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", 0x1000}], 0x4, &(0x7f0000000500)=[@hoplimit={{0x14, 0x29, 0x34, 0xffff}}, @dontfrag={{0x14, 0x29, 0x3e, 0x1000}}, @dstopts={{0x1e8, 0x29, 0x37, {0x0, 0x39, '\x00', [@generic={0x40, 0x75, "0c4d8f3b074e23b802c24db4f60ab2858b229460f1137c6d8b9594e6dc9f7fc89dcba8e506f8f723e16ffc31f162828c870e93431e931c08587ce74f52c765c6681af1b79c8c1ea19aa2b8c8673bb6b5a75b0165b104aa7afa905b68688f5d77906dd8990609dc410da2d09e2447400819fcdbddc3"}, @generic={0x5, 0x94, "81bcc22d19ef740f82c4b40103295bb9bcb6caa7aa782e98819c2a0aa7d485967b110e33a4bb4d0e6805ff4b7896268c08a9e86954f0f00a02a585b3cf62860b7386fd001d5a011f2d18037c09347584deb015f194d029ee1adf127080174259913edf533825f305df1126e48443861e53ecaae42a9af584e1cb5897c423d73e3a4fdbcfe91dc5f5d1ff31e3eaf6a402dccc547f"}, @generic={0x63, 0xa8, "2261ef60677d8253ceacfd5a49e94ecd4acfb02a1564f1bb4d94d9f2831a4c7b040564282ca2a91a9da5663e459e4ace91615c08d143e4db3a9d08e14212ab818e03ef0b3f19e4989738f15e17dd8baefd1b6bc84e136f80ab6768fce985fbc891231101431711284979f4c832e92d09aa421b6f82b38cbe958d026ff1b636671dd60cf122decf53b842e54cac9b8f029599d5f4663c24956b6aa19cdc385bf745cae52cdc803cc5"}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x38}}]}}}], 0x218}}, {{0x0, 0x0, &(0x7f0000000740), 0x0, &(0x7f0000000780)=[@dstopts_2292={{0x28, 0x29, 0x4, {0x1, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x8000}, @jumbo={0xc2, 0x4, 0x7fffffff}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x100}}, @tclass={{0x14, 0x29, 0x43, 0x81}}, @tclass={{0x14, 0x29, 0x43, 0x8}}, @dstopts={{0xa0, 0x29, 0x37, {0x5c, 0x10, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @hao={0xc9, 0x10, @empty}, @calipso={0x7, 0x30, {0x0, 0xa, 0x3e, 0xff01, [0x1f, 0x6, 0x4, 0x7fffffff, 0xc00]}}, @pad1, @calipso={0x7, 0x28, {0x1, 0x8, 0x80, 0x6, [0xffffffff, 0x0, 0x6, 0x80000000]}}, @enc_lim={0x4, 0x1, 0xc7}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x8}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x33, 0x0, '\x00', [@pad1]}}}, @dstopts={{0x30, 0x29, 0x37, {0x32, 0x2, '\x00', [@ra={0x5, 0x2, 0xe017}, @jumbo={0xc2, 0x4, 0x1ff}, @enc_lim={0x4, 0x1, 0x5}, @ra]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffffe01}}], 0x190}}], 0x2, 0x40040) sendmsg$inet6(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) 19:23:55 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000040)='./file1\x00', 0x0) pwrite64(r0, &(0x7f00000000c0)="fe", 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r2, r1) r3 = inotify_init() ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000140)=ANY=[@ANYBLOB="5b0002004100000000f6ff", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file1\x00']) r4 = syz_open_dev$ptys(0xc, 0x3, 0x1) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4, {r5}}, './file1\x00'}) io_setup(0x0, 0x0) fadvise64(r0, 0x0, 0x0, 0x4) 19:23:55 executing program 4: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 15) [ 607.763308] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 607.776243] FAULT_INJECTION: forcing a failure. [ 607.776243] name failslab, interval 1, probability 0, space 0, times 0 [ 607.777771] CPU: 0 PID: 6111 Comm: syz-executor.4 Not tainted 5.10.245 #1 [ 607.778652] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 607.779711] Call Trace: [ 607.780064] dump_stack+0x107/0x167 [ 607.780546] should_fail.cold+0x5/0xa [ 607.781033] ? create_object.isra.0+0x3a/0xa30 [ 607.781630] should_failslab+0x5/0x20 [ 607.782116] kmem_cache_alloc+0x5b/0x310 [ 607.782648] create_object.isra.0+0x3a/0xa30 [ 607.783211] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 607.783864] kmem_cache_alloc_trace+0x151/0x320 [ 607.784465] ? alloc_pages_current+0x18f/0x280 [ 607.785062] io_uring_setup+0x17ed/0x2980 [ 607.785600] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 607.786266] ? wait_for_completion_io+0x270/0x270 [ 607.786906] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 607.787589] ? syscall_enter_from_user_mode+0x1d/0x50 [ 607.788278] do_syscall_64+0x33/0x40 [ 607.788756] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 607.789406] RIP: 0033:0x7ff9f8ea8b19 [ 607.789884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 607.792239] RSP: 002b:00007ff9f641e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 607.793222] RAX: ffffffffffffffda RBX: 00007ff9f8fbbf60 RCX: 00007ff9f8ea8b19 [ 607.794162] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 607.795093] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 607.795997] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 607.796889] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 [ 607.797966] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len 19:23:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x60000000, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:23:55 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x2056, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000000), 0x0) fcntl$getown(r0, 0x9) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r1, 0xffffffffffffffff, 0x0, 0x7ffffff9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) [ 607.881560] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 607.883781] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len 19:23:55 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x80, 0x4002) recvmmsg(r0, &(0x7f00000029c0)=[{{&(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000140)=""/109, 0x6d}, {&(0x7f00000001c0)=""/121, 0x79}], 0x2, &(0x7f0000000280)=""/37, 0x25}, 0x686}, {{&(0x7f00000002c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000400)=""/251, 0xfb}, {&(0x7f0000000500)=""/242, 0xf2}, {&(0x7f0000002d80)=""/166, 0xa6}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/241, 0xf1}, {&(0x7f0000001880)=""/200, 0xc8}, {&(0x7f0000000340)=""/74, 0x4a}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x8, &(0x7f0000002980)=""/11, 0xb}, 0x2}], 0x2, 0x10002, &(0x7f0000002a40)={0x0, 0x989680}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000002b00)={0x3, 'vxcan1\x00', {0x5}, 0x4}) r2 = fsmount(r0, 0x0, 0x80) openat$cgroup_ro(r2, &(0x7f00000019c0)='cpuacct.usage_percpu\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000002b40)=0x80, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r5 = dup2(r4, r3) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002bc0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x5, 0x0, r0, &(0x7f0000002b80)={0x80000004}, r3}, 0x4) r6 = fcntl$dupfd(r5, 0x406, r3) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf, 0x10, r6, 0x4bee7000) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r5, &(0x7f0000002d40)={&(0x7f0000002c00)={0x10, 0x0, 0x0, 0x1191121e470fd074}, 0xc, &(0x7f0000002d00)={&(0x7f0000002c40)={0x88, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xd6b7}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000080}, 0x4c090) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0xc, &(0x7f0000000000)=0x5, 0xff4d) getsockopt$netlink(r1, 0x10e, 0x6, &(0x7f0000002a80)=""/52, &(0x7f0000002ac0)=0x34) sendmsg$nl_generic(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000bb0000000000000000000000000000000008000180a99bc634"], 0x1c}}, 0x0) r7 = accept4$inet(r0, &(0x7f0000000600)={0x2, 0x0, @local}, &(0x7f0000000640)=0x10, 0x800) getsockopt$IP_VS_SO_GET_VERSION(r7, 0x0, 0x480, &(0x7f0000000680), &(0x7f0000001980)=0x40) 19:23:55 executing program 4: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 16) 19:23:55 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x68000000, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) [ 608.020576] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 608.022805] FAULT_INJECTION: forcing a failure. [ 608.022805] name failslab, interval 1, probability 0, space 0, times 0 [ 608.025511] CPU: 1 PID: 6131 Comm: syz-executor.4 Not tainted 5.10.245 #1 [ 608.026975] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 608.028686] Call Trace: [ 608.029230] dump_stack+0x107/0x167 [ 608.029990] should_fail.cold+0x5/0xa [ 608.030792] ? copy_process+0x3305/0x78b0 [ 608.031665] should_failslab+0x5/0x20 [ 608.032448] kmem_cache_alloc_node+0x55/0x330 [ 608.033393] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 608.034504] copy_process+0x3305/0x78b0 [ 608.035352] ? stack_trace_save+0x8c/0xc0 [ 608.036224] ? lock_acquire+0x197/0x470 [ 608.037053] ? io_sq_thread_park+0x79/0xd0 [ 608.037910] ? lock_release+0x680/0x680 [ 608.038738] ? __cleanup_sighand+0xb0/0xb0 [ 608.039615] ? kernel_text_address+0xf2/0x120 [ 608.040549] ? find_held_lock+0x2c/0x110 [ 608.041384] ? io_uring_setup+0x1c23/0x2980 [ 608.042297] ? lock_downgrade+0x6d0/0x6d0 [ 608.043175] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 608.044186] create_io_thread+0xb6/0xf0 [ 608.045023] ? pidfd_prepare+0x80/0x80 [ 608.045852] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 608.046916] io_uring_setup+0x1d79/0x2980 [ 608.047799] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 608.048875] ? wait_for_completion_io+0x270/0x270 [ 608.049922] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 608.051045] ? syscall_enter_from_user_mode+0x1d/0x50 [ 608.052142] do_syscall_64+0x33/0x40 [ 608.052933] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 608.054027] RIP: 0033:0x7ff9f8ea8b19 [ 608.054823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 608.058737] RSP: 002b:00007ff9f641e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 608.060350] RAX: ffffffffffffffda RBX: 00007ff9f8fbbf60 RCX: 00007ff9f8ea8b19 [ 608.061864] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 608.063386] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 608.064897] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 608.066413] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 [ 608.073568] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len 19:24:10 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x2056, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000000), 0x0) fcntl$getown(r0, 0x9) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r1, 0xffffffffffffffff, 0x0, 0x7ffffff9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:24:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x6c000000, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:24:10 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r3, 0x400, 0x1) fcntl$setown(r3, 0x8, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x0, 0x2e98, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(r4, 0x6, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x43}) recvfrom(r4, &(0x7f0000000300)=""/215, 0xd7, 0x10061, &(0x7f0000000240)=@tipc=@name={0x1e, 0x2, 0x0, {{0x6ebda5137e766835, 0x3}, 0x1}}, 0x80) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 19:24:10 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4347, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800}, 0x1c) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x19) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) openat(r2, 0x0, 0x0, 0x8) connect(0xffffffffffffffff, &(0x7f00000003c0)=@ethernet={0x6, @local}, 0x80) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xc) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ftruncate(r0, 0xfffffffffffffffb) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') syz_io_uring_setup(0x3d81, &(0x7f0000000080)={0x0, 0xc1, 0x8, 0x0, 0x2d4}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff5000/0x2000)=nil, 0x0, &(0x7f0000000040)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2b, &(0x7f00000001c0)=0x3, 0x4) syz_io_uring_setup(0x72d2, &(0x7f00000002c0)={0x0, 0x53ea, 0x0, 0x3, 0x78}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff4000/0xc000)=nil, 0x0, &(0x7f0000000480)) [ 622.558761] netlink: 'syz-executor.1': attribute type 13 has an invalid length. 19:24:10 executing program 4: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 17) 19:24:10 executing program 3: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14024bde08744830375ba861fdad6659d1"], 0x14}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x200801, 0x8d) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x20, 0x1f, 0x6, 0x4, 0x0, 0xf5, 0x80100, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000040), 0x4}, 0x2ad, 0x0, 0x200, 0x5, 0x80000000, 0x5, 0x75, 0x0, 0x16, 0x0, 0x4}, 0x0, 0xd, r1, 0x8) 19:24:10 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x2056, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000000), 0x0) fcntl$getown(r0, 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = dup2(r2, r1) lseek(r3, 0x7, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000180)=0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r4, r3, 0x0, 0x7ffffff9) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:24:10 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) pread64(r0, &(0x7f0000000040), 0x0, 0xff) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) listen(r1, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$CDROMEJECT_SW(r2, 0x530f, 0x0) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f0000000280)='./file0\x00', 0x7) shutdown(r1, 0x0) connect$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) socket$nl_xfrm(0x10, 0x3, 0x6) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000000), 0x0, 0x0, 0x1) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x40, 0x0, 0x0, 0x0, 0x1000000005e, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000, 0x0, 0x0, 0x0, 0xdf, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4303, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x7}, 0x88}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 622.586561] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len [ 622.592993] FAULT_INJECTION: forcing a failure. [ 622.592993] name failslab, interval 1, probability 0, space 0, times 0 [ 622.595593] CPU: 0 PID: 6153 Comm: syz-executor.4 Not tainted 5.10.245 #1 [ 622.597137] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 622.599029] Call Trace: [ 622.599634] dump_stack+0x107/0x167 [ 622.600456] should_fail.cold+0x5/0xa [ 622.601321] ? create_object.isra.0+0x3a/0xa30 [ 622.602364] should_failslab+0x5/0x20 [ 622.603223] kmem_cache_alloc+0x5b/0x310 [ 622.604145] create_object.isra.0+0x3a/0xa30 [ 622.605135] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 622.606285] kmem_cache_alloc_node+0x169/0x330 [ 622.607329] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 622.608522] copy_process+0x3305/0x78b0 [ 622.609417] ? SOFTIRQ_verbose+0x10/0x10 [ 622.610370] ? stack_trace_save+0x8c/0xc0 [ 622.611314] ? lock_acquire+0x197/0x470 [ 622.612208] ? io_sq_thread_park+0x79/0xd0 [ 622.613163] ? lock_release+0x680/0x680 [ 622.614064] ? __cleanup_sighand+0xb0/0xb0 [ 622.615032] ? kernel_text_address+0xf2/0x120 [ 622.616050] ? find_held_lock+0x2c/0x110 [ 622.616987] ? io_uring_setup+0x1c23/0x2980 [ 622.617956] ? lock_downgrade+0x6d0/0x6d0 [ 622.618905] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 622.620030] create_io_thread+0xb6/0xf0 [ 622.620948] ? pidfd_prepare+0x80/0x80 [ 622.621833] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 622.622998] io_uring_setup+0x1d79/0x2980 [ 622.623945] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 622.625097] ? wait_for_completion_io+0x270/0x270 [ 622.626221] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 622.627431] ? syscall_enter_from_user_mode+0x1d/0x50 [ 622.628611] do_syscall_64+0x33/0x40 [ 622.629451] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 622.630630] RIP: 0033:0x7ff9f8ea8b19 [ 622.631468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 622.635861] RSP: 002b:00007ff9f641e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 622.637674] RAX: ffffffffffffffda RBX: 00007ff9f8fbbf60 RCX: 00007ff9f8ea8b19 [ 622.639275] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 