0x380 [ 1596.690740] ? do_splice_to+0x160/0x160 [ 1596.691660] ? security_file_permission+0xb1/0xe0 [ 1596.692778] do_splice_direct+0x1c4/0x290 [ 1596.693735] ? splice_direct_to_actor+0x980/0x980 [ 1596.694831] ? avc_policy_seqno+0x9/0x70 [ 1596.695776] ? security_file_permission+0xb1/0xe0 [ 1596.696886] do_sendfile+0x553/0x11e0 [ 1596.697766] ? do_pwritev+0x270/0x270 [ 1596.698636] ? wait_for_completion_io+0x270/0x270 [ 1596.699741] ? rcu_read_lock_any_held+0x75/0xa0 [ 1596.700794] ? vfs_write+0x354/0xb10 [ 1596.701643] __x64_sys_sendfile64+0x1d1/0x210 [ 1596.702664] ? __ia32_sys_sendfile+0x220/0x220 [ 1596.703718] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1596.704912] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1596.706088] do_syscall_64+0x33/0x40 [ 1596.706938] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1596.708107] RIP: 0033:0x7efcccb57b19 [ 1596.708949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1596.713101] RSP: 002b:00007efcca0cd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1596.714811] RAX: ffffffffffffffda RBX: 00007efcccc6af60 RCX: 00007efcccb57b19 [ 1596.716416] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1596.718015] RBP: 00007efcca0cd1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1596.719623] R10: 00000ffffffff000 R11: 0000000000000246 R12: 0000000000000002 [ 1596.721209] R13: 00007ffdb544bb5f R14: 00007efcca0cd300 R15: 0000000000022000 12:12:38 executing program 2: sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xffff0001}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x9}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x8}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x10001}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0xbd3b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004c041}, 0x10) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r0, 0x1277, &(0x7f0000000540)={'\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 12:12:38 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fork() tkill(r0, 0x26) waitid(0x6800000000000000, 0x0, 0x0, 0x4, 0x0) 12:12:38 executing program 4: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_submit(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffffffffffff, &(0x7f0000000540)="4fa961a32c46292c4c203b03c6cfcb7f41a36b2033c451524efa095f3259d324fe60cf5baa606c7c29d5626c6a425a3357a6ef9b122793056fe62dc737af44a1070dcbaede3f1a1a803aeec79b506e019ba9a0faad0ffeddee88e9c7f880a2b88dd7ec8a16c3670691b02178a9efe72a78120600fe8be129a52b1b4d82cc8adf2f88522df22ee2ca034bd40b6be1e2b77c7b9594a599c877", 0x98, 0x0, 0x0, 0x3}]) syz_usb_connect$cdc_ecm(0x4, 0x0, 0x0, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000)={0xc92bfb053a14a5a}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x3938700}, {r0, r1+60000000}}, &(0x7f0000000700)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) close(0xffffffffffffffff) timer_create(0x7, &(0x7f0000000180)={0x0, 0xe, 0x1, @thr={&(0x7f0000000600)="1a90741b478736dcb3b315064fc9e72c4608370b13bc2cb637529112fc303e1776468566db550164e33a10b0631194d0c525a6de03dea72ca7919d9f8026f6731bde01f3232df675dccf6cfdc168550c74433af885e6c95d44c46a6227103177f847898edf0b69b5bb4ce7cb18c9b532190cab9007de662870fd202b7c55fc84576b9e25c32997e5ebfb4bf56dacbc75625e461c5efcef9c8d5ad29e03c5acb0699a5bf8fca88e223ab1b91bd8b79f91aeddb32d54049112fa", &(0x7f00000006c0)="d268db7656a375b39a1a8696902ef074b8ab"}}, &(0x7f0000000340)) timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)) timer_create(0x6, &(0x7f0000000240)={0x0, 0x3e, 0x4, @tid=r2}, &(0x7f00000002c0)) timer_create(0x7, &(0x7f0000000100)={0x0, 0x37, 0x1, @thr={&(0x7f00000000c0)="db07743d121c3eaf00e0a44a841566eb4fc263001ca60e7c184c81cf16be8688c282daa6afd1aea685d4e3d3deb24ee275cc42", &(0x7f00000007c0)="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"}}, &(0x7f00000001c0)) clock_gettime(0x0, &(0x7f0000000200)) timer_gettime(0x0, &(0x7f0000000080)) timer_delete(0x0) clone3(&(0x7f0000000740)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 1596.776865] audit: type=1326 audit(1751717558.663:1459): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13667 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1596.782250] audit: type=1326 audit(1751717558.663:1460): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13667 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=57 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1596.807598] audit: type=1326 audit(1751717558.694:1461): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13667 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 12:12:51 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xc, &(0x7f0000000100)={0x5, 0xfffffffffffffffd}, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xffffffff000) (fail_nth: 3) 12:12:51 executing program 7: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000018c0)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000001bd81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c030519e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065f14982b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc00100000000000000e073ebbcea086bc8e8da27d76939786776a523785c8d9f855bdebf1edf10e03336ab01cd5cf01d1029cd73f7ed80e25303ae4adcc92c32141d362f09f0ddfd8ac96f4ac935755951deec4790aad73f2a0d0ea95e61d823c36e79179300"/370], 0x24}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000dc0)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000008c0)={r2, 0x5, 0x80000001}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="080500988400014637b5e6a174b7b2b317b4044a94da343dd489e684a04f4ca90665864272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab7ea7e76402b517c198dc7ffbdbb38ab65f84f5242824efb291f523ece2d8e79434f9fe77da5ead57c5f16fed9a43b14e466358a6b4c3a1a8361e8199db7e4116e6031e72ada1c25a85ea221f56", @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) shutdown(r3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0x50, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x2e}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x674}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xd69}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xfffd}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x50}}, 0x40) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 12:12:51 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4600000007000000000000000003003e000000006d5800000000000000080000000000000000000000000000000000525c000038000200000000000000032dac17e1"], 0xaf2) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0) 12:12:51 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fork() tkill(r0, 0x26) waitid(0x6c00000000000000, 0x0, 0x0, 0x4, 0x0) 12:12:51 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x2) ftruncate(r0, 0x1000003) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa418b6d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') read(r2, &(0x7f00000002c0)=""/225, 0xe1) socket$nl_route(0x10, 0x3, 0x0) r3 = dup2(r1, r1) write$binfmt_elf64(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f45ec8ab26827704b3500000001000003003e0000180000bd0300000000000040000000000000001e0300000000000006000000000238000100321f0008000100000070030000000500000000000000ff00000000000000a000000000000000010100000000000003000000000000001f000000000000005563cd9a58df47eb7fe1862c4d6716e03dda73ad79bdf1e9a003bcf3986c50d4e8aa28c957fb3d2f3a377ec19cccee4be2003b4f8551fca880d37a4b11600af6227109e9493fb7702e12a94b4c79f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000abc400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e100000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b384c5f2024997ba0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000009139d4c0081fee640000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ca824ebda0c84196749bba61a02d950ed03c31d36ce1ad9b4e7c056a3acd9feb813360802486d4efed4d530e585bc699f4d6b47ba7bc9a9c3d8c2e2fe03cb819116f5af1dca9ec7b1d75cfb61da8d2544524a9434a1c795c00000000000000000000000005197ca73e75f8f95c680bae4da3d5d6563611c4fd797ce90c61a9021485c0ab5295437f585db3ca47c44cbcab392aca17898548ce36bc29323a3b0494813399f57c897989b73d27af72fcbf1b30dc50b8d50f79e8f6f5410eada5919225ad9527ea88e651c3c0eeb96ae480d0c2ff09b218ff004fc90fa60000000000000000d9eb788126b9b14ce9f9605385e78b623971eeb778199852b46329fc7739216af8839fc2afaf177c76219b1b303f26a551f194b7ae016b9484d367e8b33152507e5d5078980fdd213de6ba592abe1e5dd8201e5733ffcf717061"], 0x3c7) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x266d40) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ptype\x00') io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000040)=[r2, r3, r1, r4, 0xffffffffffffffff, r5, r1], 0x7) fcntl$addseals(r2, 0x409, 0x8) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000100)={{0xffffffffffffffff, 0x0, 0x39, 0x1, 0x8}}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r6, 0x0, 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x0) copy_file_range(r7, 0x0, r6, 0x0, 0x200f5ef, 0x0) 12:12:51 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xa1) ioctl$BLKTRACESETUP(r0, 0x1277, &(0x7f0000000540)={'\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKTRACETEARDOWN(r1, 0x1276, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r3 = fcntl$dupfd(r2, 0x406, r2) sendmsg$inet6(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) open_tree(r0, &(0x7f0000002140)='./file0\x00', 0x800) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r5 = fcntl$dupfd(r4, 0x406, r4) sendmsg$inet6(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) sendmmsg$inet6(r5, &(0x7f0000002080)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x6e1, @dev, 0xed3}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000180)="05ffbee6eb559944b93dff404b118cb95600353c963b48c4269645fc021e03305a36bf36f5bfa3800941eef76abb60962c984fa56abf75996237b576634199ec38dbe1a883198e524ad7e21c1c5395f7c5465f4efc4877675f054c92d69a808cfa8e6619593954db048c552e53357a84f4792c29e25c68ef4c6c4022ce6032552c858c325e345856b6930cdf10dbde05046d541cbc092465289da1e9fe82a1ff1df10489c9a9ec1950ebb62258407b5aaaa45ec3bd559f07f0d1d985934e556c2e1fc6626f2d52b1953b2bf204b4379dd3b62f9fc5f049111a3aa37df7a2ad95272d20", 0xe3}], 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x210}}, {{&(0x7f0000000340)={0xa, 0x4e23, 0x1ff, @mcast2, 0x10001}, 0x1c, &(0x7f00000004c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="20000000000000002900000037ca21d4c5800000001100000000000000c2040000007f0000480000000000000029000000370000002f06000000880000000000000000000000000001c20400000004c910ff01000000000000000000000000000100"/109], 0x68}}, {{&(0x7f0000000980)={0xa, 0x4e21, 0x1ff, @private2, 0x3}, 0x1c, &(0x7f0000000b80)=[{&(0x7f00000009c0)="92f552221cd84e75caedca8548fcddb03c96ff98aa9416ba866ebaf165daf1d3cb935f25eee89fbf2d99e231a0c3ed451f3c832169ae6f2ebd78a842333959276ad019873f76dcc3014a542bc0238129a178011947b606a55babae2aa97e43d748460c77707e76e2d3926dad9422246aecaab457ce5d1db8ed0e960b0fc4cb6ac2609d633bbfcf0b294fb315549d5859e71c58f9f61129e14510b3bbcd4deb4100e1ffc1b1d8727a4d2c45407476bcd6fbc9233f0e7774bb757718718d475926c64a08aa08f7c19174", 0xc9}, {&(0x7f0000000ac0)="ac8786c05024ba9abc66c1a756cb3685eaded78b20d71f64fc80f1a7172c78bb97c5bdefd64726ffefbcf83f7fb8df5304e1cef6e96d099433a3bd0d12a2946670ec79283fdb77977c4fde3d2c617883978e474f4986d23c5a385fd4d0da991125bc30a150ab4ab4176ed5e058290bd4084c099a30c2c6de19e19f7edd43538e8339618af19f9479a863c743274e8f503bbe3ec6926b47", 0x97}, {&(0x7f0000001c00)="8030e239cf71b1f76184a603f4efd2f54a4541b12313ad5199ec24f452fa89e8424dc32173083c15d9d4f76dd0fbf78e87fa6c80140179ab92011ed65de40ce2004dc9c0411f87bf1d6d225efe41759d1a94bfe87078f0827abedd09172bf0ed5158a1a4abbd8b698901dd249cdd499100a818fdc58adef5fa1aa1cdc5fdcbe77088c5fdc1e5c6aeb92ff3cf99e9fff03ebf252731ae42d2eb8cd96105396103217c4e96fdb2e33a0194e6b4182f790a7fa87c8872c0fac47771b4e1a175b418d165bf8bda3242d8685df824ac057c094c5a0aaac36886fea464e804d1a819dd81968599", 0xe4}, {&(0x7f0000001d00)="f1b2d2340119a550de0d864095c7c7fadb03f48043c2b152f7d89230f1d4d84d186e7b5d9203f243e39e069e9c2b354ba2cb2d170629e2d771b577df23e3c3d69b96b828a816bca8f916ffc66b64a641963d", 0x52}], 0x4, &(0x7f0000001d80)=[@dstopts={{0x68, 0x29, 0x37, {0x0, 0x9, '\x00', [@generic={0x3f, 0x20, "f0a49a12885cf877ebea9ecb9765b42fd56ec0ec80ed272c95059b15ec676891"}, @pad1, @hao={0xc9, 0x10, @remote}, @calipso={0x7, 0x10, {0x3, 0x2, 0x4, 0xb000, [0x7]}}, @pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x7fff}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x6}}, @hopopts={{0x50, 0x29, 0x36, {0x11, 0x6, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x9}, @ra={0x5, 0x2, 0x7}, @calipso={0x7, 0x10, {0x1, 0x2, 0xff, 0x5, [0x92a]}}, @generic={0x3, 0x10, "201e478085c7966e7c5ddb76c02730f5"}, @pad1]}}}, @rthdrdstopts={{0x138, 0x29, 0x37, {0x2e, 0x23, '\x00', [@generic={0x7, 0x87, "82665b2e43ee7bac0e03c164111d004f64ed9c5021e79c3f3d964c480eeb2029d5fb38b4740343d0f7da3f00313405f3a9756b669468b70230ce5e2aa2b76ee138ae51f27b441bd861ba4151ad520da1ebf8ec10e036c77bef862f9d4777f34219fae7e0a3212fe4398a9d733a1878d7d410e89364c1679ec1cebc881b436a95c8e99de2ff503e"}, @pad1, @generic={0x13, 0x3f, "43563402115cbb8cebcecb5b6961da41ecd15c2bcbb932777f65241308ab0ccd8dc5ba386db894ddd39e0f439277da98404e501f1218103406e8dd072a745d"}, @ra={0x5, 0x2, 0x4}, @hao={0xc9, 0x10, @empty}, @generic={0x7f, 0x24, "93f4833e3eec7bcca8b127e3b5f1ed9bfe13429a26955b6c48444cff8525f2dbd773ca4a"}, @hao={0xc9, 0x10, @remote}, @pad1]}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast2}}}, @rthdr_2292={{0x88, 0x29, 0x39, {0x32, 0xe, 0x2, 0x0, 0x0, [@remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x18}, @loopback, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x14}, @private2={0xfc, 0x2, '\x00', 0x1}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x7a}}], 0x2e8}}], 0x3, 0x4050) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0xf503, 0x0) 12:12:51 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xffffffff000) (fail_nth: 32) 12:12:51 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)=0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001700)=ANY=[@ANYBLOB="010000009bd77e7d3db3c295", @ANYRES32, @ANYRES32=r2, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c652fe1451d4e7b754bc7f05f0ff404807bf64d176a29993195992c14f39ee8328796f81d1886f6cb48f1ed71a941835b5840190114208ef9dda4756eab00fcd38d0a302906ffc3e8f25260ef7b4e28db855ed9e895bd4b0fbdedef955a9ddf4161dc9347ef97623a3ebf9ca8933a81653dd955d769a92740fbed0519a0fe8fb2bb1420fa5a24997c0cf4682cd464c3bcd44c267b10cfd7565652376257be8c2ef9d94e9ad1d44011543b4d0e2c77577a1157a58a7edab4a0981d3549776f00"/210]) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x4827d9d3570e76e1}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb62) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400ffbd0000"], 0x14}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup(r4) r5 = dup2(r1, r3) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x8010, r5, 0x10000000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@private, @in=@initdev}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000280)=0xe8) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1610.090538] kauditd_printk_skb: 9 callbacks suppressed [ 1610.090551] audit: type=1326 audit(1751717571.977:1471): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13783 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1610.094955] audit: type=1326 audit(1751717571.982:1472): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13783 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=57 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1610.118786] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1610.134412] FAULT_INJECTION: forcing a failure. [ 1610.134412] name failslab, interval 1, probability 0, space 0, times 0 [ 1610.137402] CPU: 0 PID: 13791 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 1610.139112] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1610.141152] Call Trace: [ 1610.141801] dump_stack+0x107/0x167 [ 1610.142697] should_fail.cold+0x5/0xa [ 1610.143654] ? alloc_pipe_info+0x1e5/0x590 [ 1610.144698] should_failslab+0x5/0x20 [ 1610.145633] __kmalloc+0x72/0x390 [ 1610.146484] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1610.147738] alloc_pipe_info+0x1e5/0x590 [ 1610.148735] splice_direct_to_actor+0x774/0x980 [ 1610.149875] ? _cond_resched+0x10/0x30 [ 1610.150822] ? inode_security+0x107/0x140 [ 1610.151837] ? pipe_to_sendpage+0x380/0x380 [ 1610.152888] ? avc_policy_seqno+0x9/0x70 [ 1610.153877] ? selinux_file_permission+0x92/0x520 [ 1610.154556] audit: type=1326 audit(1751717572.041:1473): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13783 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1610.155050] ? do_splice_to+0x160/0x160 [ 1610.155070] ? security_file_permission+0xb1/0xe0 [ 1610.160024] do_splice_direct+0x1c4/0x290 [ 1610.160464] audit: type=1326 audit(1751717572.047:1474): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13783 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1610.161025] ? splice_direct_to_actor+0x980/0x980 [ 1610.161045] ? avc_policy_seqno+0x9/0x70 [ 1610.165934] ? security_file_permission+0xb1/0xe0 [ 1610.167113] do_sendfile+0x553/0x11e0 [ 1610.168058] ? do_pwritev+0x270/0x270 [ 1610.168983] ? wait_for_completion_io+0x270/0x270 [ 1610.170152] ? rcu_read_lock_any_held+0x75/0xa0 [ 1610.171274] ? vfs_write+0x354/0xb10 [ 1610.172193] __x64_sys_sendfile64+0x1d1/0x210 [ 1610.173277] ? __ia32_sys_sendfile+0x220/0x220 [ 1610.174388] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1610.175662] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1610.176913] do_syscall_64+0x33/0x40 [ 1610.177813] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1610.179051] RIP: 0033:0x7faa9a814b19 [ 1610.179958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1610.184391] RSP: 002b:00007faa97d8a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1610.186219] RAX: ffffffffffffffda RBX: 00007faa9a927f60 RCX: 00007faa9a814b19 [ 1610.187943] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1610.189657] RBP: 00007faa97d8a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1610.191371] R10: 00000ffffffff000 R11: 0000000000000246 R12: 0000000000000001 [ 1610.193097] R13: 00007ffe551f30cf R14: 00007faa97d8a300 R15: 0000000000022000 12:12:52 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)=0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001700)=ANY=[@ANYBLOB="010000009bd77e7d3db3c295", @ANYRES32, @ANYRES32=r2, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c652fe1451d4e7b754bc7f05f0ff404807bf64d176a29993195992c14f39ee8328796f81d1886f6cb48f1ed71a941835b5840190114208ef9dda4756eab00fcd38d0a302906ffc3e8f25260ef7b4e28db855ed9e895bd4b0fbdedef955a9ddf4161dc9347ef97623a3ebf9ca8933a81653dd955d769a92740fbed0519a0fe8fb2bb1420fa5a24997c0cf4682cd464c3bcd44c267b10cfd7565652376257be8c2ef9d94e9ad1d44011543b4d0e2c77577a1157a58a7edab4a0981d3549776f00"/210]) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x4827d9d3570e76e1}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb62) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400ffbd0000"], 0x14}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup(r4) r5 = dup2(r1, r3) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x8010, r5, 0x10000000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@private, @in=@initdev}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000280)=0xe8) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1610.236434] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1610.237413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1610.238393] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:12:52 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x1000000, 0x4) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x3}, 0x80, &(0x7f0000002480)=[{&(0x7f0000000300)="050303000000890000004c435ce0f87181858ced753d49d8ecb2a18956fd475167c74940c9f170abcef15a2646cc6bc18bc7ea42b0a819b9aa6d6e0a40de161036b064c609c453dcc0193484715e01a3cf7350f69500007a6365dbffdfe98717e7ebe77c36cec6bce2ec8f103a63900770d3e65bceb99a05540bc374fa63951f3f5e61d7b8f42a0c424f365c06a2c48ceeb861cac6", 0x95}], 0x1}, 0x0) 12:12:52 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fork() tkill(r0, 0x26) waitid(0x7400000000000000, 0x0, 0x0, 0x4, 0x0) [ 1610.299790] audit: type=1326 audit(1751717572.186:1475): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13903 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1610.317043] audit: type=1326 audit(1751717572.197:1476): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13903 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=57 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1610.338915] audit: type=1326 audit(1751717572.225:1477): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13903 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1610.343795] audit: type=1326 audit(1751717572.230:1478): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13903 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1610.346625] audit: type=1326 audit(1751717572.234:1479): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13903 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1610.350392] audit: type=1326 audit(1751717572.237:1480): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=13903 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 12:13:08 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fork() tkill(r0, 0x26) waitid(0x7a00000000000000, 0x0, 0x0, 0x4, 0x0) [ 1626.563188] kauditd_printk_skb: 6 callbacks suppressed [ 1626.563208] audit: type=1326 audit(1751717588.450:1487): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14011 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1626.567714] netlink: 276 bytes leftover after parsing attributes in process `syz-executor.6'. 12:13:08 executing program 4: ioctl$MON_IOCG_STATS(0xffffffffffffffff, 0x80089203, &(0x7f0000000140)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000180)="20000000000100000c000000ce0000000f000000010000000000000000000000000100000020000020000000d2f4655fd2f4655f0100ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000013800)) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x2100, 0x4, 0x4}, 0x18) creat(&(0x7f00000000c0)='./file1\x00', 0xc) 12:13:08 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xffffffff000) 12:13:08 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xc, &(0x7f0000000100)={0x5, 0xfffffffffffffffd}, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xffffffff000) (fail_nth: 4) 12:13:08 executing program 7: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000018c0)=ANY=[@ANYBLOB="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"/370], 0x24}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000dc0)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000008c0)={r2, 0x5, 0x80000001}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="080500988400014637b5e6a174b7b2b317b4044a94da343dd489e684a04f4ca90665864272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab7ea7e76402b517c198dc7ffbdbb38ab65f84f5242824efb291f523ece2d8e79434f9fe77da5ead57c5f16fed9a43b14e466358a6b4c3a1a8361e8199db7e4116e6031e72ada1c25a85ea221f56", @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) shutdown(r3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0x50, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x2e}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x674}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xd69}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xfffd}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x50}}, 0x40) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 12:13:08 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x2000) msgsnd(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="e5000000"], 0x8, 0x0) ioctl$BLKTRACESETUP(r0, 0x1277, &(0x7f0000000540)={'\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 12:13:08 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="28010000280001000000000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000000000000000000fc0200"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000935c00000000000000000000000000000091", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB='\x00'/128], 0x128}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x80000001) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd, 0x1, &(0x7f0000000240)=[{&(0x7f0000000080)="49a334af569c3ef9ce1ddafe3df9c2a518f51d9620794ce7ecf7ed34a1c4608def", 0x21}, {0x0}], 0x2, 0x14}, 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000040)) sendfile(r1, r2, 0x0, 0x100000001) 12:13:08 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)=0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001700)=ANY=[@ANYBLOB="010000009bd77e7d3db3c295", @ANYRES32, @ANYRES32=r2, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c652fe1451d4e7b754bc7f05f0ff404807bf64d176a29993195992c14f39ee8328796f81d1886f6cb48f1ed71a941835b5840190114208ef9dda4756eab00fcd38d0a302906ffc3e8f25260ef7b4e28db855ed9e895bd4b0fbdedef955a9ddf4161dc9347ef97623a3ebf9ca8933a81653dd955d769a92740fbed0519a0fe8fb2bb1420fa5a24997c0cf4682cd464c3bcd44c267b10cfd7565652376257be8c2ef9d94e9ad1d44011543b4d0e2c77577a1157a58a7edab4a0981d3549776f00"/210]) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x4827d9d3570e76e1}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb62) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400ffbd0000"], 0x14}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup(r4) r5 = dup2(r1, r3) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x8010, r5, 0x10000000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@private, @in=@initdev}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000280)=0xe8) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1626.586730] audit: type=1326 audit(1751717588.450:1488): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14011 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=57 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1626.624550] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1626.644616] FAULT_INJECTION: forcing a failure. [ 1626.644616] name failslab, interval 1, probability 0, space 0, times 0 [ 1626.647443] CPU: 0 PID: 14022 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 1626.649023] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1626.650912] Call Trace: [ 1626.651520] dump_stack+0x107/0x167 [ 1626.652363] should_fail.cold+0x5/0xa [ 1626.653238] ? alloc_pipe_info+0x1e5/0x590 [ 1626.654215] should_failslab+0x5/0x20 [ 1626.655091] __kmalloc+0x72/0x390 [ 1626.655887] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1626.657051] alloc_pipe_info+0x1e5/0x590 [ 1626.657984] splice_direct_to_actor+0x774/0x980 [ 1626.659049] ? _cond_resched+0x10/0x30 [ 1626.659948] ? inode_security+0x107/0x140 [ 1626.660891] ? pipe_to_sendpage+0x380/0x380 [ 1626.661873] ? avc_policy_seqno+0x9/0x70 [ 1626.662798] ? selinux_file_permission+0x92/0x520 [ 1626.663906] ? do_splice_to+0x160/0x160 [ 1626.664810] ? security_file_permission+0xb1/0xe0 [ 1626.665917] do_splice_direct+0x1c4/0x290 [ 1626.666869] ? splice_direct_to_actor+0x980/0x980 [ 1626.667978] ? avc_policy_seqno+0x9/0x70 [ 1626.668911] ? security_file_permission+0xb1/0xe0 [ 1626.670113] do_sendfile+0x553/0x11e0 [ 1626.670998] ? do_pwritev+0x270/0x270 [ 1626.671871] ? wait_for_completion_io+0x270/0x270 [ 1626.672967] ? rcu_read_lock_any_held+0x75/0xa0 [ 1626.674021] ? vfs_write+0x354/0xb10 [ 1626.674869] __x64_sys_sendfile64+0x1d1/0x210 [ 1626.675900] ? __ia32_sys_sendfile+0x220/0x220 [ 1626.676940] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1626.678132] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1626.679305] do_syscall_64+0x33/0x40 [ 1626.680159] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1626.681321] RIP: 0033:0x7faa9a814b19 [ 1626.682166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1626.686369] RSP: 002b:00007faa97d8a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1626.688104] RAX: ffffffffffffffda RBX: 00007faa9a927f60 RCX: 00007faa9a814b19 [ 1626.689718] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1626.691331] RBP: 00007faa97d8a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1626.692961] R10: 00000ffffffff000 R11: 0000000000000246 R12: 0000000000000001 [ 1626.694574] R13: 00007ffe551f30cf R14: 00007faa97d8a300 R15: 0000000000022000 12:13:08 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xe4) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x19) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r2 = fcntl$dupfd(r1, 0x406, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) fcntl$setlease(r2, 0x400, 0x2) ioctl$BLKTRACESETUP(r0, 0x1277, &(0x7f0000000540)={'\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 12:13:08 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) syz_io_uring_setup(0x4ee5, &(0x7f0000000080)={0x0, 0xfce1, 0x2, 0xfffffffe, 0xa2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000100)=0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(0x0, r1, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2}, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000008, 0x20010, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x0, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000}]}) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000300)={'icmp6\x00'}, &(0x7f0000000380)=0x1e) unshare(0x48020200) unshare(0x8020e00) syz_io_uring_setup(0x7c28, &(0x7f00000014c0)={0x0, 0xc2cc, 0x2, 0x2, 0x221, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, &(0x7f0000001540)) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newspdinfo={0x1c, 0x24, 0x1, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}}, 0x0) [ 1626.745621] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1626.747275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1626.751681] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1626.787623] audit: type=1326 audit(1751717588.674:1489): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14011 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1626.792763] audit: type=1326 audit(1751717588.674:1490): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14011 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 12:13:08 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)=0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001700)=ANY=[@ANYBLOB="010000009bd77e7d3db3c295", @ANYRES32, @ANYRES32=r2, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c652fe1451d4e7b754bc7f05f0ff404807bf64d176a29993195992c14f39ee8328796f81d1886f6cb48f1ed71a941835b5840190114208ef9dda4756eab00fcd38d0a302906ffc3e8f25260ef7b4e28db855ed9e895bd4b0fbdedef955a9ddf4161dc9347ef97623a3ebf9ca8933a81653dd955d769a92740fbed0519a0fe8fb2bb1420fa5a24997c0cf4682cd464c3bcd44c267b10cfd7565652376257be8c2ef9d94e9ad1d44011543b4d0e2c77577a1157a58a7edab4a0981d3549776f00"/210]) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x4827d9d3570e76e1}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb62) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400ffbd0000"], 0x14}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup(r4) r5 = dup2(r1, r3) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x8010, r5, 0x10000000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@private, @in=@initdev}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000280)=0xe8) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 12:13:08 executing program 7: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000018c0)=ANY=[@ANYBLOB="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"/370], 0x24}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000dc0)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000008c0)={r2, 0x5, 