622.640958] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 622.642760] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 622.644459] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 19:24:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x74000000, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) [ 622.751555] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 622.756774] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len 19:24:10 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x2056, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000000), 0x0) fcntl$getown(r0, 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = dup2(0xffffffffffffffff, r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:24:10 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x2056, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000000), 0x0) fcntl$getown(r0, 0x9) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r1, 0xffffffffffffffff, 0x0, 0x7ffffff9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:24:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x7a000000, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:24:10 executing program 0: r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4347, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800}, 0x1c) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x19) r2 = fsmount(0xffffffffffffffff, 0x0, 0x0) openat(r2, 0x0, 0x0, 0x8) connect(0xffffffffffffffff, &(0x7f00000003c0)=@ethernet={0x6, @local}, 0x80) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xc) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ftruncate(r0, 0xfffffffffffffffb) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r3) syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') syz_io_uring_setup(0x3d81, &(0x7f0000000080)={0x0, 0xc1, 0x8, 0x0, 0x2d4}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff5000/0x2000)=nil, 0x0, &(0x7f0000000040)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2b, &(0x7f00000001c0)=0x3, 0x4) syz_io_uring_setup(0x72d2, &(0x7f00000002c0)={0x0, 0x53ea, 0x0, 0x3, 0x78}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff4000/0xc000)=nil, 0x0, &(0x7f0000000480)) [ 622.879427] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 622.895858] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len 19:24:10 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = dup(r1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f00000001c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x78, r4}) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r4}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x3, 0x2, 0x1, 0x8, 0x406, 0x7}, 0x20) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000500)=ANY=[], 0x190) r5 = dup(0xffffffffffffffff) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8936, &(0x7f0000000080)={@local, 0x78, r7}) ioctl$sock_inet6_SIOCDIFADDR(r5, 0x8916, &(0x7f0000000000)={@remote, 0x0, r7}) sendmmsg$inet(r3, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100}}}, @ip_tos_int={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @multicast2, @empty}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x81}}], 0xa0}}, {{&(0x7f0000000200)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000002c0)}}], 0x2, 0x8010) connect$inet(r0, &(0x7f0000000080)={0x2, 0xffff, @multicast1}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe00}], 0x1, 0x0) 19:24:10 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x2056, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000000), 0x0) fcntl$getown(r0, 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = dup2(0xffffffffffffffff, r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:24:10 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x81000000, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) [ 623.015936] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 623.026764] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len 19:24:10 executing program 4: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 18) 19:24:10 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x2056, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000000), 0x0) fcntl$getown(r0, 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = dup2(r2, r1) lseek(r3, 0x7, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000180)=0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r4, r3, 0x0, 0x7ffffff9) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) [ 623.107362] FAULT_INJECTION: forcing a failure. [ 623.107362] name failslab, interval 1, probability 0, space 0, times 0 [ 623.109990] CPU: 0 PID: 6186 Comm: syz-executor.4 Not tainted 5.10.245 #1 [ 623.111544] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 623.113425] Call Trace: [ 623.114023] dump_stack+0x107/0x167 [ 623.114853] should_fail.cold+0x5/0xa [ 623.115719] ? create_object.isra.0+0x3a/0xa30 [ 623.116748] should_failslab+0x5/0x20 [ 623.117614] kmem_cache_alloc+0x5b/0x310 [ 623.118545] create_object.isra.0+0x3a/0xa30 [ 623.119535] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 623.120685] kmem_cache_alloc_node+0x169/0x330 [ 623.121721] copy_process+0x3305/0x78b0 [ 623.122635] ? stack_trace_save+0x8c/0xc0 [ 623.123570] ? lock_acquire+0x197/0x470 [ 623.124466] ? io_sq_thread_park+0x79/0xd0 [ 623.125422] ? lock_release+0x680/0x680 [ 623.126322] ? __cleanup_sighand+0xb0/0xb0 [ 623.127284] ? osq_unlock+0x1a0/0x1a0 [ 623.128148] ? find_held_lock+0x2c/0x110 [ 623.129070] ? io_uring_setup+0x1c23/0x2980 [ 623.130043] ? lock_downgrade+0x6d0/0x6d0 [ 623.131003] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 623.132110] create_io_thread+0xb6/0xf0 [ 623.133006] ? pidfd_prepare+0x80/0x80 [ 623.133894] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 623.135034] io_uring_setup+0x1d79/0x2980 [ 623.135977] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 623.137124] ? wait_for_completion_io+0x270/0x270 [ 623.138234] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 623.139428] ? syscall_enter_from_user_mode+0x1d/0x50 [ 623.140601] do_syscall_64+0x33/0x40 [ 623.141444] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 623.142611] RIP: 0033:0x7ff9f8ea8b19 [ 623.143456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 623.147626] RSP: 002b:00007ff9f641e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 623.149349] RAX: ffffffffffffffda RBX: 00007ff9f8fbbf60 RCX: 00007ff9f8ea8b19 [ 623.150972] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 623.152583] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 623.154193] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 623.156020] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 19:24:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x82000000, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:24:23 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r2, r1) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="01000020000000752965e6000000000000000000e06ece66df4dbeecfc712e9d982500747ea459d181a0d69b8d98113ba8fb413e9b10ddae30073bf6de85ebbe5ebc887c199b16649506ea2a6bf7d422eb553d2d86e72d737c925741a781b61ac6fed5f66367d27d49b5bafc4212c884c635a3d6d1210320ae5a86350bb9f0504d48c4c5c6bb1600283ffb367bff98d0add06a15136da1f10d735e2a14e81f6f30df6ada9fd94d3690ad7fc2a54121"], 0x14}}, 0x0) read(r0, &(0x7f0000000080)=""/65, 0x41) 19:24:23 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f00000005c0)=@updsa={0x1bc, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@multicast1, 0x0, 0x33}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0xc4, 0x14, {{'sha256\x00'}, 0x3c0, 0x0, "5a6855fde7707c1b7cae3c147135f9c2ba7b610ac300bd06b2f009bd0537d7580c0bb8bc4a600300009ebf1fd296cb32d8347608236c9004d559f11fac88076804527b3839e6b2eb1bfbff2583102c3acdd40d498078a0e5414843d514f7feef875b4d8b47d8028280268536e3fd7a983c0ce3f890c1bb41"}}, @XFRMA_SET_MARK={0x8}]}, 0x1bc}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000100)=0xfffffffffffffc60) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x9, &(0x7f0000000300)=0xfffffffd, 0x4) io_setup(0x5, &(0x7f0000000700)) signalfd(0xffffffffffffffff, &(0x7f0000000280), 0x8) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0, 0x40) r2 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000180)='devices.allow\x00', 0x2, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r4, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xe, 0x1}, 0x8) io_cancel(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x2, r2, &(0x7f0000000340)="973718d000416d0e113ace690a98f1619484e4960056aa777fed63e5d28907e5dc658359736aa2b3be6a054ff61d0d0a1704feb3dcb95ee5a9cff583a4c2fe2b47dfbb4b82095e76228691e017e710f5527b9185295cf3d3a3e16d4d705f339c596fb9ddcd0bbc9eb440a4102813cb2df3f63c3d37f8ed50d3a4270ad215d9176a280cd1e1d5", 0x86, 0x7, 0x0, 0x0, r3}, &(0x7f0000000280)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000400)=0xc) r5 = socket$netlink(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/cpuinfo\x00', 0x0, 0x0) fchmod(r0, 0x6) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0) 19:24:23 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x2056, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000000), 0x0) fcntl$getown(r0, 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = dup2(0xffffffffffffffff, r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:24:23 executing program 4: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 19) 19:24:23 executing program 6: r0 = syz_open_procfs(0x0, 0x0) r1 = fork() ptrace(0x10, r1) r2 = syz_open_dev$vcsa(&(0x7f0000000340), 0x2b4, 0x8840) perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x8, 0x4, 0x7, 0x5, 0x0, 0x9, 0x44000, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x8001, 0x2, @perf_bp={&(0x7f00000000c0)}, 0x4400, 0xfff, 0x80000001, 0x9, 0x4, 0x6, 0x200, 0x0, 0xfffffffe, 0x0, 0x200}, r1, 0x4, r2, 0x9) copy_file_range(0xffffffffffffffff, &(0x7f0000000180)=0x4, 0xffffffffffffffff, 0x0, 0x7, 0x0) renameat(r0, 0x0, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000380)=ANY=[@ANYRES64=0xffffffffffffffff, @ANYBLOB="000000000000000098020000000000001f000000c43af92229216d4c4da8950000000000a900000000000003000000000000000100000000000000030000000400a800b60c0000040000005d0a000000000000040000000000000003000000000000004839123c000000001800000000000000000000000000000000000000561c3627aaa2d65a28a83973d6b7334e000000000000000000004e89f103cf5a"]) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000054a80)={0x100, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x0, "043ba9ba70070b"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000054f80)={0x800, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}], 0x7f, "b8dd10e8f8bd43"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000440)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000002e00)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}], 0x0, "544d056968f26f"}) r11 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r11, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) connect$inet(r11, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) readv(r0, &(0x7f0000000240)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)=""/89, 0x59}, {&(0x7f00000001c0)=""/82, 0x52}], 0x3) sendmmsg$inet(r11, &(0x7f0000000300)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe00}], 0x40001a9, 0x0) write$binfmt_elf64(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x434) ioctl$BTRFS_IOC_BALANCE_V2(r11, 0xc4009420, &(0x7f0000000640)={0x4, 0x1, {0x9, @usage=0xfff, 0x0, 0xffffffffffffffff, 0x8, 0x7, 0x80000001, 0x8001, 0xb, @usage=0xf5, 0x5a3a1bd, 0x1, [0x401, 0x8, 0xb2, 0x722, 0x6, 0x2]}, {0x5, @usage=0xfff, 0x0, 0x3, 0x4, 0xfff, 0x8, 0x6, 0x0, @usage=0x9, 0xfffff001, 0x2, [0x2, 0x8001, 0x2, 0xfff, 0x4a21, 0x7fff]}, {0x8, @struct={0x1, 0x6}, 0x0, 0x1344, 0x7ff, 0x80, 0x4, 0x0, 0x400, @struct={0xfffffffa, 0x7}, 0x3, 0x2, [0x711d75ee, 0x9, 0x5, 0x3ff, 0x400, 0x80]}, {0x3, 0x6, 0x80000000}}) 19:24:23 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r3, 0x400, 0x1) fcntl$setown(r3, 0x8, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x0, 0x2e98, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(r4, 0x6, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x43}) recvfrom(r4, &(0x7f0000000300)=""/215, 0xd7, 0x10061, &(0x7f0000000240)=@tipc=@name={0x1e, 0x2, 0x0, {{0x6ebda5137e766835, 0x3}, 0x1}}, 0x80) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 19:24:23 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x2056, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000000), 0x0) fcntl$getown(r0, 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = dup2(r2, r1) lseek(r3, 0x7, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000180)=0x2) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) [ 635.454335] FAULT_INJECTION: forcing a failure. [ 635.454335] name failslab, interval 1, probability 0, space 0, times 0 [ 635.457466] CPU: 0 PID: 6195 Comm: syz-executor.4 Not tainted 5.10.245 #1 [ 635.459029] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 635.460908] Call Trace: [ 635.461514] dump_stack+0x107/0x167 [ 635.462332] should_fail.cold+0x5/0xa [ 635.463198] ? __delayacct_tsk_init+0x1b/0x80 [ 635.464200] should_failslab+0x5/0x20 [ 635.465057] kmem_cache_alloc+0x5b/0x310 [ 635.465978] __delayacct_tsk_init+0x1b/0x80 [ 635.466955] copy_process+0x3399/0x78b0 [ 635.467852] ? stack_trace_save+0x8c/0xc0 [ 635.468790] ? lock_acquire+0x197/0x470 [ 635.469685] ? io_sq_thread_park+0x79/0xd0 [ 635.470661] ? __cleanup_sighand+0xb0/0xb0 [ 635.471614] ? kernel_text_address+0xf2/0x120 [ 635.472633] ? find_held_lock+0x2c/0x110 [ 635.473545] ? io_uring_setup+0x1c23/0x2980 [ 635.474530] ? lock_downgrade+0x6d0/0x6d0 [ 635.475459] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 635.476564] create_io_thread+0xb6/0xf0 [ 635.477452] ? pidfd_prepare+0x80/0x80 [ 635.478336] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 635.479467] io_uring_setup+0x1d79/0x2980 [ 635.480402] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 635.481538] ? wait_for_completion_io+0x270/0x270 [ 635.482656] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 635.483831] ? syscall_enter_from_user_mode+0x1d/0x50 [ 635.484992] do_syscall_64+0x33/0x40 [ 635.485842] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 635.487005] RIP: 0033:0x7ff9f8ea8b19 [ 635.487845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 635.492052] RSP: 002b:00007ff9f641e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 635.493519] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 635.493780] RAX: ffffffffffffffda RBX: 00007ff9f8fbbf60 RCX: 00007ff9f8ea8b19 [ 635.493796] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 635.498034] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 635.499648] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 635.501242] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 [ 635.501555] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 635.515475] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len 19:24:23 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f00000005c0)=@updsa={0x1bc, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@multicast1, 0x0, 0x33}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, 0x0, 0x0, 0xa}, [@algo_auth_trunc={0xc4, 0x14, {{'sha256\x00'}, 0x3c0, 0x0, "5a6855fde7707c1b7cae3c147135f9c2ba7b610ac300bd06b2f009bd0537d7580c0bb8bc4a600300009ebf1fd296cb32d8347608236c9004d559f11fac88076804527b3839e6b2eb1bfbff2583102c3acdd40d498078a0e5414843d514f7feef875b4d8b47d8028280268536e3fd7a983c0ce3f890c1bb41"}}, @XFRMA_SET_MARK={0x8}]}, 0x1bc}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000100)=0xfffffffffffffc60) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x9, &(0x7f0000000300)=0xfffffffd, 0x4) io_setup(0x5, &(0x7f0000000700)) signalfd(0xffffffffffffffff, &(0x7f0000000280), 0x8) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0, 0x40) r2 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000180)='devices.allow\x00', 0x2, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f00000001c0), 0x200000, 0x0) io_setup(0x6, &(0x7f0000000040)=0x0) io_submit(r4, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xe, 0x1}, 0x8) io_cancel(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x2, r2, &(0x7f0000000340)="973718d000416d0e113ace690a98f1619484e4960056aa777fed63e5d28907e5dc658359736aa2b3be6a054ff61d0d0a1704feb3dcb95ee5a9cff583a4c2fe2b47dfbb4b82095e76228691e017e710f5527b9185295cf3d3a3e16d4d705f339c596fb9ddcd0bbc9eb440a4102813cb2df3f63c3d37f8ed50d3a4270ad215d9176a280cd1e1d5", 0x86, 0x7, 0x0, 0x0, r3}, &(0x7f0000000280)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000400)=0xc) r5 = socket$netlink(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/cpuinfo\x00', 0x0, 0x0) fchmod(r0, 0x6) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x30, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="487fec864b245e0f3f9be149f8"]}]}, 0x30}}, 0x0) 19:24:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x9effffff, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:24:23 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x2056, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000000), 0x0) fcntl$getown(r0, 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = dup2(r2, r1) lseek(r3, 0x7, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000180)=0x2) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) [ 635.593465] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 635.612659] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len [ 635.614784] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. 