0x80000001}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="080500988400014637b5e6a174b7b2b317b4044a94da343dd489e684a04f4ca90665864272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab7ea7e76402b517c198dc7ffbdbb38ab65f84f5242824efb291f523ece2d8e79434f9fe77da5ead57c5f16fed9a43b14e466358a6b4c3a1a8361e8199db7e4116e6031e72ada1c25a85ea221f56", @ANYRES16, @ANYBLOB="04002cbd7000fddbdf2575000000c401f08067000b00677cfd4589c7a40e1aae6b18247eb36f74f8f6793b7df9ae3ca9cfb2f5e87ed1ff361592201a1151eabf57ad6fd1950cd215131f67634030aa5f484986ad830a6243bac401c3ee44bff7cea60e881d5f9b616582cf28ec620ccd97d4ceb48c6727530f00050001000100000005000f004000000008000a000000000005000f000400000038010c80050003000300000003010200a207624e07c5690d555d459080990de6741a392aa42eff746330a20bec78fd393092b5f99f54b2a9f6dadb55db3c0846814e79eb43bf7bcd6295c96e7ca16288a8b27c5a225a6d718ad49f0366f969983400ba504c865cca04e4fa00a4b246fa618936f70fe77c1c3e550a5d12d4a9108e7e4216bc693107c3bd4c06e98ec9399de0e98cf205057cbbf688d8a13dc55472fc31954b846e29dbd7d8889b34ead6c83c9b533b666abd65490f2a7e693d55d91f24d5078eb3d34940c02ea1125e7176e254c6bd5531ed067817f0b3278e3dc492571b7da828e728a6fa55742efa33f430739c320b794841adba4c2875044dce9c8959eebe4a5b52d68f9868719f00280004800a000600ffffffffffff00000a000600ffffffffffff00000a000600ffffffffffff00000c01f0800a000200ee90b393fc10000046000b005cbb9f225903f92e0cffa77bd5369da32f70909f5950f26e59525d4d3c41b9e512f4a5d3b7aaaf8a0e03f2aa73274b24a04b4a689bf05844d0d2ad278696b14fb4c50000b4000d80af0000001263800a6541e18dae533feb73677b5c9d5da0ee4d7366d47dd6fa0b14ca33d3433171a533a29930fb5e0d9ff2ca710ab0c8aa4b331d58b4a7b3cac9c9b4ef9e7cdb1d3d6da7f0877a5c3ce7ff9bf9e936b1bcbe732bd9037f9090bfdee1d3e45c7b700e6aefa488eb013b27cd7291a7b927dc10e794490c85dff0cb49a1dd13066b619ace5d6bf763b6858bf07eeb0f5514c3ce6c90d8457d79fcd2a3756ccd66b5194a5c69358e1199219e40ffdd6771943cb3fe33f442ae2ff2002c01f080050003000600000005000300020000000a000200957ccca020ad0000e4000b0049a0db966a0311d932607f2a479e651b881a56f4da7d14bde06c48822b0d353198bb85750dc9f0cca70174b813fe94ea80477bcf9dd6b03b9186edb85c476d8762dc273e83aaee35def167cc1c8faffc0e86fa311d66813cbea7e234d79e9d3acd30b5ae5a264e9576efabc94efd7a18b93eddabd9b046d12df487392f1217b77f05bd72f95130a2bda683b7a64c3d6477e3681d83c5e45e8fdae553114b304417851d9687ab3b9c6c7e91af7744d120000000332c31b35f4358643e4137a9e6b264a14e04605648b50e27e3bb5cbbdaac70655fdff371ece3e08885f0da8d700a000800080211000000000005000100000000000a000800080211000000000005000300c9000000f800f08008000a000100008004000500050010007f0000000a0002005a9cbd08ca8e000014000c800500030008000000050003005e000000c0000b003a3801c2eefaea9df8f27b808f751948873b3fa40dd675c2f1b45ab2dbcdf1903fb052565c23c23d861899509fb26a1f672416325f004d2fdd903c5fa86b4bf1e39074929e71f3a466d345a8e660cd8d401a4772051ab211e24ede74314ef8b7a2c04c8a87b4e5603f7592bc89521d454d3528dce3959d8613c413eafce02151dc1f76a1ace92831610ea0894d9f59407f66cbe556e636be5a3d01253ec1c755495e5196efdf7f155cba102e"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) shutdown(r3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0x50, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x2e}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x674}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xd69}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xfffd}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x50}}, 0x40) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 12:13:08 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fork() tkill(r0, 0x26) waitid(0x9e22000000000000, 0x0, 0x0, 0x4, 0x0) [ 1626.929183] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1626.964698] audit: type=1326 audit(1751717588.851:1491): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14142 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1626.980767] audit: type=1326 audit(1751717588.867:1492): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14142 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=57 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 12:13:08 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x20000) 12:13:08 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f0000000080), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r4, 0x0, 0x0}, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x5, 0x0, 0x0, 0x0, {0x40}, 0x0, {0x0, r7}}, 0x15a) ioctl$BLKTRACESETUP(r0, 0x1277, &(0x7f0000000540)={'\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 12:13:08 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xc, &(0x7f0000000100)={0x5, 0xfffffffffffffffd}, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xffffffff000) (fail_nth: 5) [ 1627.089564] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1627.091303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1627.093504] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1627.114758] FAULT_INJECTION: forcing a failure. [ 1627.114758] name failslab, interval 1, probability 0, space 0, times 0 [ 1627.117640] CPU: 1 PID: 14178 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 1627.119202] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1627.121072] Call Trace: [ 1627.121664] dump_stack+0x107/0x167 [ 1627.122481] should_fail.cold+0x5/0xa [ 1627.123343] ? __iomap_dio_rw+0x1ee/0x1110 [ 1627.124434] should_failslab+0x5/0x20 [ 1627.125329] kmem_cache_alloc_trace+0x55/0x320 [ 1627.126371] __iomap_dio_rw+0x1ee/0x1110 [ 1627.127290] ? lock_release+0x680/0x680 [ 1627.128215] ? iomap_dio_bio_actor+0xef0/0xef0 [ 1627.129246] ? down_read+0x10f/0x430 [ 1627.130081] ? lock_chain_count+0x20/0x20 [ 1627.131006] ? down_write+0x160/0x160 [ 1627.131876] iomap_dio_rw+0x31/0x90 [ 1627.132697] ext4_file_read_iter+0x2c7/0x4c0 [ 1627.133693] generic_file_splice_read+0x455/0x6d0 [ 1627.134809] ? pipe_to_user+0x170/0x170 [ 1627.135753] ? fsnotify_perm.part.0+0x22d/0x620 [ 1627.136834] ? security_file_permission+0xb1/0xe0 [ 1627.137950] ? pipe_to_user+0x170/0x170 [ 1627.138870] do_splice_to+0x10e/0x160 [ 1627.139767] splice_direct_to_actor+0x2fe/0x980 [ 1627.140857] ? pipe_to_sendpage+0x380/0x380 [ 1627.141864] ? do_splice_to+0x160/0x160 [ 1627.142786] ? security_file_permission+0xb1/0xe0 [ 1627.143928] do_splice_direct+0x1c4/0x290 [ 1627.144894] ? splice_direct_to_actor+0x980/0x980 [ 1627.146014] ? avc_policy_seqno+0x9/0x70 [ 1627.146966] ? security_file_permission+0xb1/0xe0 [ 1627.148105] do_sendfile+0x553/0x11e0 [ 1627.149005] ? do_pwritev+0x270/0x270 [ 1627.149890] ? wait_for_completion_io+0x270/0x270 [ 1627.151014] ? rcu_read_lock_any_held+0x75/0xa0 [ 1627.152105] ? vfs_write+0x354/0xb10 [ 1627.152981] __x64_sys_sendfile64+0x1d1/0x210 [ 1627.154022] ? __ia32_sys_sendfile+0x220/0x220 [ 1627.155088] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1627.156314] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1627.157517] do_syscall_64+0x33/0x40 [ 1627.158386] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1627.159590] RIP: 0033:0x7faa9a814b19 [ 1627.160454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1627.164743] RSP: 002b:00007faa97d8a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1627.166515] RAX: ffffffffffffffda RBX: 00007faa9a927f60 RCX: 00007faa9a814b19 [ 1627.168179] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1627.169838] RBP: 00007faa97d8a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1627.171496] R10: 00000ffffffff000 R11: 0000000000000246 R12: 0000000000000001 [ 1627.173157] R13: 00007ffe551f30cf R14: 00007faa97d8a300 R15: 0000000000022000 12:13:09 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)=0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001700)=ANY=[@ANYBLOB="010000009bd77e7d3db3c295", @ANYRES32, @ANYRES32=r2, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c652fe1451d4e7b754bc7f05f0ff404807bf64d176a29993195992c14f39ee8328796f81d1886f6cb48f1ed71a941835b5840190114208ef9dda4756eab00fcd38d0a302906ffc3e8f25260ef7b4e28db855ed9e895bd4b0fbdedef955a9ddf4161dc9347ef97623a3ebf9ca8933a81653dd955d769a92740fbed0519a0fe8fb2bb1420fa5a24997c0cf4682cd464c3bcd44c267b10cfd7565652376257be8c2ef9d94e9ad1d44011543b4d0e2c77577a1157a58a7edab4a0981d3549776f00"/210]) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x4827d9d3570e76e1}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb62) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400ffbd0000"], 0x14}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup(r4) r5 = dup2(r1, r3) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x8010, r5, 0x10000000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@private, @in=@initdev}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000280)=0xe8) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1627.209398] audit: type=1326 audit(1751717589.094:1493): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14142 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1627.214722] audit: type=1326 audit(1751717589.095:1494): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14142 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1627.418556] netlink: 276 bytes leftover after parsing attributes in process `syz-executor.6'. 12:13:23 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x30000) [ 1641.310336] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. 12:13:23 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)=ANY=[@ANYBLOB="010000001100", @ANYBLOB]) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x2ff, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) gettid() r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r6 = fcntl$dupfd(r5, 0x406, r5) syz_io_uring_setup(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, &(0x7f0000000080)) syz_io_uring_setup(0x404c, &(0x7f0000000280)={0x0, 0x9b21, 0x8, 0x2, 0x1d9}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x3f, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x6}, 0x40000, 0x0, 0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) syz_80211_join_ibss(&(0x7f0000000080)='wlan1\x00', 0x0, 0x0, 0x0) 12:13:23 executing program 7: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000018c0)=ANY=[@ANYBLOB="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"/370], 0x24}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000dc0)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000008c0)={r2, 0x5, 0x80000001}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="080500988400014637b5e6a174b7b2b317b4044a94da343dd489e684a04f4ca90665864272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab7ea7e76402b517c198dc7ffbdbb38ab65f84f5242824efb291f523ece2d8e79434f9fe77da5ead57c5f16fed9a43b14e466358a6b4c3a1a8361e8199db7e4116e6031e72ada1c25a85ea221f56", @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) shutdown(r3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0x50, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x2e}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x674}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xd69}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xfffd}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x50}}, 0x40) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 12:13:23 executing program 6: r0 = socket$inet(0x2, 0x3, 0x6) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@ip_retopts={{0x24, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0xa, 0x1, 0x0, [{@empty}, {}]}]}}}], 0x28}, 0x0) sendto$inet(r0, &(0x7f0000000000)="0553bb", 0x3, 0x81, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) 12:13:23 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fork() tkill(r0, 0x26) waitid(0xa1ffffff00000000, 0x0, 0x0, 0x4, 0x0) 12:13:23 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r0, 0x1277, &(0x7f0000000540)={'\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) creat(&(0x7f0000000000)='./file0\x00', 0x100) 12:13:23 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)=0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001700)=ANY=[@ANYBLOB="010000009bd77e7d3db3c295", @ANYRES32, @ANYRES32=r2, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c652fe1451d4e7b754bc7f05f0ff404807bf64d176a29993195992c14f39ee8328796f81d1886f6cb48f1ed71a941835b5840190114208ef9dda4756eab00fcd38d0a302906ffc3e8f25260ef7b4e28db855ed9e895bd4b0fbdedef955a9ddf4161dc9347ef97623a3ebf9ca8933a81653dd955d769a92740fbed0519a0fe8fb2bb1420fa5a24997c0cf4682cd464c3bcd44c267b10cfd7565652376257be8c2ef9d94e9ad1d44011543b4d0e2c77577a1157a58a7edab4a0981d3549776f00"/210]) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x4827d9d3570e76e1}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb62) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400ffbd0000"], 0x14}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup(r4) r5 = dup2(r1, r3) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x8010, r5, 0x10000000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@private, @in=@initdev}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000280)=0xe8) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 12:13:23 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xc, &(0x7f0000000100)={0x5, 0xfffffffffffffffd}, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xffffffff000) (fail_nth: 6) [ 1641.317898] audit: type=1326 audit(1751717603.204:1495): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14278 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1641.323756] audit: type=1326 audit(1751717603.210:1496): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14278 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=57 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1641.351650] FAULT_INJECTION: forcing a failure. [ 1641.351650] name failslab, interval 1, probability 0, space 0, times 0 [ 1641.354558] CPU: 0 PID: 14285 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 1641.356158] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1641.358044] Call Trace: [ 1641.358642] dump_stack+0x107/0x167 [ 1641.359476] should_fail.cold+0x5/0xa [ 1641.360409] ? create_object.isra.0+0x3a/0xa20 [ 1641.361448] should_failslab+0x5/0x20 [ 1641.362318] kmem_cache_alloc+0x5b/0x310 [ 1641.363249] create_object.isra.0+0x3a/0xa20 [ 1641.364257] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1641.365411] kmem_cache_alloc_trace+0x151/0x320 [ 1641.366478] __iomap_dio_rw+0x1ee/0x1110 [ 1641.367412] ? lock_release+0x680/0x680 [ 1641.368340] ? iomap_dio_bio_actor+0xef0/0xef0 [ 1641.369393] ? down_read+0x10f/0x430 [ 1641.370248] ? lock_chain_count+0x20/0x20 [ 1641.371189] ? down_write+0x160/0x160 [ 1641.372077] iomap_dio_rw+0x31/0x90 [ 1641.372921] ext4_file_read_iter+0x2c7/0x4c0 [ 1641.373938] generic_file_splice_read+0x455/0x6d0 [ 1641.375048] ? pipe_to_user+0x170/0x170 [ 1641.375981] ? fsnotify_perm.part.0+0x22d/0x620 [ 1641.377063] ? security_file_permission+0xb1/0xe0 [ 1641.378296] ? pipe_to_user+0x170/0x170 [ 1641.379358] do_splice_to+0x10e/0x160 [ 1641.380256] splice_direct_to_actor+0x2fe/0x980 [ 1641.381344] ? pipe_to_sendpage+0x380/0x380 [ 1641.382361] ? do_splice_to+0x160/0x160 [ 1641.383288] ? security_file_permission+0xb1/0xe0 [ 1641.384437] do_splice_direct+0x1c4/0x290 [ 1641.385408] ? splice_direct_to_actor+0x980/0x980 [ 1641.386532] ? avc_policy_seqno+0x9/0x70 [ 1641.387486] ? security_file_permission+0xb1/0xe0 [ 1641.388634] do_sendfile+0x553/0x11e0 [ 1641.389536] ? do_pwritev+0x270/0x270 [ 1641.390425] ? wait_for_completion_io+0x270/0x270 [ 1641.391555] ? rcu_read_lock_any_held+0x75/0xa0 [ 1641.392653] ? vfs_write+0x354/0xb10 [ 1641.393529] __x64_sys_sendfile64+0x1d1/0x210 [ 1641.394579] ? __ia32_sys_sendfile+0x220/0x220 [ 1641.395650] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1641.396889] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1641.398098] do_syscall_64+0x33/0x40 [ 1641.398967] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1641.400173] RIP: 0033:0x7faa9a814b19 [ 1641.401042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1641.405355] RSP: 002b:00007faa97d8a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1641.407136] RAX: ffffffffffffffda RBX: 00007faa9a927f60 RCX: 00007faa9a814b19 [ 1641.408816] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1641.410478] RBP: 00007faa97d8a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1641.412152] R10: 00000ffffffff000 R11: 0000000000000246 R12: 0000000000000001 [ 1641.413816] R13: 00007ffe551f30cf R14: 00007faa97d8a300 R15: 0000000000022000 12:13:23 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)=0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001700)=ANY=[@ANYBLOB="010000009bd77e7d3db3c295", @ANYRES32, @ANYRES32=r2, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c652fe1451d4e7b754bc7f05f0ff404807bf64d176a29993195992c14f39ee8328796f81d1886f6cb48f1ed71a941835b5840190114208ef9dda4756eab00fcd38d0a302906ffc3e8f25260ef7b4e28db855ed9e895bd4b0fbdedef955a9ddf4161dc9347ef97623a3ebf9ca8933a81653dd955d769a92740fbed0519a0fe8fb2bb1420fa5a24997c0cf4682cd464c3bcd44c267b10cfd7565652376257be8c2ef9d94e9ad1d44011543b4d0e2c77577a1157a58a7edab4a0981d3549776f00"/210]) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x4827d9d3570e76e1}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb62) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400ffbd0000"], 0x14}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup(r4) r5 = dup2(r1, r3) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x8010, r5, 0x10000000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@private, @in=@initdev}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000280)=0xe8) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1641.478751] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1641.480442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1641.491193] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:13:23 executing program 6: unshare(0x24000500) unshare(0x48000000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = creat(0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, @in_args={0x4}}, './file0\x00'}) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdc, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setxattr$security_evm(&(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0) openat2(r2, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x940, 0x44, 0x10}, 0x18) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000380)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, &(0x7f00000000c0)}, 0x0, &(0x7f0000000480)=""/253, 0x0, 0x0, 0x0, &(0x7f0000000340)}) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0) unshare(0x48020200) [ 1641.520915] audit: type=1326 audit(1751717603.399:1497): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14278 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 12:13:23 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x3ff04) [ 1641.533229] audit: type=1326 audit(1751717603.414:1498): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14278 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 12:13:23 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)=0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001700)=ANY=[@ANYBLOB="010000009bd77e7d3db3c295", @ANYRES32, @ANYRES32=r2, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c652fe1451d4e7b754bc7f05f0ff404807bf64d176a29993195992c14f39ee8328796f81d1886f6cb48f1ed71a941835b5840190114208ef9dda4756eab00fcd38d0a302906ffc3e8f25260ef7b4e28db855ed9e895bd4b0fbdedef955a9ddf4161dc9347ef97623a3ebf9ca8933a81653dd955d769a92740fbed0519a0fe8fb2bb1420fa5a24997c0cf4682cd464c3bcd44c267b10cfd7565652376257be8c2ef9d94e9ad1d44011543b4d0e2c77577a1157a58a7edab4a0981d3549776f00"/210]) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x4827d9d3570e76e1}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb62) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400ffbd0000"], 0x14}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup(r4) r5 = dup2(r1, r3) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x8010, r5, 0x10000000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@private, @in=@initdev}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000280)=0xe8) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 12:13:23 executing program 7: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000018c0)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000001bd81b87afc1f961b041591112692a5d1aab19c6a9e208d1c28da156afb4ddd1c030519e9834dac56f129ae740f48534d34c69c7c8f7a384336ebb2944c29225ff12f8b046906f15c85d62e0a33ee1e26fa8cdafd5b4230f8a3080ce94c020921c94d3d80cf8e3b0005243578f5cb037d73d389cfca1f80e0d2f968feac4f065f14982b1fd43abc07e6b5975ba7d712426b37c55d1e490df0153a78786913ed7637b1d840bfde0e1b7d339417ed280b1ddb49ee61eafedbaaa0a8d2cbc5bdccb0afa62f64ea4ff187fa6628397f9891a1f34aa8dd36d70ce1b5f09bc00100000000000000e073ebbcea086bc8e8da27d76939786776a523785c8d9f855bdebf1edf10e03336ab01cd5cf01d1029cd73f7ed80e25303ae4adcc92c32141d362f09f0ddfd8ac96f4ac935755951deec4790aad73f2a0d0ea95e61d823c36e79179300"/370], 0x24}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000dc0)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000008c0)={r2, 0x5, 0x80000001}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="080500988400014637b5e6a174b7b2b317b4044a94da343dd489e684a04f4ca90665864272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab7ea7e76402b517c198dc7ffbdbb38ab65f84f5242824efb291f523ece2d8e79434f9fe77da5ead57c5f16fed9a43b14e466358a6b4c3a1a8361e8199db7e4116e6031e72ada1c25a85ea221f56", @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) shutdown(r3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0x50, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x2e}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x674}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xd69}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xfffd}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x50}}, 0x40) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 12:13:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x15) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x80, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r1, 0x1277, &(0x7f0000000540)={'\x00', 0x8, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc02c2, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000200)="af", 0x1}, {&(0x7f00000004c0)="1296ca6b2afc3278755b7cdfd45d8a59295daccda003be4aa322e04b03eb93b79518fc6ddc4a2c882d4cd9e332e158e7c6b37c", 0x33}, {&(0x7f0000000340)}, {&(0x7f0000000540)="021d4747028b47c14b5e1b661173253d1f3becb69e674943f82f6f535f425b165476b035d2ce9eda801c14d4e45721d17f56c5934bfd13dc76901ebed1a1183e507adbd279b8c00f7dbef739702be0c4b7b4ce2622cfef50026b5127918d1ddc96db6944d2d13e2ba79b13afba4d575fd8593e7c195343e3d3661a6adbe66f54310e81", 0x83}], 0x4) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') openat$incfs(r3, &(0x7f0000000fc0)='.pending_reads\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000380), r2) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c9b65ae5b5d5dee79000000000068df49fc6e2bb0d200ca89e4fa7634509807000000000000", @ANYRES16=r4, @ANYBLOB="87ce2abd7000ffdbdf250100000008000800000000000800090001002000"], 0x24}, 0x1, 0x0, 0x0, 0x4008421}, 0x4002) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000c00)='/sys/power/pm_print_times', 0x0, 0x0) preadv2(r5, &(0x7f00000000c0)=[{0x0}], 0x1, 0x0, 0x0, 0x0) accept$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000000)={@loopback, 0x4, r6}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x20, 0x4, 0x1, 0x40, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, 0x17880, 0x700, 0x1, 0x80000000}}) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r4, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_LINK={0x8, 0x1, r6}, @GTPA_LINK={0x8, 0x1, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x140}, 0x40) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x9, 0x4) 12:13:23 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fork() tkill(r0, 0x26) waitid(0xfeffffff00000000, 0x0, 0x0, 0x4, 0x0) 12:13:23 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ftruncate(r0, 0x800) write$cgroup_netprio_ifpriomap(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="020000005f0090a7d630bf45a93bb7e4c8d230b05612ceade13f14a6dfa202cee2e9e8038ffc4699b06ce8cdfab04ebd113a0696c810e2fb438f1d1b4c00d9b2ba36d3392e7b109e2678e1c6a73792ef0bc885bce041d3689c5b41e930766e4067ee5eed0b12b3640c1fe9bea4278d9a2e246a9518563c23cda97962b07269a3197dcda8be0923cc986dc500"], 0x12) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendfile(r1, r0, 0x0, 0x8000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r3 = fcntl$dupfd(r2, 0x406, r2) sendmsg$inet6(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ftruncate(r3, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f00000003c0)="db9c", 0xffe7}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="140000000000000000000000070000000003000008000000000000267a96a7759cb229dedf3171561c7a7182d3da26c35f3647d12cdf329f78804356bee12324431f2afb6e6c3ebdc6bec4d84cf1744926d3c038c7355407a982a4aadb6c8cec01f1eaca56fc79e0f280383d1b06410f85152b60c6e62a72c2b42cb3b57c6f86c6ec92907386f1184cbc29e563b069cd4eefc9efd6292ae0e964a7c95446182185b1150f067c9a05d7186561021a663a8ce039a468557b00002617b92b63c8e60d05316c", @ANYRES32], 0x38}}], 0x1, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fef000/0x2000)=nil, 0x2000, 0xf, 0x12, r0, 0x0) syz_io_uring_submit(r4, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2000, 0x5, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) lseek(0xffffffffffffffff, 0x829, 0x0) mbind(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x0, 0x0, 0x0, 0x2) [ 1641.681970] audit: type=1326 audit(1751717603.568:1499): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14406 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1641.693873] audit: type=1326 audit(1751717603.569:1500): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14406 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=57 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1641.700733] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. 12:13:23 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)=0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001700)=ANY=[@ANYBLOB="010000009bd77e7d3db3c295", @ANYRES32, @ANYRES32=r2, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c652fe1451d4e7b754bc7f05f0ff404807bf64d176a29993195992c14f39ee8328796f81d1886f6cb48f1ed71a941835b5840190114208ef9dda4756eab00fcd38d0a302906ffc3e8f25260ef7b4e28db855ed9e895bd4b0fbdedef955a9ddf4161dc9347ef97623a3ebf9ca8933a81653dd955d769a92740fbed0519a0fe8fb2bb1420fa5a24997c0cf4682cd464c3bcd44c267b10cfd7565652376257be8c2ef9d94e9ad1d44011543b4d0e2c77577a1157a58a7edab4a0981d3549776f00"/210]) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x4827d9d3570e76e1}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb62) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400ffbd0000"], 0x14}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup(r4) r5 = dup2(r1, r3) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x8010, r5, 0x10000000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@private, @in=@initdev}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000280)=0xe8) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1641.876364] audit: type=1326 audit(1751717603.763:1501): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14406 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1641.881169] audit: type=1326 audit(1751717603.763:1502): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14406 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1641.931280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1641.933200] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1641.938173] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:13:39 executing program 4: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0xffffffff, @empty, 0x20002}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r2 = openat(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0x280, 0x141) r3 = fcntl$dupfd(r1, 0x406, r1) sendmsg$inet6(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x80000c, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) rmdir(&(0x7f00000000c0)='./file0\x00') sendmsg$nl_generic(r2, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x29c, 0x27, 0x100, 0x70bd2d, 0x25dfdbfc, {0x11}, [@nested={0x228, 0x5b, 0x0, 0x1, [@generic="20de0495a4db1ecf3455787d63828073c19435f83f10e4365b8fae37328e7422cc5b62af70dc15c45cb4ee5052d8a913ec194fa2577c50dac40a2ab232b3e7ee37e16bbc72347f97ebba150f8c7dfa685aee546831223fc1a7f0de10d8638ecf888ec665c1e8ca59fd4f416b4c04cb", @generic="01d56e2ab2ea201cdea7a35a981e2ced931be39b60aa78a1f94595e49d11607ecf8e4dff96af33dd03cd716962ed9c071dcacf9e240d7104b3e5d3f8fdd4aa35e96bbd07bc64237a9e8ae78d5fe848a7448858b6e4d87fddbec80cd02a7e01d3cdfd8e32e7f059c6a5f6b3c0ab870352b05184e240c026943a662f59318e8d35f42f33b62ddec2480f0405b5d7a84baf45801be4f3ed0035ab5ad9ce265954bc47d37db41dc5dcb30893b64367691cd28c5b50028012df0d88da6ed988338490dcce82db52d954ca8e522ff20972b3c410c339c9fc95bd96007628f80c92ff3d30e701a909915ce87512da21", @generic="bcacc317cd79c4fa2ae76bcf6a43774fc7168e10256569378d8a554c7862ed6026466f63e644dc11e39f09dd8a105572cacef96b23299563ad6a883fed33a70d0a8149c7290f45c3d235d5ecf2d31d53c200d9743aacb0241d4d84b01a3dbe6de7cba16816e04450101c18308612bdb67806fe982bc51896289cec8e40585c4b6bbec0dc43352ae2d86b3020bfe61389712a268dc94b418cc3fc3a9e815a1e9ebf0cdc010ac5f96ed79c42956a980df920af35fa52065be93c27d1b0212d7dbdd0bf0b11a9", @typed={0x4, 0x70}]}, @generic="e353838b60aaf633785567f988dd478533321b47fa7c71ec26b1b193716e6b13ba316052672d7103d2d4c320793de7d465d9945b95d1d1fab4ecd3fb03d554a96219fa438c0fd2b277866b25e9c21e25dddc2ef68b4e07afc89decb4c108e6"]}, 0x29c}, 0x1, 0x0, 0x0, 0x8000000}, 0x4844) 12:13:39 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) 12:13:39 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)=0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001700)=ANY=[@ANYBLOB="010000009bd77e7d3db3c295", @ANYRES32, @ANYRES32=r2, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c652fe1451d4e7b754bc7f05f0ff404807bf64d176a29993195992c14f39ee8328796f81d1886f6cb48f1ed71a941835b5840190114208ef9dda4756eab00fcd38d0a302906ffc3e8f25260ef7b4e28db855ed9e895bd4b0fbdedef955a9ddf4161dc9347ef97623a3ebf9ca8933a81653dd955d769a92740fbed0519a0fe8fb2bb1420fa5a24997c0cf4682cd464c3bcd44c267b10cfd7565652376257be8c2ef9d94e9ad1d44011543b4d0e2c77577a1157a58a7edab4a0981d3549776f00"/210]) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x4827d9d3570e76e1}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb62) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400ffbd0000"], 0x14}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup(r4) r5 = dup2(r1, r3) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x8010, r5, 0x10000000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@private, @in=@initdev}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000280)=0xe8) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 12:13:39 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xc, &(0x7f0000000100)={0x5, 0xfffffffffffffffd}, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xffffffff000) (fail_nth: 7) 12:13:39 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fork() tkill(r0, 0x26) waitid(0xffffffff00000000, 0x0, 0x0, 0x4, 0x0) 12:13:39 executing program 7: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000018c0)=ANY=[@ANYBLOB="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"/370], 0x24}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000dc0)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000008c0)={r2, 0x5, 