19:24:23 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x2056, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000000), 0x0) fcntl$getown(r0, 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = dup2(r2, r1) lseek(r3, 0x7, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000180)=0x2) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:24:23 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x2056, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000000), 0x0) fcntl$getown(r0, 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, 0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:24:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xc3ffffff, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:24:37 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x2056, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000000), 0x0) fcntl$getown(r0, 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = dup2(r2, r1) lseek(r3, 0x7, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000180)=0x2) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:24:37 executing program 0: r0 = epoll_create1(0x0) io_setup(0x880, &(0x7f0000001440)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r3, r2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000180)={0x2}) io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0x0, r0, 0x0}]) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x119502, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r7 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f0000000180)=0x2) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r8, r7, 0x0, 0x7ffffff9) r9 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000200)={0x8}) r10 = dup2(r6, r5) fsetxattr$security_capability(r10, &(0x7f00000000c0), &(0x7f0000000280)=@v3={0x3000000, [{0x8, 0x3}, {0x4, 0x80000001}]}, 0x18, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000340)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) io_cancel(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x7, r6, &(0x7f0000000000)="099032a96c714d843098d0fe7059c2c788f0d2898ebcbda8ea49b9fe0d410e534cfb2d804e8e83462b8c015c92037417afc4e4aa5e0f14cfea2b39f392dc8f6a84e990df889950f71e0c5f28da21a75f791b9c329161e620b9bc35ff81b8b081bbfc52a091008de6369efe21b9379bb5e925562119f88268373ba7970fc775a7c3141c3c1caa75", 0x87, 0x0, 0x0, 0x1, r11}, &(0x7f0000000140)) [ 649.621881] netlink: 'syz-executor.1': attribute type 13 has an invalid length. 19:24:37 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r3, 0x400, 0x1) fcntl$setown(r3, 0x8, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x0, 0x2e98, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(r4, 0x6, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x43}) recvfrom(r4, &(0x7f0000000300)=""/215, 0xd7, 0x10061, &(0x7f0000000240)=@tipc=@name={0x1e, 0x2, 0x0, {{0x6ebda5137e766835, 0x3}, 0x1}}, 0x80) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 19:24:37 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x2056, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000000), 0x0) fcntl$getown(r0, 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, 0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:24:37 executing program 4: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 20) 19:24:37 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x2056, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000000), 0x0) fcntl$getown(r0, 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, 0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:24:37 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x2056, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000000), 0x0) fcntl$getown(r0, 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = dup2(r2, r1) lseek(r3, 0x7, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000180)=0x2) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) [ 649.658962] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len [ 649.664999] FAULT_INJECTION: forcing a failure. [ 649.664999] name failslab, interval 1, probability 0, space 0, times 0 [ 649.668107] CPU: 0 PID: 6248 Comm: syz-executor.4 Not tainted 5.10.245 #1 [ 649.669913] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 649.672123] Call Trace: [ 649.672820] dump_stack+0x107/0x167 [ 649.673788] should_fail.cold+0x5/0xa [ 649.674808] ? create_object.isra.0+0x3a/0xa30 [ 649.676025] should_failslab+0x5/0x20 [ 649.677043] kmem_cache_alloc+0x5b/0x310 [ 649.678124] create_object.isra.0+0x3a/0xa30 [ 649.679304] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 649.680658] kmem_cache_alloc+0x159/0x310 [ 649.681770] __delayacct_tsk_init+0x1b/0x80 [ 649.682927] copy_process+0x3399/0x78b0 [ 649.683846] ? stack_trace_save+0x8c/0xc0 [ 649.684954] ? lock_acquire+0x197/0x470 [ 649.686018] ? io_sq_thread_park+0x79/0xd0 [ 649.687164] ? __cleanup_sighand+0xb0/0xb0 [ 649.688278] ? kernel_text_address+0xf2/0x120 [ 649.689482] ? find_held_lock+0x2c/0x110 [ 649.690559] ? io_uring_setup+0x1c23/0x2980 [ 649.691709] ? lock_downgrade+0x6d0/0x6d0 [ 649.692813] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 649.693932] create_io_thread+0xb6/0xf0 [ 649.695003] ? pidfd_prepare+0x80/0x80 [ 649.696047] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 649.697366] io_uring_setup+0x1d79/0x2980 [ 649.698470] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 649.699830] ? wait_for_completion_io+0x270/0x270 [ 649.701138] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 649.702526] ? syscall_enter_from_user_mode+0x1d/0x50 [ 649.703911] do_syscall_64+0x33/0x40 19:24:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xf0ffffff, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) [ 649.704900] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 649.706283] RIP: 0033:0x7ff9f8ea8b19 [ 649.707282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 649.712265] RSP: 002b:00007ff9f641e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 649.714302] RAX: ffffffffffffffda RBX: 00007ff9f8fbbf60 RCX: 00007ff9f8ea8b19 [ 649.716052] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 649.717635] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 649.719234] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 649.720810] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 [ 649.777611] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 649.783225] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len 19:24:37 executing program 6: perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x56, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf33a3fcd7610b807, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x240, 0x0, 0x0, 0x0, 0x400000000000000, 0x3, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./file1\x00', 0x0, 0x2, &(0x7f00000000c0)=[{&(0x7f00000002c0)="7e1e0a2b15bf799fb2a349012b02be5b2d2f0cdceceef3c0cd9a8870d6021b820cee1704", 0x24}, {&(0x7f0000000000)="d9adb8371a8a3c5680b5c9d1d2678c3545c3645f135c3142a6dd27e0f9993f13a892e1f7f221c9a4b2b51c68e9ba9f6aecb64064d50069dd9d98acef77d7a78c", 0x40, 0x3}], 0x50, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYRESDEC, @ANYRESDEC]) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f00000001c0)=""/224) shmctl$IPC_RMID(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = shmget$private(0x0, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil) shmat(r0, &(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0xb000, 0x78000000, &(0x7f0000ff2000/0xb000)=nil) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x4000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000001300)=""/96) shmctl$SHM_LOCK(r1, 0xb) shmctl$SHM_UNLOCK(r0, 0xc) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 19:24:37 executing program 4: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 21) 19:24:37 executing program 5: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x2056, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000000), 0x0) fcntl$getown(r0, 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, 0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:24:37 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) setfsgid(0xee01) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x100) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}, 0x10000) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r4}}, 0x101) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000300)=[{{&(0x7f0000000500)=@nl=@unspec, 0x80, &(0x7f00000001c0)}, 0x800}], 0x1, 0x12000, &(0x7f0000000580)) r5 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0) mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x86) [ 649.850375] FAT-fs (loop6): Unrecognized mount option "ÿÿÿÿ1844674407370955161518446744073709551615" or missing value 19:24:37 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x2056, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000000), 0x0) fcntl$getown(r0, 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = dup2(r2, r1) lseek(r3, 0x7, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000180)=0x2) sendfile(0xffffffffffffffff, r3, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:24:37 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x2056, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000000), 0x0) fcntl$getown(r0, 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = dup2(r2, r1) lseek(r3, 0x7, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000180)=0x2) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) [ 649.868642] FAULT_INJECTION: forcing a failure. [ 649.868642] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 649.871294] CPU: 1 PID: 6265 Comm: syz-executor.4 Not tainted 5.10.245 #1 [ 649.872743] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 649.874491] Call Trace: [ 649.875067] dump_stack+0x107/0x167 [ 649.875839] should_fail.cold+0x5/0xa 19:24:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xffffe000, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) [ 649.876655] __alloc_pages_nodemask+0x182/0x600 [ 649.877742] ? lock_downgrade+0x6d0/0x6d0 [ 649.878583] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 649.879817] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 649.880881] ? kmem_cache_alloc_node+0x2bc/0x330 [ 649.881858] copy_process+0x62b/0x78b0 [ 649.882652] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 649.883725] ? _raw_spin_unlock_irq+0x1f/0x30 [ 649.884636] ? trace_hardirqs_on+0x5b/0x180 [ 649.885524] ? finish_task_switch+0x1a4/0x5d0 [ 649.886439] ? lock_acquire+0x197/0x470 [ 649.887257] ? io_sq_thread_park+0x79/0xd0 [ 649.888116] ? lock_release+0x680/0x680 [ 649.888934] ? __cleanup_sighand+0xb0/0xb0 [ 649.889787] ? kernel_text_address+0xf2/0x120 [ 649.890702] ? find_held_lock+0x2c/0x110 [ 649.891541] ? io_uring_setup+0x1c23/0x2980 [ 649.892414] ? lock_downgrade+0x6d0/0x6d0 [ 649.893259] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 649.894251] create_io_thread+0xb6/0xf0 [ 649.895069] ? pidfd_prepare+0x80/0x80 [ 649.895862] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 649.896876] io_uring_setup+0x1d79/0x2980 [ 649.897723] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 649.898747] ? wait_for_completion_io+0x270/0x270 [ 649.899744] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 649.900805] ? syscall_enter_from_user_mode+0x1d/0x50 [ 649.901844] do_syscall_64+0x33/0x40 [ 649.902606] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 649.903679] RIP: 0033:0x7ff9f8ea8b19 [ 649.904441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 649.908184] RSP: 002b:00007ff9f641e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 649.909731] RAX: ffffffffffffffda RBX: 00007ff9f8fbbf60 RCX: 00007ff9f8ea8b19 [ 649.911190] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 649.912635] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 649.914075] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 649.915535] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 [ 649.955465] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 649.965442] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len [ 649.965556] FAT-fs (loop6): Unrecognized mount option "ÿÿÿÿ1844674407370955161518446744073709551615" or missing value 19:24:37 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x2056, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000000), 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:24:37 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x2056, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000000), 0x0) fcntl$getown(r0, 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, 0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:24:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xfffff000, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) [ 650.106910] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 650.112268] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len 19:24:52 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r3, 0x400, 0x1) fcntl$setown(r3, 0x8, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x0, 0x2e98, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(r4, 0x6, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x43}) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 19:24:52 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x2056, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000000), 0x0) fcntl$getown(r0, 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = dup2(r2, r1) lseek(r3, 0x7, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000180)=0x2) sendfile(0xffffffffffffffff, r3, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:24:52 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:24:52 executing program 3: r0 = syz_mount_image$vfat(0x0, 0x0, 0x1, 0x0, 0x0, 0x3004400, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_io_uring_complete(0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x4, 0x4007, @fd_index=0x3, 0x10001, 0x0, 0x0, 0x10, 0x1, {0x3}}, 0x80) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r2, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r3, 0x0) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000280)=0x0) statx(r0, &(0x7f00000002c0)='./file1\x00', 0x3000, 0x40, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000180), 0x5726a2f554bb50fe, &(0x7f00000005c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_none}, {@aname={'aname', 0x3d, ')/D\xf4'}}, {@access_any}, {@mmap}], [{@subj_user={'subj_user', 0x3d, 'cache=mmap'}}, {@uid_lt={'uid<', r2}}, {@fsuuid={'fsuuid', 0x3d, {[0x37, 0x32, 0x35, 0x30, 0x65, 0x36, 0x33, 0x30], 0x2d, [0x38, 0x66, 0x0, 0x64], 0x2d, [0x64, 0x31, 0x64, 0x62], 0x2d, [0x62, 0x35, 0x33, 0x60], 0x2d, [0x32, 0x39, 0x55, 0x37, 0x34, 0x66, 0x63, 0x65]}}}, {@euid_lt={'euid<', r3}}, {@fowner_lt={'fowner<', r4}}, {@uid_eq={'uid', 0x3d, r5}}]}}) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4590, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r6) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[{@cache_mmap}, {@cache_fscache}, {@debug={'debug', 0x3d, 0x924}}, {@nodevmap}, {@noextend}, {@dfltgid}, {@afid={'afid', 0x3d, 0x345}}]}}) [ 665.119351] netlink: 'syz-executor.1': attribute type 13 has an invalid length. 19:24:52 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x2056, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000000), 0x0) fcntl$getown(r0, 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = dup2(r2, r1) lseek(r3, 0x7, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000180)=0x2) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:24:52 executing program 4: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 22) 19:24:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xffffff7f, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:24:52 executing program 6: perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4347, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800}, 0x1c) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) openat(r1, 0x0, 0x0, 0x8) connect(0xffffffffffffffff, &(0x7f00000003c0)=@ethernet={0x0, @local}, 0x80) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r3, r2) sendmsg$inet6(r2, &(0x7f0000000680)={&(0x7f0000000200)={0xa, 0x4e22, 0x6, @rand_addr=' \x01\x00', 0x9b}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000240)="540944b8f023eeb9f1f9cb987951f83d4d9a7c8a6477452f99ae035ab3a69e1b59e70cc763a7cef744c7ffbb7ea8aec3ebff53d87aacbc7a38ab81456d60d4d9541ead", 0x43}, {&(0x7f0000000340)="f94400e316e0d24ba9a83c81d6f9230e700ba53e213ec79ee53a87385e362aa597215268095a9985e0eeb1b3bcb120ad278b5db9d84505d3a2f5844bb26e7eed20935e47f30166e936376fde2c78758643c4c2757509670ea70c93fb860d2d35a6f62e80e5e00670c5d9c8d14eaa7b5b3cbaeae05064e1728198112d2168", 0x7e}], 0x2, &(0x7f0000000480)=[@rthdrdstopts={{0x1d8, 0x29, 0x37, {0x32, 0x37, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x7, 0xaf, "c0f778127714856fcb4c35d912a73607b6ea9cfb10950fb50dfaf76e4715942ab539ddc0d5aec974ef21fadbc359eb0d747a60e3211f62a39b6280117bfd9110b9ffe65f05cfe6e44a543c420891d3ff3c0fa7ef1114edb3bfde95a80df978f0b18db1804bd55f3c4e13ccc1933cc414665fca23e449945ab04cef65bfead459078f6cc67b0d2acfa67bf325518e489aff01fbfd6cccc630bbd6695d068c1bb2eb74700e505b862e85568cdf630770"}, @enc_lim={0x4, 0x1, 0x6}, @calipso={0x7, 0x20, {0x2, 0x6, 0x8, 0x7ff, [0x0, 0x9, 0x9]}}, @pad1, @generic={0x2, 0xd9, "9b26fc1f330086e77e38f8b115add3f0f80435b36f08ff026e1abc045c80a66743c2e4ffd8a1683d1ddf9060bd8b425f25e76b52dfd91420b1f454746a5485df913a870206a0d2b8f38b5f76963fe93c0f9dac092ffdfa2a2e70ac61d777d0ae090a8d125db871d7450802fb0e21434c529ee120c6b79d4fa9853a23e02c0f43f04d658ce62131d197fcb880bf8d46de41c65ef728658a03b64460b6b60ed700bbc9b1f941ae48f2f5e460b1d8afba91a855e3d88e4b005b0540cd06671c40f77e89c8d37733ad0456b1126ae28aa2e331c0ae5a12f6b3732b"}]}}}], 0x1d8}, 0x80) syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0xc1, 0x8, 0x0, 0x2d4}, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff5000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x72d2, &(0x7f00000002c0)={0x0, 0x53ea, 0x0, 0x3, 0x78}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff4000/0xc000)=nil, 0x0, 0x0) r4 = open$dir(&(0x7f0000000040)='./file0\x00', 0x400000, 0x195) openat(r4, &(0x7f00000001c0)='./file0\x00', 0x40000, 0x10) [ 665.159877] FAULT_INJECTION: forcing a failure. [ 665.159877] name failslab, interval 1, probability 0, space 0, times 0 [ 665.161357] CPU: 1 PID: 6310 Comm: syz-executor.4 Not tainted 5.10.245 #1 [ 665.162223] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 665.163273] Call Trace: [ 665.163611] dump_stack+0x107/0x167 [ 665.164067] should_fail.cold+0x5/0xa [ 665.164545] ? create_object.isra.0+0x3a/0xa30 [ 665.165118] should_failslab+0x5/0x20 [ 665.165599] kmem_cache_alloc+0x5b/0x310 [ 665.166124] ? find_held_lock+0x2c/0x110 [ 665.166672] create_object.isra.0+0x3a/0xa30 [ 665.167271] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 665.167923] kmem_cache_alloc+0x159/0x310 [ 665.168449] __mpol_dup+0x72/0x4d0 [ 665.168892] ? mempolicy_nodemask_intersects+0x190/0x190 [ 665.169566] ? lockdep_init_map_type+0x2c7/0x780 [ 665.170168] copy_process+0x1572/0x78b0 [ 665.170671] ? stack_trace_save+0x8c/0xc0 [ 665.171213] ? __cleanup_sighand+0xb0/0xb0 [ 665.171734] ? kernel_text_address+0xf2/0x120 [ 665.172287] ? find_held_lock+0x2c/0x110 [ 665.172796] ? io_uring_setup+0x1c23/0x2980 [ 665.173329] ? lock_downgrade+0x6d0/0x6d0 [ 665.173872] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 665.174481] create_io_thread+0xb6/0xf0 [ 665.175008] ? pidfd_prepare+0x80/0x80 [ 665.175502] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 665.176122] io_uring_setup+0x1d79/0x2980 [ 665.176641] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 665.177271] ? wait_for_completion_io+0x270/0x270 [ 665.177884] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 665.178542] ? syscall_enter_from_user_mode+0x1d/0x50 [ 665.179191] do_syscall_64+0x33/0x40 [ 665.179649] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 665.180286] RIP: 0033:0x7ff9f8ea8b19 [ 665.180747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 665.183050] RSP: 002b:00007ff9f641e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 665.183999] RAX: ffffffffffffffda RBX: 00007ff9f8fbbf60 RCX: 00007ff9f8ea8b19 [ 665.184885] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 665.185767] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 665.186651] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 665.187562] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 [ 665.195694] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len 19:24:52 executing program 3: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000180)={{{@in=@multicast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@initdev}}, &(0x7f0000000040)=0xe8) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x9, &(0x7f0000005540)=[{&(0x7f00000000c0)="7480b3f8c62dc4bd815c3196b0e2f92da4a7beca5443a525739a28d6f7630996c6c59fe947704e3d40221c323946a4d5c76541dfea", 0x35, 0x285}, {&(0x7f00000003c0)="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", 0x1000, 0xffff}, {&(0x7f0000005640)="23087a0522d4525d73973a34daaaed9c94c3ee10b88eb8ed91218b5e29b2b94f3e2b23028e7a7772052de66fe181aba1f473995c1ff2b1f4f0024b05c790518a40b9da179b15f828f281c4f39f229a56faa2532e9d137eec269bf413301a4675fb5e060c5ffc929bbb1f08762834b09201f9d50c8807055e230a3f0bfd2959a70f93a8ca04aa2bcd0553416ad5b695f0625782e18fdbb0796285b2dfc4d11614768686a3c888707c3b7b121ed54dc26b8e14b8645ebc08859e2e2acfc9fff4dfacdd628f0bfc1cf257b23aee5514c97a67b4fe84073cacea286b15ab8332e0dccfc4b08dbdf5ee160a14f14c9a910d57d359b0cb2704fc147e20a3d9ee7e75a562ff05da4ad9757922d3c183094065e0fadd8a1900403b00984f2616f9db34c464dd34e45cb4bcb6e63ae31af630b9da3b23018411bbed772cf2b64221bbb2e8fe046a61af11fe87593bfe59a2c731abb0356c43da4411c8c598f68e48aed57c01495cc50b81d37a410b9e5d815ab8ca7b57444de09770452cf011a2008f8d0962c808bafe9f9979f80c7284e81ed0ce0521e75499ba557887a66dd8bd6f279ac0b85aae2602bd02933458286d6abe292ab2ac7d3d7da0aaa0f325243678ed2d74dc365099c2a485b09a4ef42732bf866dab1828ff898cc0f43b3efde86e3bfe9e6662f1bcfc9c1d59c043deb0e252f0b229deef9ca3523c4ca209c8d2d509725556e147db255d45fbc6c28e0f20626fcc948e75064b6a3ae1b724173ff3440347c601fe89520982bb35ae75bf4326e1b3cfd9a5d92f9c56e131c8f301015f3242c9c89415710d32bab4cb5356f8bcac696ab3c1295bfe48722dd8869f698655b32a3a8f182da2845f00cdd138354b6a40f0591454c36f649bcd6ac80f3aa9f7f69e59d2c7570a7672135ff323ac30817dfc2528adb094897b44123a1439a91088e038836991e348fa4c9a0dfa58c6213c14e7f8c2a5eee39e87488842b3dfba8831bf0c7ad0195cc9a9694e58e60bee264ae9bf579f20c88fefa64c1d80d9ce1916751dd22a56921436a514b37e5e9e552148f1cd6d76fea30b9f07b0c7f6c97739cca6770d208db75ec1df15944097860dbb4004e3aafc7426958c8e04ff0f4d2e239971233ec2ed1ca6792c096eabb7464b093a353d32eed0e132a89f20f5a6645d969ac746a76bd27d62850e59338bf295ef9912868b525e8ebad1cb9d1fab6e44fe9b9ed4201c34b1e1c6054a81333e443acf532e3bd38516c6ac6dfaaf4874d4b5c91079559f7ee760f8c914e51af7236a8db5ce3768295581afd6942f86e75dd539ab37edc47a9db40146e55946f42313c77a5aa8e0f0dbe2bbd0d5c86a99d9f37a951f2fef3de4c9e2fb7e5b11cc7e9fa4eb16454ddb4c6adde5f06eb72f05e75ef01818d402748e6aed4edfef006a0ed828a3de38810e6283da181e56b0d06ef48a6f0933fb330c726ef1207c24b70a2418b7c081dd83f75802c2b573bc5d5403a8695b96c21abdbf4d8a6dba66572222fee332fd2b198ee767070c121a370705d75396f231af9214fb90d31f8453f939ed049249759a4f378e80ae8a6c3a7014f758815215ed9dda343b6ab33ae44a4a05d8b6d8404cf0d50a089247343ccd8dd8d6e97082fad50ad34ead7e2119aee465675b866772e86258fb57aee38c39db9be789eb347cab796c82fe993aa9863038f4aa1a9d003c1e889b988480833b406affb9a8adc11318063a15b8c4ad2db6e9fabbfd5906f4048cf275fa6a9f45f7ae618858adce6f160e676d6adc57b297f27a945ce73d88c813fed7bf2883d4a0bb709d2ad28f09bb4afc55323ea99213e26d0e917b8375c0512879513c3031da3d75806aeb2bdbde64f1e8ff5d7bb5f42370f94b3c0e383d991ca3842f832a4d7990f769a23fcd0d45055d2e5a0c04747cd5f6a1913960590bc4070ceb2bcb07597bbcf10b54b0e4782606bb45ad3e54bff3cca7e8a27ba2da438999d6d4566d88c7c6d27eb978f943b6c0d8933e7703cb0ac5ba52b5a2752bc9f411dcb7b4762b0cd22e04caf7f7bb8b864a44d2264b61263ae87aee4e77178b2e6cdd384424055910dfcb7ec6416809ced7c8bb538f6ea5d33fbf746e8012b582898d79773e303e9939e4baffbe18710d6d1dd42cfbc6e6cab2ae2e7e46ab3ded55c8b2915ecfe03f0efa9c3fcead6d44cce33c4b4ffa64508d05b54ada901367ee0c31232733125d4c764466713fac3a46d0dbd51cf083c25bb65608c1ced2a9170545daa60c3c45fcbfcb79258c780ca3ee3d5c52f157c9797705c3a825645c0efec9008ee48609f1d59eabcf4a2c412bc3f650e4be1afd997402acb3a62d9ac3189ab0e6bd1a8a8fc2a561c92c48fdeff0f9f75551bbc4f1ec0da1df014fc8da0f9a444e5661fcf769e4c99d05fee87965d5f1a27abd5647c9540186776915f384b5e71da3e2794fd518c883b2823e685127834afdbb32512bbc53d04afb51031396492c665816563a957e41cfc034a4a33b5edda68bc500accd1c58b97020f0f957b0c7e24fd1fe2e5aa8eac8a9d628fe4ee2ca5279fbdc0e37bac76a45f1c54f1e7cb54eb40cfe4f19ce5014a5cc2b9c39e70d21ee0fb7526a48f263b5a7a4e516d3847e79dc6f2a266c16283b3d866eb8ddcd20a1992d3948938d2363383527c3de17c38e829c0881c00ea47b969ab790dce2fcf31784754a5efdf8c47e7d5cf5d18d593e84e8c450e011a48f2df73fce8ed456b665c79dfae3fae6cfcc2c731b4770e548246631b91ae6e55f7d23e6140fc0244c038e30ca3dd4620d0bd4a531dc4b1d36af619c793879ac7e245ba0c209a711708a61f151baa2c63b1b143ca7950c11c38db10aa3b597860ad3e4418b9a14362b12680bdc0ba90ac4d2105b58b189e979b9c9caa3c4d7e340ba64c31fa311ee1c384cec7cd2bf75f715b3614373e7236259c75bd47923d1381dba81a3aeeb5b22f3cc72bd9ae006972f59a51378184cba28f471522861647022c5791211996a482b8a9ea86c1853169005380016acae5faf93c9781740fa682f1b717312d87b131b8751535b50210c6aa3ccdbb80ff5593f8dc9dcbc9eaa320a4e593211c2101c9a3b3ecc11afe44ea6323c1a749b109cb22493171f6f72f373ba6acf6d38c8afc29c6bf561404a416d7cede6a3f4462e3ed82cdb998800a439cfcaf6169b651acf2464492cdfa646423df551a8c7c19bff4c07521ae6eac42b0c0d33fce6c8d5b57abeac83b7e74fe5e37f85daf07633227c4cd47a11a8f23e38e64dfa2c4740c1821dcc2a3b41f9333f19aa3d46f4676c0d64b5008442b45f67dbe48d70a355b38483aea5c31e223b3051cacf144371782d62f0ff6aa13b3bd39504f01ea311bbd4c18eaae2d284611b1c29d9f3e93c465ae5469335c12a3e8f541bca6826a93bbeca83408186ec2d7f3aee29608c88126ba11fa470f6ed3806dcb4e8d9fe041091f812cf205351d6f0642cb6903bed8bc461abe33aea21d415eb19e7943caac9ec6d26a443d3ab289b7d49e730c64a4bcb1e2c0406bce1dc250cc9c99fe75eb2b3238bd9914c7e2296c49b836fdaea039475455ad16fd43e810b8425ff7e27639d46ea4d01b5b6f19e2755a4e22fec3ce733d99268166473cbf78f46ff3c79c1534689a9dd1eb3c7e469c3981863f7a25dfc5646d7ba6555d40123514eb67fc95d5e1e57c7c05dc89c0e71f09f343006be2839462bcef2077cbcebdf064056d9830a6d9a092e744c972b478eda975ddb867885658e228ce8243bbf3bc810218833d7b706092cd7de9fd3c702edcb7f71969343a711b9a3a7ae22e9da8482805584283b00ab082647de1a55cc349426f882e42173339175164f0275c621d86777296dcec337517b270c1501c695f3ec3d926584679fab02c69a0f90216344e2d29c1f797d26132684a800c5d9bef926eb7c8fdf2983c357cd7cc8d65d948c7425426186f43e2016077a9b7f1f369c314cf6b4665ac0f429715c6e958d6c91f189a8dd951addaa84e160b29b838d2d7a51ed2fdf12aa82588391da7f5efe32331b07a62936ed1efca34a26aaea13eab6cbd1b07904428bec6ad6cf0b57b974eaabc56aacf02d7ab3d5860296dc553962d22558857e42fc6dac32e42573d51b58e0f952a2c0a78756cb01cf79062f307c2eece8d73c48bd8c3eb9846138a6437f04f5453807c633f5d4f879f2fd1df6fbadb77528a6a2e644f9dce20b73704650fbb9108e0345b7f2913279dc69af5e1ec25d70000385618f0a7c27e06aec3f2faa0816a505ee8bd982018838f0aeec564d73bcc3ea74144b2d615de99fd8c30ab8e38e5eff7dd49a4831a87f669981183886ee44c1df60f42bf29483145be0651db91d58aa2d6b1dc4efa556c654b7ddbda7d4e19cd6bf87a9ee2a7c3a6bebdf2e747908715f28a4ef472d5eef38e836c7904c01fba5c15c7eafcf4baa683a4d5312bcfd7abaf97d8a922c73ee87a5b1d2df9ffd150792ee7ecd15489519cffbb619af01639df6c35116f67d3ed6cdbdb6dd4f98797b0ddd2acd2421c7bdaffada8d0b409efca686284d2b75006dd74a3e2c2e8b64d6b83a7291e459f83d74cf7eb7240f31d51632db252370e60bcd21d6733f761c26d29f16cdf2b4a47ad0e6529a14760a305c3f2fde442acd366cb0c63e4cbdb6bf923287a5ea62bd732e41db76afbc6ef29a5b2947b7291e34febc8c9d04029190f3ebea4aa76fa13e01f942a654b27b125a880041f45a1907481ef7823d84f7553032b7d37fc7b90b36897adc215208affd4430aab3043b3492d65bbe53a28b34b6f620b81d8bf27cad0d78281741401bbbc8d71a2eee82469a8744077917be6fe46adaf927b9e080792f59af75b9dabf8b734e316899d6c29420e9e5f9c1abe5f579552c96547b7109e8c45d0686859877b02850770f34b2737bcb8b0610822ae9105df858822e7557820fa8d91fb8de898dc17427c0af32a046f4d63da2522e42c265c04b97460164ae1a2916001da47c9ea1e646f8e4d4f6ffd33a7150bec7bd9af9b43f7cd011b670a60b765484eab4662b0197e880b36fdcf8509e555e553694370c532b996484f9769d2b08474983841e6326111eff5dc456b2a65837dda2650428215f465837f3270e284372832fb3333f0c7076a66284fd36a00cc61cfb2aa68d9452dcfe3e4bbaea1c532060cffe27c93884247494e694676cd920a00fe7ba6b9d424a63abb84061602344298ca85a7f4fee0d975d36d62e9111909a47346178ada304c1a2c29562ed6a20d489e4c1828a868d63a7d179115e022b46f4f65ff79c21786f00c68e888881cb7ba874a2896c470ad4262961afa6ee264acd085bd7bdbdd97e2d5760a4d8a03f49f294d95b3d896d13bf1a8b6ac1907b2a81a66bc6070eb593ced18cde7a104d654de5e724293feaa75bf49dd497da2a3c2526f7105a9025f483ed941d60d02a758712b95b7c393667865b6db513482e1ae899521017cb8befe6af5e6b28b089931dd2444852ef96b309fd3173ccdf0204b6b6581da2c9e4a5e73dfbadf30eff617725725db6b286dbbacbe8bfecaee4134bb949cf38d9c3266ed68ce919e8eb7b291029afc5b64a9281a33a7ee55779755b437cd94709f94420d713f88099c08dde77df147ce9d79798fe80e905799fd7caaa9cdf0e7d023b7120f991529e1de70fcb108ee51f6812f644cd079f47f0afe6826dca434cc7830380d9d66981aeb2be1b39c37093806e9f173c5966838535c348c06fb0b8fa77fc847791f04728f3dba9f7", 0x1000, 0x4000}, {&(0x7f0000000280)="effd3a3675abde40a757b442296b9d76f450b9b3cae79a1fd109c2c63b77c4d1c0b2ff6d37ecd204f2c33b9a15a18483b531edaab88a7f9809fca082efb9e9d0bbe778462d168683c523014c23af09a7c750cab66be1b8f005237d5381e08e9903516335f5af31c58850170ad5316914c734f76798691d70e057d920ebc588334250c58ee12d384b0e0c0e8285a8b263c158da", 0x93, 