0x80000001}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="080500988400014637b5e6a174b7b2b317b4044a94da343dd489e684a04f4ca90665864272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab7ea7e76402b517c198dc7ffbdbb38ab65f84f5242824efb291f523ece2d8e79434f9fe77da5ead57c5f16fed9a43b14e466358a6b4c3a1a8361e8199db7e4116e6031e72ada1c25a85ea221f56", @ANYRES16, @ANYBLOB="04002cbd7000fddbdf2575000000c401f08067000b00677cfd4589c7a40e1aae6b18247eb36f74f8f6793b7df9ae3ca9cfb2f5e87ed1ff361592201a1151eabf57ad6fd1950cd215131f67634030aa5f484986ad830a6243bac401c3ee44bff7cea60e881d5f9b616582cf28ec620ccd97d4ceb48c6727530f00050001000100000005000f004000000008000a000000000005000f000400000038010c80050003000300000003010200a207624e07c5690d555d459080990de6741a392aa42eff746330a20bec78fd393092b5f99f54b2a9f6dadb55db3c0846814e79eb43bf7bcd6295c96e7ca16288a8b27c5a225a6d718ad49f0366f969983400ba504c865cca04e4fa00a4b246fa618936f70fe77c1c3e550a5d12d4a9108e7e4216bc693107c3bd4c06e98ec9399de0e98cf205057cbbf688d8a13dc55472fc31954b846e29dbd7d8889b34ead6c83c9b533b666abd65490f2a7e693d55d91f24d5078eb3d34940c02ea1125e7176e254c6bd5531ed067817f0b3278e3dc492571b7da828e728a6fa55742efa33f430739c320b794841adba4c2875044dce9c8959eebe4a5b52d68f9868719f00280004800a000600ffffffffffff00000a000600ffffffffffff00000a000600ffffffffffff00000c01f0800a000200ee90b393fc10000046000b005cbb9f225903f92e0cffa77bd5369da32f70909f5950f26e59525d4d3c41b9e512f4a5d3b7aaaf8a0e03f2aa73274b24a04b4a689bf05844d0d2ad278696b14fb4c50000b4000d80af0000001263800a6541e18dae533feb73677b5c9d5da0ee4d7366d47dd6fa0b14ca33d3433171a533a29930fb5e0d9ff2ca710ab0c8aa4b331d58b4a7b3cac9c9b4ef9e7cdb1d3d6da7f0877a5c3ce7ff9bf9e936b1bcbe732bd9037f9090bfdee1d3e45c7b700e6aefa488eb013b27cd7291a7b927dc10e794490c85dff0cb49a1dd13066b619ace5d6bf763b6858bf07eeb0f5514c3ce6c90d8457d79fcd2a3756ccd66b5194a5c69358e1199219e40ffdd6771943cb3fe33f442ae2ff2002c01f080050003000600000005000300020000000a000200957ccca020ad0000e4000b0049a0db966a0311d932607f2a479e651b881a56f4da7d14bde06c48822b0d353198bb85750dc9f0cca70174b813fe94ea80477bcf9dd6b03b9186edb85c476d8762dc273e83aaee35def167cc1c8faffc0e86fa311d66813cbea7e234d79e9d3acd30b5ae5a264e9576efabc94efd7a18b93eddabd9b046d12df487392f1217b77f05bd72f95130a2bda683b7a64c3d6477e3681d83c5e45e8fdae553114b304417851d9687ab3b9c6c7e91af7744d120000000332c31b35f4358643e4137a9e6b264a14e04605648b50e27e3bb5cbbdaac70655fdff371ece3e08885f0da8d700a000800080211000000000005000100000000000a000800080211000000000005000300c9000000f800f08008000a000100008004000500050010007f0000000a0002005a9cbd08ca8e000014000c800500030008000000050003005e000000c0000b003a3801c2eefaea9df8f27b808f751948873b3fa40dd675c2f1b45ab2dbcdf1903fb052565c23c23d861899509fb26a1f672416325f004d2fdd903c5fa86b4bf1e39074929e71f3a466d345a8e660cd8d401a4772051ab211e24ede74314ef8b7a2c04c8a87b4e5603f7592bc89521d454d3528dce3959d8613c413eafce02151dc1f76a1ace92831610ea0894d9f59407f66cbe556e636be5a3d01253ec1c755495e5196efdf7f155cba102e"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) shutdown(r3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0x50, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x2e}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x674}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xd69}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xfffd}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x50}}, 0x40) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 12:13:39 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x50102, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000540)='net/rpc\x00') fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000180)) io_setup(0x3, &(0x7f0000000000)) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x881) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@initdev, @in=@empty}}, {{@in=@initdev}, 0x0, @in=@broadcast}}, &(0x7f0000000200)=0xe8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) r2 = syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b8, 0x8, 0x1, 0xf8}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x52) connect$bt_l2cap(r3, &(0x7f0000000440)={0x1f, 0x3, @none, 0xffc0}, 0xe) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x50, r2, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f00000001c0)=0x20) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 12:13:39 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x80500, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x8008330e, &(0x7f0000000200)) ftruncate(r1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = syz_mount_image$tmpfs(0x0, 0x0, 0x9, 0x0, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYRESHEX=0xee01, @ANYBLOB="ca6700ee3c5cf82fe22490b4080049980cb058100001000000000000000000000000003cb267190000a1a41156a63559d8c56f52d58b4e9a97d3a51e7ff9883ea16d9d80c7fbfa75d8cf60000039658a70fdaac3136eea651691b78d982cc5a7b8653577e175e130409dc40edfda023788981d6591710c701a0c007aa12bb4d9dd66090040572473bb3893a3345676771b4a0a65f57226071070fb093856d078d3627fd8d55277da1103deb9b076ac030000000000000000000000000000000000000000000000000000f5000000000000000000000000007a40"]) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x26}, 0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="342f66696c6530006920015f1db0eaabec57412a3c93a0039602aaab0575abf30418b3697baae9e2aace4804585e40f7494f8521b06b461c205f6f96bfe2b2d0a440bf19fe1931ebbe216046b6613fd4463fc5c5a1b25ca6c8596e96f191d68dc30550d48a1ac3"]) r4 = dup(0xffffffffffffffff) dup(r4) pipe(&(0x7f00000001c0)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80010}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r5, 0x1277, &(0x7f0000000000)={'\x00', 0x0, 0x5, 0x0, 0x0, 0x1, 0xffffffffffffffff}) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000100)='\x00') [ 1657.212062] audit: type=1326 audit(1751717619.098:1503): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14531 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1657.220622] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1657.221012] audit: type=1326 audit(1751717619.099:1504): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14531 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1657.239615] FAULT_INJECTION: forcing a failure. [ 1657.239615] name failslab, interval 1, probability 0, space 0, times 0 [ 1657.241319] CPU: 0 PID: 14543 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 1657.242198] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1657.243252] Call Trace: [ 1657.243598] dump_stack+0x107/0x167 [ 1657.244110] should_fail.cold+0x5/0xa [ 1657.244670] ? ext4_init_io_end+0x23/0x180 [ 1657.245289] should_failslab+0x5/0x20 [ 1657.245817] kmem_cache_alloc+0x5b/0x310 [ 1657.246344] ext4_init_io_end+0x23/0x180 [ 1657.246856] ext4_writepages+0x8ec/0x3350 [ 1657.247041] audit: type=1326 audit(1751717619.105:1505): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14531 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=57 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1657.247399] ? unwind_next_frame+0x13ef/0x1a90 [ 1657.253594] ? find_held_lock+0x2c/0x110 [ 1657.254124] ? __ext4_mark_inode_dirty+0x770/0x770 [ 1657.254748] ? __is_insn_slot_addr+0x14c/0x290 [ 1657.255339] ? __kernel_text_address+0x9/0x40 [ 1657.255924] ? unwind_get_return_address+0x55/0xa0 [ 1657.256547] ? create_prof_cpu_mask+0x20/0x20 [ 1657.257138] ? stack_trace_save+0x8c/0xc0 [ 1657.257669] ? stack_trace_consume_entry+0x160/0x160 [ 1657.258325] ? kasan_save_stack+0x32/0x40 [ 1657.258848] ? kasan_save_stack+0x1b/0x40 [ 1657.259374] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1657.260029] ? __ext4_mark_inode_dirty+0x770/0x770 [ 1657.260649] do_writepages+0xee/0x2a0 [ 1657.261144] ? page_writeback_cpu_online+0x20/0x20 [ 1657.261771] ? lock_acquire+0x197/0x470 [ 1657.262281] ? create_object.isra.0+0x3ad/0xa20 [ 1657.262876] ? lock_release+0x680/0x680 [ 1657.263389] ? find_held_lock+0x2c/0x110 [ 1657.263917] __filemap_fdatawrite_range+0x24b/0x2f0 [ 1657.264561] ? delete_from_page_cache_batch+0xa30/0xa30 [ 1657.265240] ? mark_held_locks+0x9e/0xe0 [ 1657.265765] ? trace_hardirqs_on+0x5b/0x180 [ 1657.266320] filemap_write_and_wait_range+0x65/0x100 [ 1657.266971] __iomap_dio_rw+0x552/0x1110 [ 1657.267497] ? iomap_dio_bio_actor+0xef0/0xef0 [ 1657.268078] ? down_read+0x10f/0x430 [ 1657.268553] ? lock_chain_count+0x20/0x20 [ 1657.269074] ? down_write+0x160/0x160 [ 1657.269559] iomap_dio_rw+0x31/0x90 [ 1657.270023] ext4_file_read_iter+0x2c7/0x4c0 [ 1657.270591] generic_file_splice_read+0x455/0x6d0 [ 1657.271210] ? pipe_to_user+0x170/0x170 [ 1657.271723] ? fsnotify_perm.part.0+0x22d/0x620 [ 1657.272322] ? security_file_permission+0xb1/0xe0 [ 1657.272936] ? pipe_to_user+0x170/0x170 [ 1657.273448] do_splice_to+0x10e/0x160 [ 1657.273939] splice_direct_to_actor+0x2fe/0x980 [ 1657.274538] ? pipe_to_sendpage+0x380/0x380 [ 1657.275085] ? do_splice_to+0x160/0x160 [ 1657.275586] ? security_file_permission+0xb1/0xe0 [ 1657.276217] do_splice_direct+0x1c4/0x290 [ 1657.276746] ? splice_direct_to_actor+0x980/0x980 [ 1657.277369] ? avc_policy_seqno+0x9/0x70 [ 1657.277896] ? security_file_permission+0xb1/0xe0 [ 1657.278521] do_sendfile+0x553/0x11e0 [ 1657.279015] ? do_pwritev+0x270/0x270 [ 1657.279502] ? wait_for_completion_io+0x270/0x270 [ 1657.280138] ? rcu_read_lock_any_held+0x75/0xa0 [ 1657.280729] ? vfs_write+0x354/0xb10 [ 1657.281209] __x64_sys_sendfile64+0x1d1/0x210 [ 1657.281779] ? __ia32_sys_sendfile+0x220/0x220 [ 1657.282367] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1657.283043] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1657.283704] do_syscall_64+0x33/0x40 [ 1657.284190] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1657.284844] RIP: 0033:0x7faa9a814b19 [ 1657.285322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1657.287663] RSP: 002b:00007faa97d8a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1657.288640] RAX: ffffffffffffffda RBX: 00007faa9a927f60 RCX: 00007faa9a814b19 [ 1657.289563] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1657.290472] RBP: 00007faa97d8a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1657.291374] R10: 00000ffffffff000 R11: 0000000000000246 R12: 0000000000000001 [ 1657.292285] R13: 00007ffe551f30cf R14: 00007faa97d8a300 R15: 0000000000022000 12:13:39 executing program 2: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCGICOUNT(r0, 0x545d, 0x0) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r1, 0x1277, &(0x7f0000000540)={'\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) [ 1657.329470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1657.330581] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1657.331570] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1657.335229] audit: type=1326 audit(1751717619.221:1506): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14531 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 12:13:39 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)=0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001700)=ANY=[@ANYBLOB="010000009bd77e7d3db3c295", @ANYRES32, @ANYRES32=r2, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c652fe1451d4e7b754bc7f05f0ff404807bf64d176a29993195992c14f39ee8328796f81d1886f6cb48f1ed71a941835b5840190114208ef9dda4756eab00fcd38d0a302906ffc3e8f25260ef7b4e28db855ed9e895bd4b0fbdedef955a9ddf4161dc9347ef97623a3ebf9ca8933a81653dd955d769a92740fbed0519a0fe8fb2bb1420fa5a24997c0cf4682cd464c3bcd44c267b10cfd7565652376257be8c2ef9d94e9ad1d44011543b4d0e2c77577a1157a58a7edab4a0981d3549776f00"/210]) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x4827d9d3570e76e1}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb62) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400ffbd0000"], 0x14}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup(r4) r5 = dup2(r1, r3) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x8010, r5, 0x10000000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@private, @in=@initdev}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000280)=0xe8) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1657.346440] audit: type=1326 audit(1751717619.221:1507): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14531 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 12:13:39 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fork() tkill(r0, 0x26) waitid(0x0, 0x0, 0x0, 0x2, 0x0) 12:13:39 executing program 7: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000018c0)=ANY=[@ANYBLOB="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"/370], 0x24}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000dc0)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000008c0)={r2, 0x5, 0x80000001}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="080500988400014637b5e6a174b7b2b317b4044a94da343dd489e684a04f4ca90665864272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab7ea7e76402b517c198dc7ffbdbb38ab65f84f5242824efb291f523ece2d8e79434f9fe77da5ead57c5f16fed9a43b14e466358a6b4c3a1a8361e8199db7e4116e6031e72ada1c25a85ea221f56", @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) shutdown(r3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0x50, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x2e}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x674}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xd69}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xfffd}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x50}}, 0x40) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1657.448560] audit: type=1326 audit(1751717619.335:1508): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14658 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1657.452677] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1657.454184] audit: type=1326 audit(1751717619.338:1509): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14658 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=57 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 12:13:39 executing program 4: r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0xffffffff, @empty, 0x20002}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r2 = openat(0xffffffffffffffff, &(0x7f0000000300)='./file1\x00', 0x280, 0x141) r3 = fcntl$dupfd(r1, 0x406, r1) sendmsg$inet6(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='devtmpfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x80000c, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) rmdir(&(0x7f00000000c0)='./file0\x00') sendmsg$nl_generic(r2, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)={0x29c, 0x27, 0x100, 0x70bd2d, 0x25dfdbfc, {0x11}, [@nested={0x228, 0x5b, 0x0, 0x1, [@generic="20de0495a4db1ecf3455787d63828073c19435f83f10e4365b8fae37328e7422cc5b62af70dc15c45cb4ee5052d8a913ec194fa2577c50dac40a2ab232b3e7ee37e16bbc72347f97ebba150f8c7dfa685aee546831223fc1a7f0de10d8638ecf888ec665c1e8ca59fd4f416b4c04cb", @generic="01d56e2ab2ea201cdea7a35a981e2ced931be39b60aa78a1f94595e49d11607ecf8e4dff96af33dd03cd716962ed9c071dcacf9e240d7104b3e5d3f8fdd4aa35e96bbd07bc64237a9e8ae78d5fe848a7448858b6e4d87fddbec80cd02a7e01d3cdfd8e32e7f059c6a5f6b3c0ab870352b05184e240c026943a662f59318e8d35f42f33b62ddec2480f0405b5d7a84baf45801be4f3ed0035ab5ad9ce265954bc47d37db41dc5dcb30893b64367691cd28c5b50028012df0d88da6ed988338490dcce82db52d954ca8e522ff20972b3c410c339c9fc95bd96007628f80c92ff3d30e701a909915ce87512da21", @generic="bcacc317cd79c4fa2ae76bcf6a43774fc7168e10256569378d8a554c7862ed6026466f63e644dc11e39f09dd8a105572cacef96b23299563ad6a883fed33a70d0a8149c7290f45c3d235d5ecf2d31d53c200d9743aacb0241d4d84b01a3dbe6de7cba16816e04450101c18308612bdb67806fe982bc51896289cec8e40585c4b6bbec0dc43352ae2d86b3020bfe61389712a268dc94b418cc3fc3a9e815a1e9ebf0cdc010ac5f96ed79c42956a980df920af35fa52065be93c27d1b0212d7dbdd0bf0b11a9", @typed={0x4, 0x70}]}, @generic="e353838b60aaf633785567f988dd478533321b47fa7c71ec26b1b193716e6b13ba316052672d7103d2d4c320793de7d465d9945b95d1d1fab4ecd3fb03d554a96219fa438c0fd2b277866b25e9c21e25dddc2ef68b4e07afc89decb4c108e6"]}, 0x29c}, 0x1, 0x0, 0x0, 0x8000000}, 0x4844) 12:13:39 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = accept(0xffffffffffffffff, &(0x7f0000000100)=@in={0x2, 0x0, @local}, &(0x7f0000000080)=0x80) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_SENDMSG={0x9, 