0x9}, {&(0x7f00000023c0)="af5cc91e0db30447b5bcb88404736759e716e252e89d3c25da6ed6f274d46333f296210687666a733f2dcfca37add12f8214ca37a52d2be4707c574002bdb850e325badaae6ae7f91bf5e71f94e76775552330347a2ac387570f1a84cb4af53e1ca1487695d6931c8e1ce93aa093044eabc0ef9d22e514ba78e2aa18344a87b12bdb6c8b1b43641b9a86bb25be58dcab88f01e9b1c9c7100fcf10111470f8e60d6fab4a00b4613305c6f51235187a6bf906f537b9864e0094cc62b153baf", 0xbe, 0x400}, {&(0x7f0000002480)="f18cefdd63f212802b18004116feee6a2ec6eb48af0aadffbeb79e6642e67d5df54ee001ea7a353b6b47bfd04930b1e4cbe4e36025768b3aa4bf187fb61c7e42c45d915f81ac25522e639799c4cb01c203a82de12ae1bb26ed34a2e2cb12d44b2139262820c1adae2659606dadf0a04e56ef683df879fc631cc203b805b68b85a55a", 0x82, 0x4}, {&(0x7f0000002540)="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", 0x1000, 0x3}, {&(0x7f0000003540)="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", 0x1000, 0x1}, {&(0x7f0000004540)="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", 0x1000, 0x7f}], 0x290000, &(0x7f0000000080)={[], [{@uid_lt={'uid<', r0}}, {@audit}, {@fscontext={'fscontext', 0x3d, 'root'}}]}) 19:24:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xffffff9e, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:24:52 executing program 4: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 23) [ 665.270889] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 665.272204] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len 19:24:52 executing program 0: ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x161000, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, @perf_bp={&(0x7f0000000180), 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r3, 0x5000940f, &(0x7f0000000640)={{r1}, "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"}) r4 = syz_mount_image$nfs(&(0x7f0000000140), &(0x7f00000001c0)='./file1\x00', 0x7ff, 0x5, &(0x7f00000003c0)=[{&(0x7f0000000280)="882a8ba619e25504913d19659f3ceee27de446ee10a57d2f8837343ce89997e8946927b44f1f9309828c7e89ba89a1c529259fa4781518a6dcf26fbe955ff7f3ea2b04b255a6e6ea63f1a9847b4e91600a7074b25121e75adccf77323fb1023ce9c877fa3a6fd696a546e922b992186d4851d0caabfb4fd5461ede007ce13b8fe4eb0440ff51edc8e1679c55fdfa487fc7d20924694a58233d737a4695e75425ae3abaed9ac888435b710e1e31d533ca20b677738eaeb89f4ac9a623", 0xbc, 0x401}, {&(0x7f0000001640)="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", 0x1000, 0xa9}, {&(0x7f0000000340)="a477ee3a0e9efa9802a44bd2d803d4ab", 0x10, 0x400}, {&(0x7f0000000380)="548d53e3f3c2ebe7ed4acb7d274b1a193b688c04b9095ee3c2a3fdff0f45c47e7e8be435206ef2", 0x27, 0x2}, {&(0x7f0000002640)="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", 0xfe, 0xffffffffffffff81}], 0x2000000, &(0x7f0000003740)={[{'\xff\xff'}, {'\xff\xff'}], [{@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@subj_user={'subj_user', 0x3d, '\'\x14[[.\\'}}, {@fowner_eq}]}) ioctl$BTRFS_IOC_ADD_DEV(r2, 0x5000940a, &(0x7f0000002740)={{r4}, "a20b0c55b8bd3553d8ea85c178b2960fea35f55acd31fcb6da489436420a24cebd428f883d7fa45fd7a6e67a73f241e2cd01162371eff7ea3639fd2a0fcb6a93ce22abcb8706ef196d34b31f464accdc47d84a1fc59a5afb5ac5b6a0062a4dc4cea372ff9362f893351116f4affeeadc8a19b466dfc5c19ba0bc16fd75febde05993e9c8d15631a96233bdf43ef781027a36de650270b50dcbb7bb3b97a5a58027dedd134340a32f8443e9c41c97cabaa7908b0f8c6d8b9d7bccb9a783a44ae07beda46061f233072a4405af82cf4196533e75a694f15abf3f8b661151565cea9b819c096672563c7ffb4cf4fc64b4544a20991cedf9624334f6af712c41e423124242fb4d7645b9dcdee43ba36152da7cde73985972c793369a8e83c087f85b8d68c1da8feda0eee47e5d1dfe3f09a394294c96a6ebed5b612972839beafd07f754cd7d3e86868258274fc859988f5451643616063025c38724adaa2a0e350d690e2097fb638c1ccc6a84410a9e16b8ec7b4635f0e16a0016db6b8978855878f88e91218b72d0540aa551cbbf0b49c8e1d8a513dc0a8551bbdffe197b825b5972ff6cb944b68b0aee258848aaa3d2ee26a564672cb85fbb7e626e23e6c0af54c933b6ec3484c4587b8c46c1a00b9b088e4a6707441ff30da85469bc42650675237673a6d2dcc7483744d3efe2bb531eadeb215542ae47b6e322fe32bace8a235b8925f1877584f10d49284f7673ce6df14f96e07cb267311449cabe462a32cbfdff4d142e4daad9ecd5f84656dcfc99c0d047f4babbc9234d9f6c23d7ba8885f2de3f42233f03f443b32aa998fcd5ebbc9ebd4f010c7b781bc84d88cf18fb315f5db9efd43c83feae0de5265cc11e1f435f68eec8f81a676560a1c64c2f6dd4fa7b0484b4944042a6fd55de7bba6825790eb10310825c078e08cf60962a9f18eb8ca32d19cc23f2856efe4564485ea332bd1f32539eb2e5cfa4c68f73f867a19299a5f7c9244c95cd94571e22d09c3a6e7d9a95b1f62065159189bbc05decf59b7812395e76c955416649a7b3c36881ac01dc761788e992fff27f6b95873b7bfd8aff6596e5decbfacde71bca848832b4e799b25f1212ffbec7f0acf3c1544a5a95b0f8d2b0b9917619f94c8d87c0860a72a6e105890de96453e64a9db2c7971a5cdaad6611f7491e999368878c0ed3a58cfa2d3b858238ebf32557ea7c1fe82efe9a0bc647c65857ff03f1ea22f27810d3f613619bd0b9983c91a6ad551cac880439f8dc68e7ffe5c37e9f0655d301fe4712ab6fa2f0a26b1880f1c879c25f79468cf0899705b52eddd028f9257ef07c21a2aa5d3f90ab16331829549a55c7b252541b95e0ba7e4f54e6d02d89b0541dd8ce96d833246370381dcfa37b4994c9ff9e2507814b2b0a665d48c70a25cdcd418bef44e3c784354080c5290f1dda8118ba202ca292d7b7883b2a0e6876622161f12b1ef6a15c2d68f1cedb7ad951666ad3ce37246b8d8b048991b88fcae394c29df418c5be61e6dfd53bb193fde3fd7e1978bdccd1442d3843c805f1d174833cb21c5caec8da6b1dcc4e3612af695cca7e81a2bf77908113429bcbb8e91037c5de17bd2d79daa221bd491b1ceef0775ee724610b74bd8f9183e782aaeedc7dcff8f4b3a58c349e51e6565a8edbc5df3d8935ea7397345596c119ee9e647ffe37968dfd050f207d7c66a041f557dd4e351177e6e03d3eb8fb5974eb72b999271b411d13af4720dff11a32009a5eabd0215c832b1975cb60c617998a0ca0c2a37a03afa86488d933dac7f3726622115a706ea4bc67d54df33486e50d87b34f98a04a0ebede87617c7d17af22760908fbc759ba4f6b8b6ff08587149f78b447cf00ff85c4588a801f14bf49efa484665ba6fbfb6be11b00c82f8689ff1915a9e5d9f43000a75ed137aca3d850416dcefe82a148023a79c2a7533896d2bf456351f67dde94b5be355772bf355d200244a6e8bdb1c776beeff49b6d4bd1dca2f9621d3fedad6ef4d91076db209a49420939577d5e05abefaace31ba6de268618051da6bc5bb6dab82277aeeac950d86937d98435cd5c35d6620816d50c2346d67b144497212b69ad67a4aa206c9071e419d60141d86fbae2de35d912088d39c5cf3e2cdcc251bbbe1e3e1b7e0124d6c1a082f6b8d46ad19b7b70303c018f0579e33fd1bcce44c13ec800b5eda7f634f65a1edbbe0ee785dd7b6624e4439d3ca27e1ca5d32ee73cefba80e552b8fe80c7d476e250707108394e77c5c8653147251a7e6963fde3366514048f4b0991cf496c29ff921d2927f165973d6b140c7a48f30f0adc03fa496a72b99211310ac10abce24c4b402ff434939e00378c52703970643ddd57786d8a4cfcad61fdfcfc09f777b95fdba7fb32111533fe1126bbec545ec74d90ccd855bc89a80f08092d2be4bd05c0d8533fd2c956916ba657f1ebe585caf00894e9eff87decb896cb124e4c69969aa7e87732967fd3124b0b8e49b119554c7c312304c7fc9b4ebaf63997c997d18b83fbc4f1178a5faa57e77cc6b519ebd689255ce97341da345b570cea5d4447401ac218acce8d980494d39fc7781e30bcf8f36983dc8d0954edf977f9a493d4e884c633e2fc2bfa8df372faab0f84a1dce6b90eab66fae70cfed7526ccc2168b52a7b4805985c72d02384c6b8d360dadb7ff59f4fb937022f9274ad0a0568aabfd2bca14872cb2adc08bc5f3e0abcdaa890c8c80625ef92af21c498d5f3d023f48b79386a0d45654d639f479a5796cac95a41950ebceb42c9023803abd48e735771486902dae003052afc5f624b4c8aef0c24369559e559f73da68c3c5a6160e7777483e929af5299d650faa870205861618726084a0431ecb6ef3c11ef38ef45a72b2bdfe7e3937975410e4ea570442d325ea3f778b665290b3050b4a0494fa922cf0bcee18a26d667923d880ea1db786b847f704168ae04a516b7a99d7950191ca3d647c9a59f11e217cf3737c160974a408452211799fba2da449b2df64d7637b8447a1b9726f89c0451459c9dde26f9ebaa10065e4a1ac6587b20d7bf2ed9c305d30aa5de1b55ccdf271b16ab3bc9971f9c6bc9581de3ca898433a4ed1d4b1998f2167dfbb807d078e9a3546d3411e7b1ee4c7e9c906edf22e8b3b44728d7e28232fa95ea5666c57c70f6badf5a7741cab2dbbc7cf1441ffc071c449797db0f0058da236a2cd649bdeffca0983eb85fe50ed0d5d7115096c25af210397034096cb9471d7df2431372db8060a68680128f80d8598fe2ab72927cf30bbb312c8062316d4e0a221b710d2c364a6b49584e1caf044cde42bda179e089e1953c7350d2c715f0247af910235078c2f2b5dc4a4fa89e3454f45a082baf88df094ce4830f419bdc80c1f1e32f90f9b519dcc69b8491b7bbe5db725f98febe89d3edf8f91288689dae52deee661fe33f086c17cd3c89af87bf32f95f34d8cbaeeb83c09fdb028887c3d61156c53483b846b9f4041834590164f8a6df32d5b5d4bd226e9d2fb786a8e16cc3e395ebcc149f2298cd81c1fc21a819f8eb7276765f559f3d23e30325a6e7490a006f2a01c92f302893d7068ec9c6095eaad293e3dcc48cba31884f1c163b1474ffde5ca288daf2da759e6b76226046f48b171ea00ed3fe07d87b826bc86c951da7c204b84f969a4d50c7078b52a7f15fb20d397697ab42b0dcc1f5d8b39f78190eac1250aa4a06ae0a86db011a220131e84c353fb1b2386d07762f9081d7ce699b166a54f913368f433706ba5231a9cd3243e4313304c2ff85a7438341e2cc33148d10fd50554c497d6892d9d13ba2f7e5a61fbd6c8f2178cba374435526c115111e6c009d1f82ce01142d239021cf88eb9b606289f5cce1ac58925ff0385d84bb30786253a2d42c4a473fcdd4e30c331c6ec6b37b3378f59ea08c77da4cfdd6c8029d9d219b2f264cb05edc7dc4cb13939492defee67a49c185fd848a71cde9d79485e84110e6647c1fc4cda8b699e3a7e88210f9b1a2d56cb889016088c70c70fc0dc98f695b3fc28b574ed8c9a0a509beee494fd761a95db9912af58f8e4b0da1f9ea0ed663a295db92cbafc4f00edb69ae228a2a7e000ac3cdf88f1c7514a4b3cca5d648425aec885e79206473410c181966003a4fb6f174a454b4745d2aca6e7a2eac7c6d111c34ab806184907dacf50702929cd89d2c348e82fe5c34c32b462ed2a0225b7bb87441a8a84970d930b0a73b09ea0415dd42bff9b45223b2b88c95257c66cc58764e105e35cbbabd2da9ef0246319bcd3ed2afdd6c27b1ea993c51f5cbd75b4632284014270d465d1ba0de4c88b55bbf014f48e6a053d621d8c8285b25a8da7e61f5eefef97328ad2cbd4a5aa5637f739423966daf157a8d8983a4a6a02c4a70673ea4baa97a71a28ef7725d2f1e967f22d5a10e3621c3b11433b0a7688ffff57054386af10eee292d9185d6be9b80952ae4e7b906c449efed381c270d7d04f3ae7639f058c610f02bc363db89d4401ad67ef426e5b5721b1300c058fc9a77907df90ff6fcb5d41f2803e511d9ff3d39d3021d5f2fd99daf19cf45a14c994ad3240745a8b50f8e1d0f5075d084e88f52e1d804c38076a31bffab15905e3079474ce3fd023b5e2f55f69ccdc83a4f66520fc9d1523101fecf3a3ea73f57928b1935c1ac81191f2fa780a8e9be74fd5016e9a67b954af822576b77a17b5c0b836cc32e72e9087fdcc1cd492aa250e28a86c6f455df374707d3dd952f9e0d798fc9bad3f16b50ab5896ec40471fea1921e920e3a68f07a75149b51c8493e84e44e33f71b22ec2f1356745a702bf9dd2d9b18b6de8b2dccef8b5bda389d6e794f00cb4ffa2807fa0b7e1d87f4915d8b05261ac37779a792fd281fc399ce344d50412962dcdcce0966a8bc9f14a10205e33c54a1f23f5868b00d1b121fdf3e84d91d30575ddcd142fe87918b7f1dfdbbaa95596e1ffc4b52a2432d0dc065c18d7337beb40512537f3b7bf24091115da9df76abbe138b1868888e9c460cb6a4497507286ab5a32e6c17fabc4314139dc203fa75db454aadd4dd24afdaf8b99d0d069188b2b5f23eecbc1631802b2bb65502160af7328274b2c22954e526ea7192d4b00d4d7528baae1f4258dbc9765df9946ce9c6aa16d931295e1c33e3612e7355f54016107cd8c4df46cea93590d5943fd463278585272a9231e2f6e02285878513bb77a6cd235f56c156307fe2f4a671894204b5d5195fa2e31757d25f9422330b99050f22114fac251796e86bc01db4436e8373bf3eeb4478ebf8aa8b2901053b429827a150464a42e734708ac8f78d2ccb7ed3ed4816e1fc5a124eeff5cd0ae47cbc0d2588ac62a500644b7802058e209fadf7746eaaa1ecabff4521db0423e6563bbe835775aa7a0fda982a56971c1237493fa7a1c8470996b19e28dc3270353be935d09ba6b6ae1ab6380107260335af08ffedf9a91d7b10e2da300fbdea76e44ac8563856a8219320c2a98e67f7f4acab629839da9b13e6424fbfef85ab27c8048fbba7cc2ba269abcfcbb00474c48fa8d0652b5bea55fe49c0eb508dca0c074a56160c25f6ae0575a10531ae2ff18300d4994293dd949ba82960ba8ca20d36821b6be0cee811a81cc8d0012640c51ad46dff9d87634877dfe027f0a46ce83b8aa65fef5241b8d25b23a369569d1ef22124556d3fd2a61c20d1df0318f7597bc6a7dae75395fe844fa4ac7bfaf425a7f436b5b786d4816899337fc55347b7837b8ac57d"}) connect$inet6(r3, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x400000000000095, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000080)={@multicast2, @dev={0xac, 0x14, 0x14, 0x41}, @remote}, 0xc) setsockopt$inet_mreqsrc(r5, 0x0, 0x25, &(0x7f0000001480)={@broadcast, @dev={0xac, 0x14, 0x14, 0x20}, @empty}, 0xc) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x303100, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000000c0)=0x3, 0x4) r7 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(r7, 0x6, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x43}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000240)=ANY=[]) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x4e1e, 0x65899913, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x28}}, 0xffffffff}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f0000000500)=ANY=[@ANYBLOB="000900002000000004018005a1b2ff0001000740000000030e08063506060000008000000700e9ffffff0000350000000000000080000000000000000100000000000000701400000000000400000000000000000000000042f64306a0a7299d7f0000002d94379b8a82379ca1a2481a6909ab5cc027ab72210ebbd58a3b58834bf651851d270fa63c400169863c18563a2f42d66029f083b29c2cbf"], 0x58) 19:24:52 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) fremovexattr(r0, &(0x7f0000000440)=ANY=[@ANYRESOCT=r0]) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0xa0, 0x26, 0x101, 0x0, 0x0, {0x1}, [@typed={0x8c, 0x63, 0x0, 0x0, @binary="a0eab51f24f4074cfbfbbb07324cc62f701d9f2905855dd18b1f0d5ce7f3493090af5beef11c281fbcc10f4675223ffc29811a6d82c0c17acd7a40480a51d57b2b3cc217bf3558b4d61924aa0922349a895d495ac12b16cb2b0cb00a0c3d1fb5b695cfebd4ad94d1a5642d3ec010c0792e9f8a9bff9bc38d6a5f4c42eb9238b7bc3a2be2cefbfd2d"}]}, 0xa0}}, 0x8044) r2 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYRES16, @ANYRESOCT, @ANYRES64, @ANYRESDEC]) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/packet\x00') r4 = epoll_create1(0x0) r5 = open_tree(r2, &(0x7f0000001180)='./file0\x00', 0x80001) r6 = socket$inet6(0xa, 0x800, 0x7fff) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f00000011c0)={0x10000000}) dup3(r3, r4, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000001500)=ANY=[]) r9 = openat(r8, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r10 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r9, r10, 0x0, 0x10000000c) setsockopt$SO_TIMESTAMP(r10, 0x1, 0x40, &(0x7f0000000040)=0xda, 0x4) pread64(r7, &(0x7f0000000180)=""/4096, 0x1000, 0x22d4fe79) 19:24:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xffffffc3, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) [ 665.320049] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.3'. [ 665.324780] tmpfs: Unknown parameter 'ÿÿ01777777777777777777777ÿÿÿÿÿÿÿÿ18446744073709551615' [ 665.333612] FAULT_INJECTION: forcing a failure. [ 665.333612] name failslab, interval 1, probability 0, space 0, times 0 [ 665.334984] CPU: 1 PID: 6324 Comm: syz-executor.4 Not tainted 5.10.245 #1 [ 665.335790] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 665.336778] Call Trace: [ 665.337091] dump_stack+0x107/0x167 [ 665.337522] should_fail.cold+0x5/0xa [ 665.337972] ? alloc_pid+0xd7/0xd30 [ 665.338402] should_failslab+0x5/0x20 [ 665.338854] kmem_cache_alloc+0x5b/0x310 [ 665.339348] alloc_pid+0xd7/0xd30 [ 665.339760] ? copy_namespaces+0x1ca/0x4f0 [ 665.340261] copy_process+0x3b8b/0x78b0 [ 665.340739] ? stack_trace_save+0x8c/0xc0 [ 665.341237] ? __cleanup_sighand+0xb0/0xb0 [ 665.341735] ? kernel_text_address+0xf2/0x120 [ 665.342268] ? find_held_lock+0x2c/0x110 [ 665.342745] ? io_uring_setup+0x1c23/0x2980 [ 665.343262] ? lock_downgrade+0x6d0/0x6d0 [ 665.343752] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 665.344327] create_io_thread+0xb6/0xf0 [ 665.344792] ? pidfd_prepare+0x80/0x80 [ 665.345253] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 665.345829] io_uring_setup+0x1d79/0x2980 [ 665.346321] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 665.346911] ? wait_for_completion_io+0x270/0x270 [ 665.347496] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 665.348116] ? syscall_enter_from_user_mode+0x1d/0x50 [ 665.348723] do_syscall_64+0x33/0x40 [ 665.349164] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 665.349762] RIP: 0033:0x7ff9f8ea8b19 [ 665.350197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 665.352334] RSP: 002b:00007ff9f641e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 665.353227] RAX: ffffffffffffffda RBX: 00007ff9f8fbbf60 RCX: 00007ff9f8ea8b19 [ 665.354062] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 665.354893] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 665.355725] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 665.356547] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 19:24:53 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x2056, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000000), 