0x1, 0x0, r0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=@qipcrtr={0x2a, 0x3, 0x2}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000200)="d1421075b7faa7", 0x7}, {&(0x7f0000000240)="ca9d62a6ebec74c6e67bafe6dcebbf3bf97b0de46b2d040c524bc9ecf1256ef1153aa93329fd6781db5f4ac8334c49bb968ca4dbdf0ffeac1b057f5ccc522549374b97e12ce808f722b61df355726b6eced1c755e9a2692e5536995f753614fb585a8daddca25b7bc146f165a971d9a0d8f077939fd501f34efa0fb94d284e6070ede23f53ba63b2c09509dcb7855d31ca63c977c2ee83b09e3f3b95e697519fcdd15517eaae853b75b7f34f093df00abbbe8c9646234f6f6660050f3e2d77f453530c6e2c8599212d616c2c50f64152f5f151ed1fa6037d", 0xd8}], 0x2, &(0x7f00000005c0)=[{0x108, 0x119, 0x85, "48ca4d4ec875e627f02cc36d22ca549d36fe61e83c2cc8e910630b36484ed0f9847d0e5cdaae759e4bf63220e0ab1f90af837bfdc25de2a198f4156fa5d32fc143abae0f9383484580255dd099ed07eaa112e108779f73fb9043388608adf199dbec34a5a78e541ddba48a35cb4ca2e7e90d6ef1de99dc051278b8ab0a90c6b45695f1a4dfc370cb8d18089bcd5fbeb1b6edd28c7f04d07f591bac488ed2f0197bb364787c36b7d081a7210c54d451944419511e8bb90220c96e33821ef03406885a4dfc3a440b9341720b37226d55e3c94dc70a1103b79110520f79e05ed0de63cfd86cd4092a9b098501251dc216c26efe"}, {0xc8, 0x110, 0x4, "22512ae170a4b661e33ffc6a872d8ed973a35b9985364cfe2a39e407a8c78231e8499180264b36edad6174a5ec4c7569219a7ff9f10bd78bc71d93674ccbac96a05ddf87a62f4c5996ead18c91ccf6985645a15798b532ddfa1e7f75b4a6834dec34e4da669ac750072c795c96cdc0482e0f7f33aa50a32e4d68a12de778073120b8c068cd65bc55cdc95917fe8e869c163894d307a15ede96043162e1c7c23bc4cac6408c16389bc0cc4d8c16e6bf87289dd09c358133"}, {0x1010, 0x0, 0x7f, "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"}, {0x1010, 0x118, 0x9, "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"}, {0x68, 0x108, 0x1, "b059035217d4047b996cb84323350169990089c3c4c65614cdef93b125b5cda1dfaa1a86495cc59b81788e4d127ae3db584c78504ce05cd40eca72ebd229b1ce69e2fa9ae0b4670bc44d4e56278f7816a63cbe7a6e85331d"}, {0x28, 0x10d, 0x5b, "e10e965cc5918df6d96b134cdc9f8fee936f453031bdd355"}], 0x2280}, 0x0, 0x50, 0x0, {0x0, r1}}, 0x3) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0xd7) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) ioctl$BLKTRACESETUP(r2, 0x1277, &(0x7f0000000540)={'\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 12:13:39 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xfffffff0002) [ 1657.522275] audit: type=1326 audit(1751717619.408:1510): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14658 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1657.534760] audit: type=1326 audit(1751717619.409:1511): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14658 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1657.553273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1657.554267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1657.555284] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1673.040961] audit: type=1326 audit(1751717634.927:1512): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14785 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 12:13:54 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fork() tkill(r0, 0x26) waitid(0x0, 0x0, 0x0, 0x3, 0x0) 12:13:54 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)=0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001700)=ANY=[@ANYBLOB="010000009bd77e7d3db3c295", @ANYRES32, @ANYRES32=r2, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c652fe1451d4e7b754bc7f05f0ff404807bf64d176a29993195992c14f39ee8328796f81d1886f6cb48f1ed71a941835b5840190114208ef9dda4756eab00fcd38d0a302906ffc3e8f25260ef7b4e28db855ed9e895bd4b0fbdedef955a9ddf4161dc9347ef97623a3ebf9ca8933a81653dd955d769a92740fbed0519a0fe8fb2bb1420fa5a24997c0cf4682cd464c3bcd44c267b10cfd7565652376257be8c2ef9d94e9ad1d44011543b4d0e2c77577a1157a58a7edab4a0981d3549776f00"/210]) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x4827d9d3570e76e1}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb62) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400ffbd0000"], 0x14}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup(r4) r5 = dup2(r1, r3) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x8010, r5, 0x10000000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@private, @in=@initdev}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000280)=0xe8) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 12:13:54 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x50102, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000540)='net/rpc\x00') fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000180)) io_setup(0x3, &(0x7f0000000000)) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x46000) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x127c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x1, 0x84) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x881) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0xfffb}, 0xe) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@initdev, @in=@empty}}, {{@in=@initdev}, 0x0, @in=@broadcast}}, &(0x7f0000000200)=0xe8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) r2 = syz_io_uring_setup(0x47aa, &(0x7f0000000280)={0x0, 0x15b8, 0x8, 0x1, 0xf8}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000300)) r3 = creat(&(0x7f0000000240)='./file0\x00', 0x52) connect$bt_l2cap(r3, &(0x7f0000000440)={0x1f, 0x3, @none, 0xffc0}, 0xe) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x50, r2, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f00000001c0)=0x20) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xe) sendmmsg(r0, &(0x7f0000001040), 0x3fffffffffffdca, 0x40) 12:13:54 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xffffffff002) 12:13:54 executing program 4: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x7fff) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534b, &(0x7f00000000c0)) 12:13:54 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x100, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r0, 0x1277, &(0x7f0000000540)={'\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000040)) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000200)={0xffffffffffffffff, 0x40, 0x3, 0xa4}) ioctl$AUTOFS_IOC_PROTOVER(r2, 0x80049363, &(0x7f0000000240)) statx(r0, &(0x7f0000000000)='./file0\x00', 0x100, 0x1, &(0x7f0000000800)) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) fcntl$dupfd(r3, 0x406, r3) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, &(0x7f0000000340)={0x3, 0x30, '\x00', 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) [ 1673.050658] audit: type=1326 audit(1751717634.937:1513): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14785 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=57 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 sendmsg$inet6(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000380)={0xa, 0x4e22, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f00000006c0)=[{&(0x7f00000003c0)="d50a174599ebca9d909bf1e045f5695974093a62ed125b2ffe", 0x19}, {&(0x7f0000000440)="192713629ae84726e510441f5d896b57cade217deff40e9bd5c4f1b1934df9fae48bbbcb879aafa15f44e9cd", 0x2c}, {&(0x7f0000000c00)="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", 0xffffffffffffffa7}, {&(0x7f0000000480)="ed39469354af05d75c358acf0297623d23eecc74e86c791a878cc80c163ecb9f6902d88a3e99198e5f1fa159e976246e6f6fb57033c3a036d2eea00da36c5d38f1995d66d83ebfcd66a28676fdd10c71a2ce450aed21a6ea73e388bffa2e5de19999db5e8752374a558de8b60aa771569b0786", 0x73}, {&(0x7f0000000500)="60120a001026984a91c12afc92271c594b6556077e0e2b2870fc31f3befe7f7942fd46ef3fbafa927aab232336863eab083405", 0x33}, {&(0x7f00000005c0)="10963a18e00e7ad94c88c62312f5ba6023a08fc9d4cfc16fb8d1845869b9b25324a0c845fd74223db4bc6b49515851eba433c35fc0138f9d4257dcc85573902df8750b78d4c09641b4e598fa345ef801c59e0cc9f620b7fd5a657ec163514d59cb26b9564305228dc04d2dd814d308357ef9428bb4c91e01c2893a3060d22934e18dc3e168c91fdd21ede2493a78397b6e8ecd4695dd0b02d1447270eca1e310ff9f658a6e91b767aa2e55ea56c36018efbc8cfd1197de2c", 0xb8}, {&(0x7f0000001c00)="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", 0x1000}, {&(0x7f0000000680)="6ad6e09ca2034a440323300593d3f1cc850bcbeadabcb74156108cec7d47021b29", 0x21}], 0x8, &(0x7f0000000900)=ANY=[@ANYBLOB="13ffffa8000fe8954acd71ee4d00009c05000000000000020000000090c2ec1b371ab87500003400fac29f2d5ecdafd400000000000000938a709bb7aeeed7e11f51ca0abcc0f7e76532e77e2d288a5cc88d813f1978922e120500e754ab051b5f3790910f8768fa419d4f9100288f7a21d7c8dc9f482da16093ef412d2edc80b4867029b33557c9ddee03c6c9d21c4de5962c22d290007abc0485ac0e2fe7c763e739af15add56ddbe8891bc3c24a5710006b98bf7c5a42190661dc3d62ac51ee13d4014a408ba126b9f19282782da91c02d152dd5d98ead635a9ed9b9982c4886bf8986a50f73886cea88ff59fb30eb4f0e54bac21353b154bb9ddf86cd36b5c"], 0x48}, 0x0) 12:13:54 executing program 7: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000018c0)=ANY=[@ANYBLOB="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"/370], 0x24}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000dc0)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000008c0)={r2, 0x5, 0x80000001}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="080500988400014637b5e6a174b7b2b317b4044a94da343dd489e684a04f4ca90665864272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab7ea7e76402b517c198dc7ffbdbb38ab65f84f5242824efb291f523ece2d8e79434f9fe77da5ead57c5f16fed9a43b14e466358a6b4c3a1a8361e8199db7e4116e6031e72ada1c25a85ea221f56", @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) shutdown(r3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) [ 1673.079203] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. [ 1673.096083] FAULT_INJECTION: forcing a failure. [ 1673.096083] name failslab, interval 1, probability 0, space 0, times 0 sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0x50, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x2e}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x674}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xd69}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xfffd}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x50}}, 0x40) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 12:13:54 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xc, &(0x7f0000000100)={0x5, 0xfffffffffffffffd}, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xffffffff000) (fail_nth: 8) [ 1673.098720] CPU: 1 PID: 14793 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 1673.100452] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1673.102251] Call Trace: [ 1673.102837] dump_stack+0x107/0x167 [ 1673.103631] should_fail.cold+0x5/0xa [ 1673.104468] ? create_object.isra.0+0x3a/0xa20 [ 1673.105467] should_failslab+0x5/0x20 [ 1673.106291] kmem_cache_alloc+0x5b/0x310 [ 1673.107177] create_object.isra.0+0x3a/0xa20 [ 1673.108135] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1673.109237] kmem_cache_alloc_trace+0x151/0x320 [ 1673.110260] __iomap_dio_rw+0x1ee/0x1110 [ 1673.111152] ? lock_release+0x680/0x680 [ 1673.112031] ? iomap_dio_bio_actor+0xef0/0xef0 [ 1673.113031] ? down_read+0x10f/0x430 [ 1673.113840] ? lock_chain_count+0x20/0x20 [ 1673.114737] ? down_write+0x160/0x160 [ 1673.115568] iomap_dio_rw+0x31/0x90 [ 1673.116372] ext4_file_read_iter+0x2c7/0x4c0 [ 1673.117328] generic_file_splice_read+0x455/0x6d0 [ 1673.118377] ? pipe_to_user+0x170/0x170 [ 1673.119244] ? fsnotify_perm.part.0+0x22d/0x620 [ 1673.120264] ? security_file_permission+0xb1/0xe0 [ 1673.121316] ? pipe_to_user+0x170/0x170 [ 1673.122189] do_splice_to+0x10e/0x160 [ 1673.123014] splice_direct_to_actor+0x2fe/0x980 [ 1673.124031] ? pipe_to_sendpage+0x380/0x380 [ 1673.124967] ? do_splice_to+0x160/0x160 [ 1673.125828] ? security_file_permission+0xb1/0xe0 [ 1673.126885] do_splice_direct+0x1c4/0x290 [ 1673.127785] ? splice_direct_to_actor+0x980/0x980 [ 1673.128835] ? avc_policy_seqno+0x9/0x70 [ 1673.129720] ? security_file_permission+0xb1/0xe0 [ 1673.130772] do_sendfile+0x553/0x11e0 [ 1673.131609] ? do_pwritev+0x270/0x270 [ 1673.132448] ? wait_for_completion_io+0x270/0x270 [ 1673.133492] ? rcu_read_lock_any_held+0x75/0xa0 [ 1673.134508] ? vfs_write+0x354/0xb10 [ 1673.135316] __x64_sys_sendfile64+0x1d1/0x210 [ 1673.136289] ? __ia32_sys_sendfile+0x220/0x220 [ 1673.137278] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1673.138376] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1673.139495] do_syscall_64+0x33/0x40 12:13:55 executing program 4: listen(0xffffffffffffffff, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f00000001c0), 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x6) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100", @ANYRES32=r0, @ANYBLOB='\x00'/16]) bind(0xffffffffffffffff, &(0x7f0000000040)=@sco, 0x80) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001d00210c00000000000000000400020014001180801801a7b0c7dba09475f251c743092f2000008008000000887be291aa6fbd3acb1b0001602eb7", @ANYRES32=r1, @ANYBLOB="14000000fe8000000000000000000000000000bb"], 0x48}}, 0x0) r2 = accept$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond_slave_1\x00'}) [ 1673.140308] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1673.141627] RIP: 0033:0x7faa9a814b19 [ 1673.142435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1673.146426] RSP: 002b:00007faa97d8a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1673.148086] RAX: ffffffffffffffda RBX: 00007faa9a927f60 RCX: 00007faa9a814b19 [ 1673.149622] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1673.151168] RBP: 00007faa97d8a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1673.152714] R10: 00000ffffffff000 R11: 0000000000000246 R12: 0000000000000001 [ 1673.154254] R13: 00007ffe551f30cf R14: 00007faa97d8a300 R15: 0000000000022000 12:13:55 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r0, 0x1277, &(0x7f0000000000)={'\x00', 0x2000, 0x0, 0x0, 0x0, 0x40000000, 0xffffffffffffffff}) syz_open_dev$sg(&(0x7f0000000080), 0xffffffffffffffff, 0x42200) 12:13:55 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)=0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001700)=ANY=[@ANYBLOB="010000009bd77e7d3db3c295", @ANYRES32, @ANYRES32=r2, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c652fe1451d4e7b754bc7f05f0ff404807bf64d176a29993195992c14f39ee8328796f81d1886f6cb48f1ed71a941835b5840190114208ef9dda4756eab00fcd38d0a302906ffc3e8f25260ef7b4e28db855ed9e895bd4b0fbdedef955a9ddf4161dc9347ef97623a3ebf9ca8933a81653dd955d769a92740fbed0519a0fe8fb2bb1420fa5a24997c0cf4682cd464c3bcd44c267b10cfd7565652376257be8c2ef9d94e9ad1d44011543b4d0e2c77577a1157a58a7edab4a0981d3549776f00"/210]) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x4827d9d3570e76e1}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb62) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400ffbd0000"], 0x14}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup(r4) r5 = dup2(r1, r3) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x8010, r5, 0x10000000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@private, @in=@initdev}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000280)=0xe8) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 12:13:55 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xffffffff003) [ 1673.306047] audit: type=1326 audit(1751717635.192:1514): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14785 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1673.315016] audit: type=1326 audit(1751717635.201:1515): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14785 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1673.321452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1673.323082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1673.325023] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:13:55 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xffffffffffff8001, 