0x0) fcntl$getown(r0, 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = dup2(r2, r1) lseek(r3, 0x7, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000180)=0x2) sendfile(0xffffffffffffffff, r3, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) [ 665.409306] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.3'. [ 665.414603] tmpfs: Unknown parameter 'ÿÿ01777777777777777777777ÿÿÿÿÿÿÿÿ18446744073709551615' [ 665.416775] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 665.423636] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len 19:24:53 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x2056, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000000), 0x0) fcntl$getown(r0, 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = dup2(r2, r1) lseek(r3, 0x7, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r4, r3, 0x0, 0x7ffffff9) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:25:09 executing program 4: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 24) 19:25:09 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x2056, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000000), 0x0) fcntl$getown(r0, 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = dup2(r2, r1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r4, r3, 0x0, 0x7ffffff9) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:25:09 executing program 6: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000180)=0x10000) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffffff9) write$P9_RLOCK(0xffffffffffffffff, &(0x7f0000000240)={0x8, 0x35, 0x1}, 0x8) flock(r0, 0x8) r1 = syz_open_dev$sg(0x0, 0x0, 0x2001) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_AIE_ON(r2, 0x7002) r3 = socket$netlink(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0xb, &(0x7f00000000c0)=0xba, 0x4) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x5}], {0x14}}, 0x3c}}, 0x0) sendfile(r1, r3, &(0x7f00000001c0)=0x10000, 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f00000002c0)={{0x0, 0x3, 0x1, 0x88, 0x403, 0x8ef, 0x2, 0x80000001, 0x401, 0x1e, 0x8, 0x8000, 0x9, 0x8, 0x85}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) accept4(0xffffffffffffffff, &(0x7f00000000c0)=@in={0x2, 0x0, @local}, &(0x7f0000000000)=0x80, 0x80000) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001800)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x7, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0x4e0}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@noacl}]}) 19:25:09 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8000) r3 = syz_open_dev$mouse(&(0x7f0000000080), 0xa8, 0x2002) openat$cgroup_freezer_state(r3, &(0x7f0000000140), 0x2, 0x0) pwritev(r2, &(0x7f00000001c0)=[{&(0x7f0000000480)="c8b7faa8d14945cfbd02ab325e666adff595b3aa6246f1d63525ea479bda19f226d58002eb8dfe8fc6572628b97ac92499ac1d3c773b17c5b63140303f35faf0bcce5582b92fa39930e8425a444c791a44d9bbe729fa98c391a04339b004d4b80c84cfa493b5ddef10e0004b7ee596e92ee27a56114a1d2650e693f67505d3c0f75a147ad6faceeb931037af61ec71eef9fde550d13d8ab1389e15ec4c1e4ad871a85c14dd719fbe7f43a6c56b1347ace7eae74542eb47d951ea9a5a32021e12d23d0c3f2e19b0f330e0cf3984b0d0a156a5fcc7414f04fada8c2f20c584c9eedfc43c", 0xe3}, {&(0x7f0000000580)="b8d3867e82bfa6dffc2901b7738c23800f9a89b142713d212bf49bb97e3098e78da9825c96fce17ee3ee26b26981e0e63ef82f61a1543907a640ebc815168ec45eb67fa16ddd370248932a6e89632c35c61454eaa8adaa672fd4b8a1664f73968790fd01c6ba6b9377633384599422c0c475004dd52d78920799eeefe4809eca1dc9ee4d8d91f8850e0cfe984cbd369104a9cc8af07887a07369255d83d0201a4a733dcc8d7bc9803a8c2ce8db439051ea3b873021a826cdf73330d13edfdaf35c95207157b4ca17c0cc0f836b08fc43e7a75ad0d91dbb0f495fc5c0811be9c88d19f22d91c8d68006454e924c", 0xed}, {&(0x7f0000000240)="72ab8fab5ee040e3fdd9904e43ea70c47bef8c465aac734d08b6c7d8264ad04ceb4054217b0f0792eceb75c24e0295c719d60b48295a90707f46132d2695d91ac33224", 0x43}], 0x3, 0x40, 0x80000001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4000006}) perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x10) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2}) 19:25:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xfffffff0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:25:09 executing program 0: clone3(&(0x7f00000008c0)={0x1040180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) epoll_create1(0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_adj\x00') write$cgroup_int(r0, &(0x7f0000000040)=0xffffffffffffffff, 0x12) 19:25:09 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:25:09 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r3, 0x400, 0x1) fcntl$setown(r3, 0x8, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x0, 0x2e98, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 681.553419] FAULT_INJECTION: forcing a failure. [ 681.553419] name failslab, interval 1, probability 0, space 0, times 0 [ 681.555981] CPU: 1 PID: 6347 Comm: syz-executor.4 Not tainted 5.10.245 #1 [ 681.557456] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 681.559272] Call Trace: [ 681.559844] dump_stack+0x107/0x167 [ 681.560539] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 681.560638] should_fail.cold+0x5/0xa [ 681.563156] ? create_object.isra.0+0x3a/0xa30 [ 681.564153] should_failslab+0x5/0x20 [ 681.564980] kmem_cache_alloc+0x5b/0x310 [ 681.565863] create_object.isra.0+0x3a/0xa30 [ 681.566812] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 681.567918] kmem_cache_alloc+0x159/0x310 [ 681.568818] alloc_pid+0xd7/0xd30 [ 681.569572] ? copy_namespaces+0x1ca/0x4f0 [ 681.570487] copy_process+0x3b8b/0x78b0 [ 681.571363] ? stack_trace_save+0x8c/0xc0 [ 681.572279] ? __cleanup_sighand+0xb0/0xb0 [ 681.573189] ? kernel_text_address+0xf2/0x120 [ 681.574159] ? find_held_lock+0x2c/0x110 [ 681.575047] ? io_uring_setup+0x1c23/0x2980 [ 681.575988] ? lock_downgrade+0x6d0/0x6d0 [ 681.576886] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 681.577941] create_io_thread+0xb6/0xf0 [ 681.578797] ? pidfd_prepare+0x80/0x80 [ 681.579650] ? io_uring_cancel_generic+0x2b0/0x2b0 [ 681.580721] io_uring_setup+0x1d79/0x2980 [ 681.581619] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 681.582709] ? wait_for_completion_io+0x270/0x270 [ 681.583778] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 681.584910] ? syscall_enter_from_user_mode+0x1d/0x50 [ 681.586027] do_syscall_64+0x33/0x40 [ 681.586830] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 681.587941] RIP: 0033:0x7ff9f8ea8b19 [ 681.588740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 681.592721] RSP: 002b:00007ff9f641e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 681.594360] RAX: ffffffffffffffda RBX: 00007ff9f8fbbf60 RCX: 00007ff9f8ea8b19 [ 681.595915] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 681.597455] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 681.598995] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 681.600542] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 [ 681.602290] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len [ 681.610906] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6345 comm=syz-executor.6 [ 681.613529] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6345 comm=syz-executor.6 19:25:09 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000d80)=ANY=[@ANYRESOCT=r0], 0x98}}, 0x0) close_range(r1, r0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000003c0)=""/4, &(0x7f0000000400)=0x4) fcntl$addseals(r1, 0x409, 0x8) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cgroup.events\x00', 0x0, 0x0) getpeername$netlink(r2, &(0x7f0000000240), &(0x7f0000000480)=0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000440)=0x7, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) dup(r2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd_index=0x3, 0x8, &(0x7f0000000140)="ef3003e7d4d5730dd9bc0d2116cbd2ec2d4cef0397c67262d0882d05da47c1147ab3a8e1b3dfac797791d00529f0be39c7c3024d4751fcbfb4d3ec4b7b6dc1", 0x3f, 0x0, 0x1}, 0x9) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, r3) add_key$keyring(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, r3) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000500)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key(&(0x7f0000000200)='keyring\x00', &(0x7f00000004c0)={'syz', 0x1}, &(0x7f0000000540)="18726d0eed55eaa57fc580dc3a0b12e0a5ee08da294ac8119c4c73f93694f2a935d17a81959d084839f846dca8739131e4a9c45c6509af44529537eae3b5a4793a9a0aacfd7a75f2b566b874939829b82a35d20d1985a92c5d7ba971251e89286f64438db33a7f05fb0d1707fd3fa27a56032a79c1d09558fbbfcb2e5f36d3e7e1c749ad35c2064fa087cf6359507a36eb69853e0cdd920cbb7586aedf5a2e5a9a1a6b8d11c08a14918b01d07c92179dfae1ef58835b5fa4be28fbd3b3eac1c9f3cf74fbe25748c55d23902439133eecfafb2e0f", 0xd4, 0xfffffffffffffffa) add_key(0x0, 0x0, 0x0, 0x0, r4) unshare(0x48020200) [ 681.659562] loop6: detected capacity change from 0 to 16776704 [ 681.675628] EXT4-fs (loop6): Mount option "noacl" will be removed by 3.5 [ 681.675628] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 681.675628] 19:25:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xffffffff, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) [ 681.692602] EXT4-fs (loop6): mounted filesystem without journal. Opts: noacl,,errors=continue [ 681.706724] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6380 comm=syz-executor.6 [ 681.709623] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6380 comm=syz-executor.6 19:25:09 executing program 4: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 25) [ 681.763585] FAULT_INJECTION: forcing a failure. [ 681.763585] name failslab, interval 1, probability 0, space 0, times 0 [ 681.766224] CPU: 0 PID: 6383 Comm: syz-executor.4 Not tainted 5.10.245 #1 [ 681.767787] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 681.769669] Call Trace: [ 681.770270] dump_stack+0x107/0x167 [ 681.771097] should_fail.cold+0x5/0xa [ 681.771976] ? io_uring_alloc_task_context+0x99/0x6a0 [ 681.773142] should_failslab+0x5/0x20 [ 681.774006] kmem_cache_alloc_trace+0x55/0x320 [ 681.775045] io_uring_alloc_task_context+0x99/0x6a0 [ 681.776205] ? io_import_iovec+0x1120/0x1120 [ 681.777214] io_uring_setup+0x1dd1/0x2980 [ 681.778157] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 681.779311] ? wait_for_completion_io+0x270/0x270 [ 681.780425] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 681.781619] ? syscall_enter_from_user_mode+0x1d/0x50 [ 681.782797] do_syscall_64+0x33/0x40 [ 681.783652] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 681.784822] RIP: 0033:0x7ff9f8ea8b19 [ 681.785669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 681.789888] RSP: 002b:00007ff9f641e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 681.791647] RAX: ffffffffffffffda RBX: 00007ff9f8fbbf60 RCX: 00007ff9f8ea8b19 [ 681.793281] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 681.794904] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 681.796534] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 681.798157] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 [ 681.836852] netlink: 'syz-executor.1': attribute type 13 has an invalid length. 19:25:09 executing program 3: r0 = syz_io_uring_complete(0x0) syz_open_pts(0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3a7b, &(0x7f0000000480), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/142, 0x8e, 0x0) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0xe) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(r5, 0x6, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x43}) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9, 0x8010, r5, 0x63872000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$MON_IOCX_GETX(r6, 0x4018920a, &(0x7f0000000280)={&(0x7f0000000240), &(0x7f0000000380)=""/111, 0x6f}) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x355c, &(0x7f00000002c0)={0x0, 0xf22b, 0x2, 0x1, 0x1fa, 0x0, r1}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 681.841764] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len 19:25:09 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x100, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYRES64, @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB='n/file \x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000005c0)=ANY=[]) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000340)=0x4) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="24000000100001000000000000000096000009000500000000000000050000804800005bdf87399f088209ee1e3e3ecd799ab580d9692a4c3dc12b855173ed2e9f93fc3bbf050c4209bdfb1544969b27bcd01a38a4e5ebe04dd1e1d7fb6705f297087dcbcd7675253395329744739d96eda915556e9429c80f9e751f0785770941bc9521b15d8570b89784466152c6f1968c71182f1305181a06216e1c41c8a9854888a3a905fbaae49510319bec010d4dd1c4b683c289630df03c198c62f0c2ea0e560ead374978bb339624e4494e984e9d548a446e4ef1468ac6fc4eb685b58e"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x3000000a}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000c00)=ANY=[@ANYBLOB="8b7f9e4f59cbdeb7fc20f7577aaaaf741879ca274f2b37c13a6d64b2aeeb40b265ab501eabad8036b67164ccb572cfcbe863e0900e269b3d8c6ebef02a55e2adbf398b8f3864ca7f4ce33cce3c5d7d0b3161ad7d01ee9ca0112b3729e628fd8d97d9600ea7f1b1458dc05c05797146001e3d2df55d606005dabcb41d0e7e381c19384fdb2de185e6dc3917e484b239bd3d57a8ebbac3529b3eb231746b25c09d9032ed8383baf9a28e06dcb653436f136eebd530c090f2d8", @ANYRES32=r1, @ANYBLOB="02000000000000002e2f66696c653000b48ea56a6b493cb8634727dc7cbbe2dc472ef0d9c090c9991e26be1c3d9fd079f793efc66a713271a2855e89970c24f4262c065543f19143269ee8cc1d3c9c8ac475bc7a3024f713bff13f673937bcaddba5642c92dbdc0d80482b54030ece38e1cf1876d51809826143d8f8776c74fdc425daae2db1d89475e19a8dc9a5933ce331dd68d8eeeb6d4a08efc281862c2579bb8101000000d6899145972778e23f9e9d8112162745ef852cae5ff53975b308ab5ef28c64c5f7845fa08631689c33b1980a1f73323e439d2a87e3f33e71cc6645d9adb2d26f9124cf0207d91a5a96101611e205226bf432dad78b2ebd42e20e7822748163d640be2639c1c559e6eb5728543113e2d34ccc3a02de4b0281eb0ad8921c5b0dcefb26d1e8820a34461b70313543af74982e6d2ffee53c2979f52520db20e953b0963bac7f871e1ac58394b2306f2028c2043eeeea77ee5d8c91b4f0086ec4caa68b7ed469502856153dd1d2ac273f892b7b24eb769c5c3a5b4af82af99651a02e8c876b9e14109e9cf1c428d4bad0eec5cbdfc0545946f8331ec1e604d6ff7a02edc112c4dbeaf6a87622c8126478d01299293b341862ac3db598ba40e746a75da52bfbcb5d4e879d299df75c27fbadb7d9333b7129d88b4fe449f8f8b02fc7ad4c1f62365644a30799991e1d7293e43f13573d204c0b195277674e77da169cc023c2fc373289ff9e305731953fff5b3c0c15a98c4ffac50b3aaed5e27a9f8608593c8eb3f80d6327f08fd78ae5e2ba"]) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x5008c00c}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x3fb, 0x800, 0x70bd2a, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0xc004}, 0x884) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup(r4) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000240)={0x1f, 0x0, @fixed}, &(0x7f0000000640)=0xe, 0x100000) openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x92180, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) dup(0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ptype\x00') pread64(r6, &(0x7f0000000240)=""/77, 0x4d, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x2400, 0x8) 19:25:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0xf, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) [ 681.999953] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 682.005888] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 682.007689] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 682.010353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 682.050766] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 19:25:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x10, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:25:30 executing