0x8, &(0x7f00000006c0)=[{&(0x7f0000000100)="6a598aa34aff0514d449225efafe04badbb21b6514abc9ba3b40f5cfea58b1bb7d36125cf25513cf504a137796ce86ceac46933791d3a0c378147844d0689a506ccec78f39ffcfa07d676c87cd7bab5667fbe511cc7e6e2777bbb27e90aaf207a8bf9b9406df017d19f63ad5b9ec69dbd0147e2f46276c4903f5d54651932471f4900f47a8d9a17b1a4302d1410dbf8799ee65714b05660b7c706b31a0f6b20d7afc4f30b3f87600319217c190461a00"/186, 0xba}, {&(0x7f00000001c0)="9911398798f045e17d14800cc856b25f6a9fff64700c999525e27bb9c7c79e0797d57394f07f3cd574c62ac2886b7da39a268efead5870019f80fd1b26ae421b06db3f10a8d7d0cb8a9e5a44144d338348478d6914d12261bae04f80cd8e05359fb7901122", 0x65, 0x5}, {&(0x7f0000000240)="00058629591e9b2ac371d6919ba123780167464a0689ac3ef3b0dd25256667743712cd265d96308c034cc74896436c6f9f1a6c9698b977b2115a1f67fe6fdfd3f37e7c1c75a7ae06644273305e01bb98a5e74128143d9364af17ce3de7e98b6ba7ca4c80a5a0e71114675c92daf9d305475613a12ddfce2d238c07258f7924", 0x7f, 0xbadd}, {&(0x7f00000002c0)="96d43e7b3506ff025032c93c8781b9f3c7c1f0f0bc566c59025d8e5453adf3445fd2596fb4a356457789e622c67ee8e5a5a97f2c9940f0e4d173311e11712bcc0c3e170253de3c28609b7372fca41f0e847df70e86c2d2a3e1216d104607cb2c8d57c9574d376445a4850ec663eefd8d98cd4ce1988eb6dae53d59", 0x7b, 0x80000001}, {&(0x7f0000000340)="1151cf013edac0fc473c042c59c0b4cdf3cf6c6aed8f9ad60356323d85f50f40c77e50f17c27b000e130911821106bf43d6b745afd1ea2fecd227ccc955f5ccd593784aefbb22ed29904193393be43d6978a1f749387bc4ccf67057390e2b6484c9cef8d9c138779b3a156e5d0f6e347c89b948056e242ab473bb4f108b37cf7740aba10", 0x84, 0xbf3}, {&(0x7f0000000440)="dce73bd19a06e152b0e333c157890745f03617289f6f4fd8a3dfe8781ee8d46f190249551e71887a5b2730860581d30b1aca32ff4c6d553da5d215c47ea6c95c6fcbfac9df6dbb775c04b817a91851cfdcb886484881097a33a798dff7100e0b6b4a64158e17a40f240e2bd3fa9623beafc89a5f5554e27d13cd379767fb53a2660d469abd4ca4d900", 0x89, 0x5}, {&(0x7f00000005c0)="40b2e8197daf86f46bdae7ab2d03080f946a85dbcb8474c56e3d6af502b37adbf1bb750af9798f9dd5330ff0fd2c4d34878b4d593d0ad754d1cafd5c76f0c52e5f674e98f266be9a10698bc217e399b5481dbd83afbcb3f9aab805b7ed1d2d673a4fb667b50117ee9cb95e5995d35806225bca6888372d31218f8b61ee6f38858a987fe0b8dc2ff68f4447e3d925c7ef2f7ca2bef3ecf0f5798af1fcdf7b7aaf69ed0790ab3112b559295453130da763843f73763c5725a37d9e4f8c3f157a08d7a5d1facc2fa085b4e386720a70da42c0990ef3a24bde97cf87558b2357e2677a1fedba5a05a18a31eb8c13b99f40a3eb48098b4427c813", 0xf8, 0x7}, {&(0x7f0000000080)="6ba5baec82c21de7184bfdf31a0319f22507c775bbbd5fd1f405b1e1b2d8bb5ad267e1a2e920700a838bd12b68839a81c6bd894a2ce5dfb7e941", 0x3a, 0x10001}], 0x108000, &(0x7f0000000780)=ANY=[@ANYBLOB='mgde=00000000000000000000011,uid=', @ANYRESHEX=0xee01, @ANYBLOB=',dont_hash,permit_directio,\x00']) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r2 = fcntl$dupfd(r1, 0x406, r1) sendmsg$inet6(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) open_tree(r2, &(0x7f0000000800)='./file0\x00', 0x800) openat(r0, &(0x7f0000000500)='./file1\x00', 0x10800, 0x2) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r3, 0x1277, &(0x7f0000000540)={'\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) [ 1673.400434] sysfs: cannot create duplicate filename '/class/ieee80211/€§°ÇÛ ”uòQÇC !' [ 1673.402432] CPU: 0 PID: 14874 Comm: syz-executor.4 Not tainted 5.10.239 #1 [ 1673.404046] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1673.405960] Call Trace: [ 1673.406570] dump_stack+0x107/0x167 [ 1673.407412] sysfs_warn_dup.cold+0x1c/0x29 [ 1673.408402] sysfs_do_create_link_sd+0x122/0x140 [ 1673.409496] sysfs_create_link+0x5f/0xc0 [ 1673.410437] device_add+0x703/0x1c50 [ 1673.411305] ? devlink_add_symlinks+0x970/0x970 [ 1673.412388] ? ieee80211_set_bitrate_flags+0x202/0x620 [ 1673.413603] wiphy_register+0x1da6/0x2850 [ 1673.414572] ? wiphy_unregister+0xb90/0xb90 [ 1673.415581] ? ieee80211_init_rate_ctrl_alg+0x121/0x500 [ 1673.416833] ieee80211_register_hw+0x23c5/0x38b0 [ 1673.417947] ? ieee80211_ifa6_changed+0x4d0/0x4d0 [ 1673.419049] ? net_generic+0xdb/0x2b0 [ 1673.419929] ? lockdep_init_map_type+0x2c7/0x780 [ 1673.421023] ? memset+0x20/0x50 [ 1673.421779] ? __hrtimer_init+0x12c/0x270 [ 1673.422737] mac80211_hwsim_new_radio+0x1d04/0x4290 [ 1673.423901] ? hwsim_send_nullfunc_ps+0x80/0x80 [ 1673.424973] ? hwsim_new_radio_nl+0x967/0x1080 [ 1673.426017] ? memcpy+0x39/0x60 [ 1673.426778] hwsim_new_radio_nl+0x991/0x1080 [ 1673.427794] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 1673.429006] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1bb/0x280 [ 1673.430518] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xaf/0x280 [ 1673.432025] genl_family_rcv_msg_doit+0x22d/0x330 [ 1673.433139] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x280/0x280 [ 1673.434646] ? cap_capable+0x1cd/0x230 [ 1673.435551] ? ns_capable+0xe2/0x110 [ 1673.436418] genl_rcv_msg+0x36a/0x5a0 [ 1673.437295] ? genl_get_cmd+0x480/0x480 [ 1673.438205] ? mac80211_hwsim_new_radio+0x4290/0x4290 [ 1673.439390] ? lock_release+0x680/0x680 [ 1673.440306] ? __lockdep_reset_lock+0x180/0x180 [ 1673.441374] netlink_rcv_skb+0x14b/0x430 [ 1673.442304] ? genl_get_cmd+0x480/0x480 [ 1673.443216] ? netlink_ack+0xab0/0xab0 [ 1673.444124] ? netlink_deliver_tap+0x1c4/0xcc0 [ 1673.445168] ? is_vmalloc_addr+0x7b/0xb0 [ 1673.446104] genl_rcv+0x24/0x40 [ 1673.446856] netlink_unicast+0x54e/0x800 [ 1673.447790] ? netlink_attachskb+0x870/0x870 [ 1673.448817] netlink_sendmsg+0x90f/0xe00 [ 1673.449758] ? netlink_unicast+0x800/0x800 [ 1673.450740] ? netlink_unicast+0x800/0x800 [ 1673.451708] __sock_sendmsg+0x154/0x190 [ 1673.452613] ____sys_sendmsg+0x70d/0x870 [ 1673.453532] ? sock_write_iter+0x3d0/0x3d0 [ 1673.454471] ? do_recvmmsg+0x6d0/0x6d0 [ 1673.455354] ? __lockdep_reset_lock+0x180/0x180 [ 1673.456415] ___sys_sendmsg+0xf3/0x170 [ 1673.457289] ? sendmsg_copy_msghdr+0x160/0x160 [ 1673.458322] ? __fget_files+0x2cf/0x520 [ 1673.459207] ? lock_downgrade+0x6d0/0x6d0 [ 1673.460137] ? __lockdep_reset_lock+0x180/0x180 [ 1673.461173] ? futex_exit_release+0x220/0x220 [ 1673.462184] ? __fget_files+0x2f8/0x520 [ 1673.463086] ? __fget_light+0xea/0x290 [ 1673.463966] __sys_sendmsg+0xe5/0x1b0 [ 1673.464824] ? __sys_sendmsg_sock+0x40/0x40 [ 1673.465785] ? __do_sys_futex+0x2bb/0x480 [ 1673.466728] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1673.467901] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1673.469061] ? trace_hardirqs_on+0x5b/0x180 [ 1673.470022] do_syscall_64+0x33/0x40 [ 1673.470852] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1673.471992] RIP: 0033:0x7f4e3f5dbb19 [ 1673.472835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1673.476951] RSP: 002b:00007f4e3cb30188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1673.478651] RAX: ffffffffffffffda RBX: 00007f4e3f6ef020 RCX: 00007f4e3f5dbb19 [ 1673.480253] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000005 [ 1673.481840] RBP: 00007f4e3f635f6d R08: 0000000000000000 R09: 0000000000000000 [ 1673.483421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1673.485019] R13: 00007ffece0122ef R14: 00007f4e3cb30300 R15: 0000000000022000 12:13:55 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fork() tkill(r0, 0x26) waitid(0x0, 0x0, 0x0, 0x5, 0x0) [ 1673.635169] audit: type=1326 audit(1751717635.522:1516): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14916 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1673.639890] audit: type=1326 audit(1751717635.522:1517): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=14916 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1675.181903] Bluetooth: hci3: command 0x0405 tx timeout [ 1687.557973] audit: type=1326 audit(1751717649.443:1518): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15034 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 12:14:09 executing program 6: perf_event_open(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/sockstat\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000004c0)=0xfffffffffffffffe) 12:14:09 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)=0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001700)=ANY=[@ANYBLOB="010000009bd77e7d3db3c295", @ANYRES32, @ANYRES32=r2, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c652fe1451d4e7b754bc7f05f0ff404807bf64d176a29993195992c14f39ee8328796f81d1886f6cb48f1ed71a941835b5840190114208ef9dda4756eab00fcd38d0a302906ffc3e8f25260ef7b4e28db855ed9e895bd4b0fbdedef955a9ddf4161dc9347ef97623a3ebf9ca8933a81653dd955d769a92740fbed0519a0fe8fb2bb1420fa5a24997c0cf4682cd464c3bcd44c267b10cfd7565652376257be8c2ef9d94e9ad1d44011543b4d0e2c77577a1157a58a7edab4a0981d3549776f00"/210]) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x4827d9d3570e76e1}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb62) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400ffbd0000"], 0x14}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup(r4) r5 = dup2(r1, r3) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x8010, r5, 0x10000000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@private, @in=@initdev}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000280)=0xe8) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 12:14:09 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fork() tkill(r0, 0x26) waitid(0x0, 0x0, 0x0, 0x6, 0x0) 12:14:09 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0x0, 0x0, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xffffffff004) 12:14:09 executing program 7: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$FIOCLEX(r0, 0x5451) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000018c0)=ANY=[@ANYBLOB="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"/370], 0x24}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, 0x0, &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) ioctl$CDROMREADALL(0xffffffffffffffff, 0x5318, &(0x7f0000001a80)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000dc0)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000008c0)={r2, 0x5, 0x80000001}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="080500988400014637b5e6a174b7b2b317b4044a94da343dd489e684a04f4ca90665864272f2fedc47a9342fef8ad1fc88337e6391545bf80b8ea61a907e1120dcdd2930f3eace765860d93659a6dc77d049d1d90bf956808d12c853d595ab7ea7e76402b517c198dc7ffbdbb38ab65f84f5242824efb291f523ece2d8e79434f9fe77da5ead57c5f16fed9a43b14e466358a6b4c3a1a8361e8199db7e4116e6031e72ada1c25a85ea221f56", @ANYRES16, @ANYBLOB="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"], 0x508}, 0x1, 0x0, 0x0, 0x40000}, 0x48804) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) r5 = openat$full(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) shutdown(r3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0x50, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x2e}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x674}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xd69}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xfffd}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x3}]}, 0x50}}, 0x40) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 12:14:09 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) prlimit64(0x0, 0xc, &(0x7f0000000100)={0x5, 0xfffffffffffffffd}, &(0x7f0000000200)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000440)=0x7, 0x6ee7) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000000c0)="04", 0x1, 0x3ff03) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x1000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r0, 0x0, 0xffffffff000) (fail_nth: 9) 12:14:09 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xee00}}, './file0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001000010000000000000000960000090005000000000000000500008048000000"], 0x24}}, 0x4c010) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="200100001a0009000000860000000000ac14d7bd873ff6deff2d748714bb0000100000b62e8c84000000fe8000000000000000000000000000aa00"/74, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000003c000000fc010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e00000000000000000000000000000000001c0017004f00"/216], 0x120}}, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000400), &(0x7f0000000440)=0x10) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x216841, 0x0) accept4$bt_l2cap(r6, &(0x7f0000000300)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x80202, 0x100) openat(r4, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x1) openat(r7, &(0x7f0000000380)='./file0\x00', 0x424081, 0x20) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ap_ssid, 0x6, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(0xffffffffffffffff, 0x5396, &(0x7f0000000200)={0x4}) 12:14:09 executing program 2: r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x100010, 0xffffffffffffffff, 0x8000000) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_WRITE_FIXED={0x5, 0x4, 0x2000, @fd_index=0x9, 0x117c, 0x1, 0x4, 0xc, 0x0, {0x0, r1}}, 0xfffffffe) syz_io_uring_submit(r0, 0x0, &(0x7f00000003c0)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x2, 0x6, 0x0, 0x3, 0x0, 0x0, {0x0, r1}}, 0x2) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x404c008) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r4 = fcntl$dupfd(r3, 0x406, r3) sendmsg$inet6(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) execveat(r4, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)=[&(0x7f0000000040)='\x00', &(0x7f0000000080)='\x00', &(0x7f0000000100)='\x00', &(0x7f0000000140)='%.#!\x00', &(0x7f0000000180)='\x00'], &(0x7f0000000380)=[&(0x7f0000000200)='\x00', &(0x7f0000000240)='\x00', &(0x7f0000000280)='\x00', &(0x7f00000002c0)='-\'\x00', &(0x7f0000000300)='\x00', &(0x7f0000000340)='.^/:\x00'], 0x1000) ioctl$BLKTRACESETUP(r2, 0x1277, &(0x7f0000000540)={'\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) [ 1687.567946] audit: type=1326 audit(1751717649.444:1519): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15034 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=57 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1687.576406] FAULT_INJECTION: forcing a failure. [ 1687.576406] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1687.577390] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1687.578575] CPU: 0 PID: 15038 Comm: syz-executor.3 Not tainted 5.10.239 #1 [ 1687.578583] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1687.578588] Call Trace: [ 1687.578609] dump_stack+0x107/0x167 [ 1687.578627] should_fail.cold+0x5/0xa [ 1687.578656] __alloc_pages_nodemask+0x182/0x600 [ 1687.585592] ? __alloc_pages_slowpath.constprop.0+0x2200/0x2200 [ 1687.586608] ? lock_acquire+0x197/0x470 [ 1687.587280] ? find_held_lock+0x2c/0x110 [ 1687.587976] ? jbd2_transaction_committed+0x111/0x150 [ 1687.588863] ? lock_downgrade+0x6d0/0x6d0 [ 1687.589566] ? ext4_map_blocks+0x87c/0x1910 [ 1687.590305] alloc_pages_current+0x187/0x280 [ 1687.591046] push_pipe+0x2b5/0x6d0 [ 1687.591652] iov_iter_zero+0x418/0xef0 [ 1687.592323] ? ext4_iomap_begin+0x1a0/0x700 [ 1687.593053] ? iov_iter_copy_from_user_atomic+0xdb0/0xdb0 [ 1687.593984] ? ext4_iomap_begin_report+0x5a0/0x5a0 [ 1687.594816] iomap_dio_actor+0x40f/0x560 [ 1687.595514] iomap_apply+0x289/0x810 [ 1687.596157] ? iomap_dio_rw+0x90/0x90 [ 1687.596808] ? trace_event_raw_event_iomap_apply+0x430/0x430 [ 1687.597801] ? delete_from_page_cache_batch+0xa30/0xa30 [ 1687.598687] ? mark_held_locks+0x9e/0xe0 [ 1687.599386] ? filemap_check_errors+0xa5/0x150 [ 1687.600167] __iomap_dio_rw+0x6cd/0x1110 [ 1687.600847] ? iomap_dio_rw+0x90/0x90 [ 1687.601500] ? iomap_dio_bio_actor+0xef0/0xef0 [ 1687.602279] ? down_read+0x10f/0x430 [ 1687.602902] ? lock_chain_count+0x20/0x20 [ 1687.603604] ? down_write+0x160/0x160 [ 1687.604261] iomap_dio_rw+0x31/0x90 [ 1687.604874] ext4_file_read_iter+0x2c7/0x4c0 [ 1687.605622] generic_file_splice_read+0x455/0x6d0 [ 1687.606440] ? pipe_to_user+0x170/0x170 [ 1687.607114] ? fsnotify_perm.part.0+0x22d/0x620 [ 1687.607906] ? security_file_permission+0xb1/0xe0 [ 1687.608726] ? pipe_to_user+0x170/0x170 [ 1687.609077] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1687.609398] do_splice_to+0x10e/0x160 [ 1687.611967] splice_direct_to_actor+0x2fe/0x980 [ 1687.612761] ? pipe_to_sendpage+0x380/0x380 [ 1687.613489] ? do_splice_to+0x160/0x160 [ 1687.614153] ? security_file_permission+0xb1/0xe0 [ 1687.614972] do_splice_direct+0x1c4/0x290 [ 1687.615662] ? splice_direct_to_actor+0x980/0x980 [ 1687.616469] ? avc_policy_seqno+0x9/0x70 [ 1687.617157] ? security_file_permission+0xb1/0xe0 [ 1687.617969] do_sendfile+0x553/0x11e0 [ 1687.618618] ? do_pwritev+0x270/0x270 [ 1687.619250] ? wait_for_completion_io+0x270/0x270 [ 1687.620064] ? rcu_read_lock_any_held+0x75/0xa0 [ 1687.620839] ? vfs_write+0x354/0xb10 [ 1687.621471] __x64_sys_sendfile64+0x1d1/0x210 [ 1687.622222] ? __ia32_sys_sendfile+0x220/0x220 [ 1687.622997] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1687.623866] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1687.624731] do_syscall_64+0x33/0x40 [ 1687.625358] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1687.626218] RIP: 0033:0x7faa9a814b19 [ 1687.626844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1687.630095] RSP: 002b:00007faa97d8a188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1687.631361] RAX: ffffffffffffffda RBX: 00007faa9a927f60 RCX: 00007faa9a814b19 [ 1687.632557] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 1687.633746] RBP: 00007faa97d8a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1687.634932] R10: 00000ffffffff000 R11: 0000000000000246 R12: 0000000000000001 [ 1687.636110] R13: 00007ffe551f30cf R14: 00007faa97d8a300 R15: 0000000000022000 [ 1687.655347] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'. 12:14:09 executing program 6: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x901, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) [ 1687.694356] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1687.695601] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1687.696927] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1687.700745] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1687.701989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1687.707611] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 12:14:09 executing program 2: mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001) write$binfmt_elf64(r1, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], 0xb92) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10) kcmp(0x0, 0x0, 0x0, r2, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xa) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$BLKTRACESETUP(r0, 0x1277, &(0x7f0000000540)={'\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) [ 1687.731230] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 12:14:09 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)=0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001700)=ANY=[@ANYBLOB="010000009bd77e7d3db3c295", @ANYRES32, @ANYRES32=r2, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c652fe1451d4e7b754bc7f05f0ff404807bf64d176a29993195992c14f39ee8328796f81d1886f6cb48f1ed71a941835b5840190114208ef9dda4756eab00fcd38d0a302906ffc3e8f25260ef7b4e28db855ed9e895bd4b0fbdedef955a9ddf4161dc9347ef97623a3ebf9ca8933a81653dd955d769a92740fbed0519a0fe8fb2bb1420fa5a24997c0cf4682cd464c3bcd44c267b10cfd7565652376257be8c2ef9d94e9ad1d44011543b4d0e2c77577a1157a58a7edab4a0981d3549776f00"/210]) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x4827d9d3570e76e1}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb62) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400ffbd0000"], 0x14}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup(r4) r5 = dup2(r1, r3) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x8010, r5, 0x10000000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@private, @in=@initdev}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000280)=0xe8) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1687.750266] audit: type=1326 audit(1751717649.634:1520): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15034 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1687.755108] audit: type=1326 audit(1751717649.637:1521): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15034 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1687.782888] [ 1687.783266] ====================================================== [ 1687.784580] WARNING: possible circular locking dependency detected [ 1687.785887] 5.10.239 #1 Not tainted [ 1687.786642] ------------------------------------------------------ [ 1687.787951] syz-executor.6/15143 is trying to acquire lock: 12:14:09 executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r0 = fork() tkill(r0, 0x26) waitid(0x0, 0x0, 0x0, 0x7, 0x0) [ 1687.789142] ffff88801ada8b78 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}, at: __flush_work+0xdd/0xa90 [ 1687.791445] [ 1687.791445] but task is already holding lock: [ 1687.792678] ffffffff8561f468 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0xff/0x4b0 [ 1687.794515] [ 1687.794515] which lock already depends on the new lock. [ 1687.794515] [ 1687.796204] [ 1687.796204] the existing dependency chain (in reverse order) is: [ 1687.801300] [ 1687.801300] -> #4 (rfkill_global_mutex){+.+.}-{3:3}: [ 1687.805118] __mutex_lock+0x13d/0x10b0 [ 1687.806175] rfkill_register+0x36/0xa10 [ 1687.807254] hci_register_dev+0x42e/0xc00 [ 1687.808395] __vhci_create_device+0x2c8/0x5c0 [ 1687.809591] vhci_open_timeout+0x38/0x50 [ 1687.810695] process_one_work+0x9a9/0x14b0 [ 1687.811836] worker_thread+0x61d/0x1310 [ 1687.812941] kthread+0x38f/0x470 [ 1687.813872] ret_from_fork+0x22/0x30 [ 1687.814873] [ 1687.814873] -> #3 (&data->open_mutex){+.+.}-{3:3}: [ 1687.816425] __mutex_lock+0x13d/0x10b0 [ 1687.817465] vhci_send_frame+0x63/0xa0 [ 1687.818512] hci_send_frame+0x1b9/0x320 [ 1687.819581] hci_tx_work+0xfb4/0x15d0 [ 1687.820626] process_one_work+0x9a9/0x14b0 [ 1687.821748] worker_thread+0x61d/0x1310 [ 1687.822810] kthread+0x38f/0x470 [ 1687.823729] ret_from_fork+0x22/0x30 [ 1687.824730] [ 1687.824730] -> #2 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 1687.826590] __flush_work+0x105/0xa90 [ 1687.827627] hci_dev_do_close+0x131/0x1240 [ 1687.828769] hci_unregister_dev+0x179/0x460 [ 1687.829908] vhci_release+0x70/0xf0 [ 1687.830889] __fput+0x285/0x9f0 [ 1687.831809] task_work_run+0xe2/0x1a0 [ 1687.832840] do_exit+0xb77/0x2600 [ 1687.833787] do_group_exit+0x125/0x310 [ 1687.834814] __x64_sys_exit_group+0x3a/0x50 [ 1687.835951] do_syscall_64+0x33/0x40 [ 1687.836977] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1687.838292] [ 1687.838292] -> #1 (&hdev->req_lock){+.+.}-{3:3}: [ 1687.839776] __mutex_lock+0x13d/0x10b0 [ 1687.840820] bg_scan_update+0x82/0x500 [ 1687.841848] process_one_work+0x9a9/0x14b0 [ 1687.842966] worker_thread+0x61d/0x1310 [ 1687.844026] kthread+0x38f/0x470 [ 1687.844961] ret_from_fork+0x22/0x30 [ 1687.845942] [ 1687.845942] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0}: [ 1687.847928] __lock_acquire+0x29e7/0x5b00 [ 1687.849024] lock_acquire+0x197/0x470 [ 1687.850037] __flush_work+0x105/0xa90 [ 1687.851043] __cancel_work_timer+0x368/0x4c0 [ 1687.852213] hci_request_cancel_all+0x73/0x230 [ 1687.853404] hci_dev_do_close+0xd9/0x1240 [ 1687.854497] hci_rfkill_set_block+0x166/0x1a0 [ 1687.855668] rfkill_set_block+0x1fd/0x540 [ 1687.856766] rfkill_fop_write+0x253/0x4b0 [ 1687.857850] vfs_write+0x29a/0xb10 [ 1687.858796] ksys_write+0x1f6/0x260 [ 1687.859760] do_syscall_64+0x33/0x40 [ 1687.860751] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1687.862065] [ 1687.862065] other info that might help us debug this: [ 1687.862065] [ 1687.863941] Chain exists of: [ 1687.863941] (work_completion)(&hdev->bg_scan_update) --> &data->open_mutex --> rfkill_global_mutex [ 1687.863941] [ 1687.867079] Possible unsafe locking scenario: [ 1687.867079] [ 1687.868465] CPU0 CPU1 [ 1687.869535] ---- ---- [ 1687.870625] lock(rfkill_global_mutex); [ 1687.871574] lock(&data->open_mutex); [ 1687.873050] lock(rfkill_global_mutex); [ 1687.874573] lock((work_completion)(&hdev->bg_scan_update)); [ 1687.875947] [ 1687.875947] *** DEADLOCK *** [ 1687.875947] [ 1687.877351] 1 lock held by syz-executor.6/15143: [ 1687.878439] #0: ffffffff8561f468 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0xff/0x4b0 [ 1687.880622] [ 1687.880622] stack backtrace: [ 1687.881659] CPU: 1 PID: 15143 Comm: syz-executor.6 Not tainted 5.10.239 #1 [ 1687.883261] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1687.885189] Call Trace: [ 1687.885796] dump_stack+0x107/0x167 [ 1687.886637] check_noncircular+0x263/0x2e0 [ 1687.887620] ? register_lock_class+0xbb/0x17b0 [ 1687.888696] ? print_circular_bug+0x470/0x470 [ 1687.889744] ? find_first_zero_bit+0x94/0xb0 [ 1687.890780] ? alloc_chain_hlocks+0x342/0x5a0 [ 1687.891825] __lock_acquire+0x29e7/0x5b00 [ 1687.892811] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1687.894025] ? lock_acquire+0x197/0x470 [ 1687.894948] ? __lockdep_reset_lock+0x180/0x180 [ 1687.896007] ? mark_lock+0xf5/0x2df0 [ 1687.896862] lock_acquire+0x197/0x470 [ 1687.897731] ? __flush_work+0xdd/0xa90 [ 1687.898629] ? lock_release+0x680/0x680 [ 1687.899553] ? __flush_work+0x78c/0xa90 [ 1687.900466] ? lock_downgrade+0x6d0/0x6d0 [ 1687.901415] __flush_work+0x105/0xa90 [ 1687.902306] ? __flush_work+0xdd/0xa90 [ 1687.903198] ? lock_chain_count+0x20/0x20 [ 1687.904155] ? queue_delayed_work_on+0xe0/0xe0 [ 1687.905193] ? mark_lock+0xf5/0x2df0 [ 1687.906051] ? mark_lock+0xf5/0x2df0 [ 1687.906894] ? lock_chain_count+0x20/0x20 [ 1687.907860] ? perf_trace_lock+0xac/0x490 [ 1687.908814] ? lock_chain_count+0x20/0x20 [ 1687.909750] ? mark_held_locks+0x9e/0xe0 [ 1687.910663] __cancel_work_timer+0x368/0x4c0 [ 1687.911655] ? cancel_delayed_work+0x20/0x20 [ 1687.912658] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1687.913827] ? __cancel_work+0x250/0x2b0 [ 1687.914741] ? trace_hardirqs_on+0x5b/0x180 [ 1687.915714] ? __cancel_work+0x1bb/0x2b0 [ 1687.916640] ? try_to_grab_pending+0xe0/0xe0 [ 1687.917634] hci_request_cancel_all+0x73/0x230 [ 1687.918661] hci_dev_do_close+0xd9/0x1240 [ 1687.919592] ? rfkill_set_block+0x18f/0x540 [ 1687.920576] ? hci_dev_open+0x350/0x350 [ 1687.921464] ? mark_held_locks+0x9e/0xe0 [ 1687.922376] hci_rfkill_set_block+0x166/0x1a0 [ 1687.923379] ? hci_power_off+0x20/0x20 [ 1687.924258] rfkill_set_block+0x1fd/0x540 [ 1687.925188] rfkill_fop_write+0x253/0x4b0 [ 1687.926108] ? rfkill_sync_work+0xa0/0xa0 [ 1687.927027] ? security_file_permission+0xb1/0xe0 [ 1687.928112] ? rfkill_sync_work+0xa0/0xa0 [ 1687.929041] vfs_write+0x29a/0xb10 [ 1687.929832] ksys_write+0x1f6/0x260 [ 1687.930637] ? __ia32_sys_read+0xb0/0xb0 [ 1687.931544] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1687.932723] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1687.933879] do_syscall_64+0x33/0x40 [ 1687.934715] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1687.935863] RIP: 0033:0x7fea1e415b19 [ 1687.936712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1687.940821] RSP: 002b:00007fea1b98b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1687.942499] RAX: ffffffffffffffda RBX: 00007fea1e528f60 RCX: 00007fea1e415b19 [ 1687.944074] RDX: 0000000000000008 RSI: 0000000020000080 RDI: 0000000000000003 [ 1687.945650] RBP: 00007fea1e46ff6d R08: 0000000000000000 R09: 0000000000000000 [ 1687.947216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1687.948790] R13: 00007ffdd56b35af R14: 00007fea1b98b300 R15: 0000000000022000 12:14:09 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000300)=0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0xee00}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001700)=ANY=[@ANYBLOB="010000009bd77e7d3db3c295", @ANYRES32, @ANYRES32=r2, @ANYRES32=0xee01, @ANYBLOB="2e2f66696c652fe1451d4e7b754bc7f05f0ff404807bf64d176a29993195992c14f39ee8328796f81d1886f6cb48f1ed71a941835b5840190114208ef9dda4756eab00fcd38d0a302906ffc3e8f25260ef7b4e28db855ed9e895bd4b0fbdedef955a9ddf4161dc9347ef97623a3ebf9ca8933a81653dd955d769a92740fbed0519a0fe8fb2bb1420fa5a24997c0cf4682cd464c3bcd44c267b10cfd7565652376257be8c2ef9d94e9ad1d44011543b4d0e2c77577a1157a58a7edab4a0981d3549776f00"/210]) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x4827d9d3570e76e1}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb62) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400ffbd0000"], 0x14}}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) dup(r4) r5 = dup2(r1, r3) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x8010, r5, 0x10000000) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@private, @in=@initdev}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000280)=0xe8) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1687.974714] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1687.976683] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1687.978264] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1687.979891] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1688.044530] audit: type=1326 audit(1751717649.931:1522): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15160 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1688.049208] audit: type=1326 audit(1751717649.931:1523): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15160 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1688.091758] audit: type=1326 audit(1751717649.977:1524): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15160 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=57 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1688.124661] audit: type=1326 audit(1751717650.011:1525): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15160 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1688.132707] audit: type=1326 audit(1751717650.019:1526): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15160 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1688.141931] audit: type=1326 audit(1751717650.026:1527): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=15160 comm="syz-executor.1" exe="/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f231449eb19 code=0x7ffc0000 [ 1688.247415] rfkill: input handler enabled [ 1688.249930] rfkill: input handler disabled [ 1688.250642] rfkill: input handler enabled VM DIAGNOSIS: 12:14:09 Registers: info registers vcpu 0 RAX=ffff88803eca91a0 RBX=8000000039f2c007 RCX=ffffffff81610e71 RDX=ffff888047630000 RSI=ffffffff81610eb5 RDI=0000000000000007 RBP=ffff8880377221a0 RSP=ffff88803771f890 R8 =0000000000000000 R9 =ffffea0000e7cb07 R10=0000000000000000 R11=0000000000000001 R12=0000000000000008 R13=0000000000000028 R14=0000000000000000 R15=dffffc0000000000 RIP=ffffffff8140d0c4 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555587601400 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f23154eb3a4 CR3=0000000037714000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=00000000dddd06aa EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000036 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822e27c1 RDI=ffffffff879f5140 RBP=ffffffff879f5100 RSP=ffff8880494671e0 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000000 R11=0000000000000001 R12=0000000000000036 R13=0000000000000036 R14=ffffffff879f5100 R15=dffffc0000000000 RIP=ffffffff822e2818 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fea1b98b700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f61a4ea1018 CR3=0000000042e6c000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=652e29646e616d6d6f632a282e637069 XMM03=00000000000000000000000000000000 XMM04=3778302826202c3178307b3d29303030 XMM05=307b5b3d293063303030303030303066 XMM06=7830202c307830202c307830202c3678 XMM07=2030720a297d5d7d3030303063666637 XMM08=3178307b3d2930303030303030303030 XMM09=3030303030303030663778302826202c XMM10=202c307830202c3678307b5b3d293063 XMM11=7d30303030636666377830202c307830 XMM12=0a29286b726f66203d2030720a297d5d XMM13=0a2936327830202c3072286c6c696b74 XMM14=2c307830202c30783028646974696177 XMM15=0a29307830202c377830202c30783020