program 4: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 26) 19:25:30 executing program 0: sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x94, 0x0, 0x200, 0x0, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010100}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netdevsim0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:inetd_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x4000002) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d24201001283", 0x66, 0x400}, {&(0x7f0000000040)="0000000000000000000000009b94b11e46934f5489a26265ae170793010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x1000}, {&(0x7f0000012600)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}], 0x180800f, &(0x7f0000000080)) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x92c25, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000600)={&(0x7f00000003c0)={0x214, r1, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5}, {0x5}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0x58, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1f3d}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x548d6e89}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4e2c073d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9611}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4ed942d8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ae13ed1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6cd5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc4d0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x14975d78}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x35168cf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5f303938}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xb48c7f1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x80}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x17}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x114, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x33}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x32}]}, {0x4}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x15}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7796d61f}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x634edda7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x559d8f82}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6f839ffa}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1db02981}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1b84714d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x726ec263}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x12}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x12af8766}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x71c93c2b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x30}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x47611fe9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x44}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x340fff30}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa7}]}]}]}, 0x214}, 0x1, 0x0, 0x0, 0x8804}, 0x0) 19:25:30 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r3, 0x400, 0x1) fcntl$setown(r3, 0x8, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x0, 0x2e98, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 19:25:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x53, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:25:30 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:25:30 executing program 6: io_setup(0xf7, &(0x7f0000000000)=0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000000c0), 0x210800, 0x0) io_submit(r0, 0x1, &(0x7f0000000380)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x8, 0x0, r1, 0x0}]) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f0000000080)={0x80000000, 0x8, '\x00', 0x1, &(0x7f0000000040)=[0x0]}) 19:25:30 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x2056, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000000), 0x0) fcntl$getown(r0, 0x9) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r1, 0xffffffffffffffff, 0x0, 0x7ffffff9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:25:30 executing program 3: r0 = syz_io_uring_complete(0x0) syz_open_pts(0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000140)) perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x3a7b, &(0x7f0000000480), &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/142, 0x8e, 0x0) ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0xe) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(r5, 0x6, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x43}) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9, 0x8010, r5, 0x63872000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r5, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$MON_IOCX_GETX(r6, 0x4018920a, &(0x7f0000000280)={&(0x7f0000000240), &(0x7f0000000380)=""/111, 0x6f}) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x355c, &(0x7f00000002c0)={0x0, 0xf22b, 0x2, 0x1, 0x1fa, 0x0, r1}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000340), 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) [ 702.534559] FAULT_INJECTION: forcing a failure. [ 702.534559] name failslab, interval 1, probability 0, space 0, times 0 [ 702.536087] CPU: 0 PID: 6419 Comm: syz-executor.4 Not tainted 5.10.245 #1 [ 702.537007] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 702.538119] Call Trace: [ 702.538487] dump_stack+0x107/0x167 [ 702.538971] should_fail.cold+0x5/0xa [ 702.539494] ? create_object.isra.0+0x3a/0xa30 [ 702.540101] should_failslab+0x5/0x20 [ 702.540623] kmem_cache_alloc+0x5b/0x310 [ 702.541166] create_object.isra.0+0x3a/0xa30 [ 702.541754] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 702.542440] kmem_cache_alloc_trace+0x151/0x320 [ 702.543069] io_uring_alloc_task_context+0x99/0x6a0 [ 702.543744] ? io_import_iovec+0x1120/0x1120 [ 702.544354] io_uring_setup+0x1dd1/0x2980 [ 702.544915] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 702.545595] ? wait_for_completion_io+0x270/0x270 [ 702.546275] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 702.546978] ? syscall_enter_from_user_mode+0x1d/0x50 [ 702.547672] do_syscall_64+0x33/0x40 [ 702.548167] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 702.548847] RIP: 0033:0x7ff9f8ea8b19 [ 702.549345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 702.551828] RSP: 002b:00007ff9f641e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 702.552855] RAX: ffffffffffffffda RBX: 00007ff9f8fbbf60 RCX: 00007ff9f8ea8b19 [ 702.553804] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 702.554759] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 702.555730] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 702.556674] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 19:25:30 executing program 4: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 27) 19:25:30 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:25:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0xc0, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:25:30 executing program 5: r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) [ 702.654134] FAULT_INJECTION: forcing a failure. [ 702.654134] name failslab, interval 1, probability 0, space 0, times 0 [ 702.655684] CPU: 0 PID: 6443 Comm: syz-executor.4 Not tainted 5.10.245 #1 [ 702.656563] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 702.657635] Call Trace: [ 702.657973] dump_stack+0x107/0x167 [ 702.658445] should_fail.cold+0x5/0xa [ 702.658924] ? create_object.isra.0+0x3a/0xa30 [ 702.659511] should_failslab+0x5/0x20 [ 702.659992] kmem_cache_alloc+0x5b/0x310 [ 702.660505] create_object.isra.0+0x3a/0xa30 [ 702.661072] kmemleak_alloc_percpu+0xa0/0x100 [ 702.661644] pcpu_alloc+0x4e2/0x1240 [ 702.662134] __percpu_counter_init+0x10d/0x2d0 [ 702.662724] io_uring_alloc_task_context+0xcc/0x6a0 19:25:30 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x23}, 0x4400, 0x0, 0x40000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @dev}, {0x2, 0x0, @dev}, {0x2, 0x0, @broadcast}, 0x142}) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x7, 0x40, 0x81, 0x5, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xffffffbb, 0x4, @perf_bp={&(0x7f00000000c0), 0x3}, 0x80, 0x8, 0x7, 0x9, 0x3, 0x6f, 0x3322, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x9, r0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000540)={{{@in=@private, @in=@private}}, {{@in=@loopback}, 0x0, @in6=@private1}}, &(0x7f00000001c0)=0xe8) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./file1\x00', 0xe0280, 0x0) dup2(r5, r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000006c0)={'wlan0\x00'}) fstat(0xffffffffffffffff, 0x0) sendfile(r1, r3, 0x0, 0x100000001) execveat(r1, &(0x7f0000000200)='./file1\x00', &(0x7f0000000500)=[&(0x7f0000000240)='\x00', &(0x7f00000002c0)='%-\x00', &(0x7f0000000300)=':\\)+*\x00', &(0x7f0000000340)='*,^\x00', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='{]\\\x00', &(0x7f0000000400)='^#(\x00', &(0x7f0000000440)='\x00'], &(0x7f0000000680)=[&(0x7f0000000640)='\x00'], 0x400) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x10, r0, 0x0) [ 702.663359] ? io_import_iovec+0x1120/0x1120 [ 702.664127] io_uring_setup+0x1dd1/0x2980 [ 702.664655] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 702.665308] ? wait_for_completion_io+0x270/0x270 [ 702.665928] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 702.666600] ? syscall_enter_from_user_mode+0x1d/0x50 [ 702.667253] do_syscall_64+0x33/0x40 [ 702.667727] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 702.668375] RIP: 0033:0x7ff9f8ea8b19 [ 702.668841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 702.671193] RSP: 002b:00007ff9f641e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 702.672177] RAX: ffffffffffffffda RBX: 00007ff9f8fbbf60 RCX: 00007ff9f8ea8b19 [ 702.673081] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 702.673984] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 702.674888] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 702.675795] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 19:25:30 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000200000006000000000008000080000020000000e2f4655fe2f4655f0100ffff53ef010001000000e2f4655f000000000000000001000000000000000b0000000001000008000000d24201001283", 0x66, 0x400}, {&(0x7f0000010100)="0000000000000000000000009b94b11e46934f5489a26265ae170793010040", 0x1f, 0x4e0}, {&(0x7f0000010300)="03", 0x1, 0x640}, {&(0x7f0000010400)="02000000030000000400000016000f000300040000000000000000000f00c5d7", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000000100000e2f4655fe2f4655fe2f4655f000000000000040080", 0x1d, 0x4100}, {&(0x7f0000000040)="808100000018000018fdb7068c01e2655fe2f4655fe2f4655f00000000000001008000000010000800000000000af301000400beecbc8c08c4d9f613cf3bbbe260ccef33bddab1cbeabe20028ae566a0b11283baa9cd7e546022cb2fca1f4f3f3fecc651e7679500504bb7e5eccc61e9b4e109935eb18e37980737c887ca6faa969f", 0x82, 0x4200}], 0x0, &(0x7f0000000180)={[{@user_xattr}, {@bsdgroups}, {@jqfmt_vfsv0}, {@bsdgroups}, {@data_ordered}, {@abort}]}) 19:25:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0xec0, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:25:30 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x2056, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000000), 0x0) fcntl$getown(r0, 0x9) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r1, 0xffffffffffffffff, 0x0, 0x7ffffff9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:25:30 executing program 0: r0 = open$dir(&(0x7f0000000280)='./file0/../file0\x00', 0x40000, 0x40) r1 = syz_mount_image$vfat(&(0x7f0000000600), &(0x7f0000000640)='./file0/../file0\x00', 0xfffffffffffffff8, 0x4, &(0x7f0000000880)=[{&(0x7f0000000680)="80a383957bf94b5d4bc983daa2fe2d9ee879b68fa52197d700b68760531a7eb8247b057fc1d22efa398073eb0e86d3e6", 0x30, 0x4}, {&(0x7f00000006c0)="fdf56558fcc81610afe7694053bf7d383475782c55ff808b384422c719274efda59724061297d94d12b81eac966b127004c728584845c87a78b4efcc9c049422e8f1432cbdf8a8aab6150c4682d274da8c07e663f7c2fd021e19aa97f7a993903b75a67f2a983bf0bd3a26b83f6b1ca9a1038aec4addfc42c9c8bc14c5e3ae2eef2d4ae3893af4e369f5a05dd1311917d9e9b8aa6ff039a85f40cc4292dbe2249def2f7d6ab08406eae8f338013e94066382c16e39bc7b38405901d2500be8e331", 0xc1, 0x14300000000000}, {&(0x7f00000007c0)="69dd82e274476a83c8c8cfa3c3dcff16bf", 0x11, 0x81}, {&(0x7f0000000800)="68cd080914738558616403dc865a8b7aa22c63f25f45e7da7ff1d7aa9774251e944a8beea9d9c8c0b4c40afe7da086e01ca91f4ec6a0fbd1a20431f46db630d2d18b6392181299dfad0dd682483ec8a4abb61d23dbfca3ae3f673a400c794456766e746b", 0x64, 0xfffffffffffffffe}], 0x2000, &(0x7f0000000900)={[{@shortname_lower}, {@numtail}, {@rodir}, {@shortname_win95}, {@shortname_lower}, {@shortname_winnt}, {@uni_xlateno}], [{@context={'context', 0x3d, 'user_u'}}, {@measure}, {@smackfsfloor={'smackfsfloor', 0x3d, 'fscontext'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@fscontext={'fscontext', 0x3d, 'root'}}]}) dup2(r0, r1) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000002f00)='./file0/../file0\x00', 0x0, 0x21f3000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x20020, &(0x7f00000002c0)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x43000000}}]}) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x3, &(0x7f00000004c0)=[{&(0x7f0000000180)="47e90a8149b557695edea0894f1a8caf75c389a22f6e8a5a8d93fe6dfa2651fa4abcc18acd5c9ba4feb40ce968b9d1b9c56af4d2b6ee9fa4771a96efc5e50c5913fcd93f9a1286623e8f96c3038af9f893ec7446d6f0574bc93340e4baec1eb06e6cb7bc0620e3524cd3737786fbdcee7eace2f76469935505207d72cec624d83deabb39197a0a132e1e99a24a25fd865bae7551cb97798b41afd61720a1a5577430e3c8ab5112f914048322b70d893d712a65d8d5f28030160edbda3103e8736e800fde512e87691fc0a28f2a94f2b7d993edd5142a88c2e0e047e069f82c4729df90a80e294c5775c42cd2f599dffc1c32fc7d1624d19e32", 0xf9, 0x9a76}, {&(0x7f0000000300)="a99beebb0b3e3e90076fe21961ffeb8ff7d6c3a1ae5cda53702f9142d2724b893260c0c69344485fe0425b113afdbc23cdbbb21ff48bb9cf149460bf6731ea1236a7843138db7f69d29c7b2967a5fa319edfeeda9c40f6fbb0a8b02bdee9aaf8675099404c53c509891595825d713fad592c594052f030305168429fdd60972d8bf5dd7e1616885774ae37429e81c5cbe0935b5c922942f4579334ec9a3dc169a069219bbc", 0xa5, 0x6}, {&(0x7f00000003c0)="d22b2688aeaacee43f6719acc2dc7016013a0f0d76a54d34adfbf749020c081848891706996f665c5fa81225cbfc7ff489dbd351002b4ef64a80b75e1030eb2337b60dd2680b6bbd4f0c432cf73579e420fb11adf4fbb6ba90e7ccf27ce58e4806325eb9e1d733ffdaa90ae086757b6b92b5231a9a053847061c3c9ff7bee8b748a5038ed15521a6e69d0f2e485c2b13cbfc61901e2e6a1cd93263d4fe657792bd040d791e8b779436498498034a96c312722643e6f5494cb93dca45153c5826ef678bda66f1ab26d44ac1c02fda0f", 0xcf, 0xd37b}], 0x120048, &(0x7f0000000540)={[{@nodelalloc}, {@norecovery}, {@acl}, {@acl}, {@delalloc}, {@jqfmt_vfsv1}, {@nobh}], [{@measure}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@smackfshat={'smackfshat', 0x3d, 'inode_readahead_blks'}}, {@permit_directio}, {@dont_measure}]}) 19:25:30 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x33fe0, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) [ 702.828248] EXT4-fs (sda): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 702.849745] EXT4-fs (sda): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 719.223369] FAULT_INJECTION: forcing a failure. [ 719.223369] name failslab, interval 1, probability 0, space 0, times 0 [ 719.226316] CPU: 0 PID: 6467 Comm: syz-executor.4 Not tainted 5.10.245 #1 [ 719.228105] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 719.230272] Call Trace: [ 719.230961] dump_stack+0x107/0x167 [ 719.231920] should_fail.cold+0x5/0xa [ 719.232915] ? create_object.isra.0+0x3a/0xa30 [ 719.234095] should_failslab+0x5/0x20 [ 719.235092] kmem_cache_alloc+0x5b/0x310 [ 719.236153] create_object.isra.0+0x3a/0xa30 [ 719.237294] kmemleak_alloc_percpu+0xa0/0x100 [ 719.238466] pcpu_alloc+0x4e2/0x1240 [ 719.239444] __percpu_counter_init+0x10d/0x2d0 [ 719.240638] io_uring_alloc_task_context+0xcc/0x6a0 [ 719.241926] ? io_import_iovec+0x1120/0x1120 [ 719.243093] io_uring_setup+0x1dd1/0x2980 [ 719.244176] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 719.245491] ? wait_for_completion_io+0x270/0x270 [ 719.246772] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 719.248134] ? syscall_enter_from_user_mode+0x1d/0x50 [ 719.249473] do_syscall_64+0x33/0x40 [ 719.250448] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 719.251793] RIP: 0033:0x7ff9f8ea8b19 [ 719.252768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 719.257572] RSP: 002b:00007ff9f641e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 719.259544] RAX: ffffffffffffffda RBX: 00007ff9f8fbbf60 RCX: 00007ff9f8ea8b19 [ 719.261391] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 719.263221] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 719.265075] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 719.266926] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 19:25:46 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x200001ec, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:25:46 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:25:46 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r3, 0x400, 0x1) fcntl$setown(r3, 0x8, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x0, 0x2e98, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 19:25:46 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x23}, 0x4400, 0x0, 0x40000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0x1000002) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @dev}, {0x2, 0x0, @dev}, {0x2, 0x0, @broadcast}, 0x142}) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x7, 0x40, 0x81, 0x5, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xffffffbb, 0x4, @perf_bp={&(0x7f00000000c0), 0x3}, 0x80, 0x8, 0x7, 0x9, 0x3, 0x6f, 0x3322, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x9, r0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000540)={{{@in=@private, @in=@private}}, {{@in=@loopback}, 0x0, @in6=@private1}}, &(0x7f00000001c0)=0xe8) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./file1\x00', 0xe0280, 0x0) dup2(r5, r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000006c0)={'wlan0\x00'}) fstat(0xffffffffffffffff, 0x0) sendfile(r1, r3, 0x0, 0x100000001) execveat(r1, &(0x7f0000000200)='./file1\x00', &(0x7f0000000500)=[&(0x7f0000000240)='\x00', &(0x7f00000002c0)='%-\x00', &(0x7f0000000300)=':\\)+*\x00', &(0x7f0000000340)='*,^\x00', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='{]\\\x00', &(0x7f0000000400)='^#(\x00', &(0x7f0000000440)='\x00'], &(0x7f0000000680)=[&(0x7f0000000640)='\x00'], 0x400) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x10, r0, 0x0) 19:25:46 executing program 4: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 28) 19:25:46 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) lseek(0xffffffffffffffff, 0x2, 0x4) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x3b, 0x4, 0xff, 0x5, 0x0, 0x0, 0x8645, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x412b, 0x2, @perf_bp={&(0x7f0000000100), 0xe}, 0x4800, 0x80000001, 0x7fffffff, 0x6, 0x8, 0x20, 0x81, 0x0, 0x5, 0x0, 0x3}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0xa) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x7, @loopback}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) readv(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f0000000440)=""/130, 0x82}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000500)=""/110, 0x6e}, {&(0x7f0000000580)=""/181, 0xb5}, {&(0x7f0000000640)=""/67, 0x43}, {&(0x7f00000006c0)=""/99, 0x63}], 0x7) r3 = open(&(0x7f0000000380)='./file0\x00', 0x5db9c3, 0x0) r4 = io_uring_setup(0x11, &(0x7f0000000240)={0x0, 0x6c90, 0x0, 0x3, 0x24a, 0x0, r3}) syz_io_uring_setup(0x5831, &(0x7f00000003c0)={0x0, 0x65ac, 0x8, 0x0, 0x39, 0x0, r4}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000080)) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) sendmsg$TIPC_CMD_SET_LINK_TOL(r3, 0x0, 0x80) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) read(0xffffffffffffffff, &(0x7f0000000140)=""/123, 0x7b) fadvise64(0xffffffffffffffff, 0xffffffff, 0xffffffff, 0x0) lseek(0xffffffffffffffff, 0x2, 0x4) dup3(r0, 0xffffffffffffffff, 0x0) 19:25:46 executing program 0: sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00f1af", @ANYRES16=0x0, @ANYBLOB="04002bbd5000fddbdf250d000000de0089d6e78709d4996c1dc1ed112235b3eb9cde5745487bcd8dccdfe6994b6bbf063f1cfbe15b0ff51e909c9239e64e04a6df65ba957735eace409a0fd2cbe58126d0b9e13569e6574272c88d187e0888bdbe25785f65431e57146fe37d13216ae20138269c9c71aff8ff3b85a87cb21422af81cfb38a387933cfe82d5a16ade841b75f069a8ce797170fa3709a823ab02a5595f10db4f8d09afa55dbcd47e58ab614199cf0d65c055cf5702bd17f26f4468a8b372fbd06f1b5fdb7c5d8c43e2e50028a2c09cfc598a75def4a8a55418ca1aebe7a3d6f3af19122dbe3ef3b88f90b1145c3d01c"], 0x1c}, 0x1, 0x0, 0x0, 0x4008094}, 0x4004) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffffff, 0x0, 0x298b14a50a3bec7f, 0x100) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x12, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"/451], 0x1c}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$cgroup_devices(r0, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) dup(r3) setsockopt$packet_fanout(r2, 0x107, 0x9, &(0x7f0000000040), 0x4) readv(r1, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r4, 0xffffffffffffffff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f00000003c0)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000140)={0x0, @adiantum}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/meminfo\x00', 0x0, 0x0) r5 = epoll_create(0x8000) r6 = socket$inet_udp(0x2, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000040)) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000180)={0x2}, 0x4) 19:25:46 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x2056, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000000), 0x0) fcntl$getown(r0, 0x9) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r1, 0xffffffffffffffff, 0x0, 0x7ffffff9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:25:46 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xdffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) lseek(0xffffffffffffffff, 0x2, 0x4) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x3b, 0x4, 0xff, 0x5, 0x0, 0x0, 0x8645, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x412b, 0x2, @perf_bp={&(0x7f0000000100), 0xe}, 0x4800, 0x80000001, 0x7fffffff, 0x6, 0x8, 0x20, 0x81, 0x0, 0x5, 0x0, 0x3}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0xa) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x7, @loopback}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) readv(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f0000000440)=""/130, 0x82}, {&(0x7f00000001c0)=""/41, 0x29}, {&(0x7f00000002c0)=""/64, 0x40}, {&(0x7f0000000500)=""/110, 0x6e}, {&(0x7f0000000580)=""/181, 0xb5}, {&(0x7f0000000640)=""/67, 0x43}, {&(0x7f00000006c0)=""/99, 0x63}], 0x7) r3 = open(&(0x7f0000000380)='./file0\x00', 0x5db9c3, 0x0) r4 = io_uring_setup(0x11, &(0x7f0000000240)={0x0, 0x6c90, 0x0, 0x3, 0x24a, 0x0, r3}) syz_io_uring_setup(0x5831, &(0x7f00000003c0)={0x0, 0x65ac, 0x8, 0x0, 0x39, 0x0, r4}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000), &(0x7f0000000080)) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1) sendmsg$TIPC_CMD_SET_LINK_TOL(r3, 0x0, 0x80) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) read(0xffffffffffffffff, &(0x7f0000000140)=""/123, 0x7b) fadvise64(0xffffffffffffffff, 0xffffffff, 0xffffffff, 0x0) lseek(0xffffffffffffffff, 0x2, 0x4) dup3(r0, 0xffffffffffffffff, 0x0) 19:25:47 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:25:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x7ffff000, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:25:47 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x2056, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000000), 0x0) fcntl$getown(r0, 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = dup2(0xffffffffffffffff, r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:25:47 executing program 4: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 29) 19:25:47 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0xfffffdef, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) [ 719.541037] FAULT_INJECTION: forcing a failure. [ 719.541037] name failslab, interval 1, probability 0, space 0, times 0 [ 719.543169] CPU: 1 PID: 6506 Comm: syz-executor.4 Not tainted 5.10.245 #1 [ 719.544348] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 719.545759] Call Trace: [ 719.546212] dump_stack+0x107/0x167 [ 719.546838] should_fail.cold+0x5/0xa [ 719.547493] ? io_uring_alloc_task_context+0x4a3/0x6a0 [ 719.548404] should_failslab+0x5/0x20 [ 719.549060] kmem_cache_alloc_trace+0x55/0x320 [ 719.549851] io_uring_alloc_task_context+0x4a3/0x6a0 [ 719.550717] ? io_import_iovec+0x1120/0x1120 [ 719.551488] io_uring_setup+0x1dd1/0x2980 [ 719.552220] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 719.553080] ? wait_for_completion_io+0x270/0x270 [ 719.553921] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 19:25:47 executing program 3: r0 = syz_mount_image$msdos(0x0, 0x0, 0x0, 0x1, &(0x7f00000054c0)=[{&(0x7f00000053c0)=')', 0x1, 0x7}], 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000841d71172e773df3d71", @ANYRES32=0xffffffffffffffff, @ANYBLOB='G\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r2 = accept4(r1, &(0x7f0000000a00)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f0000000a80)=0x80, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000ac0)={r0, 0xffff, 0x0, 0x8ba6}) ioctl$FAT_IOCTL_GET_VOLUME_ID(r3, 0x80047213, &(0x7f0000000b00)) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x4) preadv(r4, &(0x7f0000000600)=[{&(0x7f0000000200)=""/12, 0xc}, {&(0x7f0000000240)=""/115, 0x73}, {&(0x7f00000002c0)=""/106, 0x6a}, {&(0x7f0000000340)=""/205, 0xcd}, {&(0x7f0000000440)=""/10, 0xa}, {&(0x7f0000000480)=""/215, 0xd7}, {&(0x7f0000000580)=""/86, 0x56}], 0x7, 0x0, 0x7c) syz_io_uring_setup(0x31b4, &(0x7f0000000040)={0x0, 0x7fd6, 0x4, 0x3, 0x71, 0x0, r4}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, 0xffffffffffffff9c, &(0x7f0000000140)={0x402540, 0x104, 0x4}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x77fbf}, 0x1) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x400000, 0x0) write$binfmt_aout(r6, &(0x7f00000006c0)={{0x10b, 0xdb, 0x4, 0x28a, 0x31f, 0x862, 0x1fe, 0xfff}, "5003536b84840f4c9fb0d64022deb54136c28f596fbeb254604b22c4f4dbbad749aaff95b739c2ffb8ce48eacdc5ffc767c9638b1a1a4cbd15edb4c9f928ba7de0cf67c9e8a9f792f0240048208d9a4c778463a5d858ee0e449e287c24b4088edbd1ea34b0a2be2ab5dd6b1c5e3b5a7762f72c21ab2fa6e4c86260599e6f714b99d2b7a5ec25d478c2fbbb80f33d26228298a1ecbe04cd666ca2b851a686375d55f4854744bc26aa8358e5aa51c42b4086", ['\x00', '\x00']}, 0x2d1) [ 719.554806] ? syscall_enter_from_user_mode+0x1d/0x50 [ 719.555931] do_syscall_64+0x33/0x40 [ 719.556562] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 719.557429] RIP: 0033:0x7ff9f8ea8b19 [ 719.558057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 719.561163] RSP: 002b:00007ff9f641e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 719.562444] RAX: ffffffffffffffda RBX: 00007ff9f8fbbf60 RCX: 00007ff9f8ea8b19 [ 719.563650] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 719.564856] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 719.566073] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 719.567274] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 19:26:00 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r3, 0x400, 0x1) fcntl$setown(r3, 0x8, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x0, 0x2e98, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x43}) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 19:26:00 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:26:00 executing program 6: r0 = socket$netlink(0x10, 0x3, 0xf) creat(&(0x7f0000000040)='./file0\x00', 0xd5) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000140)=0x10001b, 0xfdbc) 19:26:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x2, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:26:00 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x0) lseek(r1, 0x0, 0x3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x13, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000180)='/dev/sr0\x00', 0x5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r2, 0x0) r3 = openat(0xffffffffffffffff, 0x0, 0x36400, 0xe375d1901a7fcc3b) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000200)='&D\\\x00', 0x0, 0xffffffffffffffff) syz_io_uring_setup(0x8003a75, &(0x7f0000000080)={0x0, 0xa91f, 0x10, 0x0, 0x3be}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000002c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, 0x0, 0x0) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2af4, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r6}}, 0x7fe) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000280)=ANY=[@ANYBLOB="47ca59e8157bf40201977a11f7442f4c", @ANYRES32, @ANYBLOB="02e700bedfe664ea7500000000000e2f66696c653100"/32]) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) statx(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x2000, 0x4a57b311cfbbb13a, &(0x7f0000000300)) readv(0xffffffffffffffff, &(0x7f0000001600), 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) 19:26:00 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x2056, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000000), 0x0) fcntl$getown(r0, 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = dup2(0xffffffffffffffff, r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:26:00 executing program 4: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 30) 19:26:00 executing program 3: ioctl$CDROM_NEXT_WRITABLE(0xffffffffffffffff, 0x5394, &(0x7f0000000000)) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_bp={&(0x7f00000002c0), 0xf}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="00000000040000002e2f66696c84d0653000"]) ioctl$CDROMSTOP(r1, 0x5307) r2 = perf_event_open(&(0x7f0000001d80)={0x6, 0x80, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xffffffff81000000}, 0x0, 0x0, 0x0, 0x0, 0xd20c, 0x0, 0x0, 0x0, 0x2c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f00000001c0)=0x9d, 0x10001) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x10001}, 0x10000, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vcan0\x00'}) sendto$packet(r3, &(0x7f0000000400)="dfd3a33d534c4b312dcfd1f8a4fbb9f5b9f58e5b3da78ffe473d81c628da8875cb497238fd2115de3a8cef33f137a31a612f05af4ef6eae275482013b42a9be7acbd83682b22c9fcb2b9a1eaeb129af7cfc76d8cfdcd64ace899230ca0c8505e54f8374ba16a91447139099738e78d12b9899a2c289d26f0b2e49e8fd0febf3a5eac8cb0c5e2b985629cb312ac39a63117ad4820a944827952cb1f4b374485734cf6", 0xa2, 0x80, &(0x7f0000000180)={0x11, 0x4, 0x0, 0x1, 0x81}, 0x14) write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000340)={0x7, 0x47, 0x2}, 0x7) sendmmsg$inet(r4, &(0x7f0000002040)=[{{&(0x7f0000000380)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600), 0x0, &(0x7f0000000280)=ANY=[@ANYRESDEC=r0, @ANYRES64=r6], 0xfffffffffffffeac}}], 0x1, 0x4674498f80f6ad5b) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) [ 733.006326] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=6520 comm=syz-executor.1 19:26:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x3, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) [ 733.045170] FAULT_INJECTION: forcing a failure. [ 733.045170] name failslab, interval 1, probability 0, space 0, times 0 [ 733.046727] CPU: 0 PID: 6532 Comm: syz-executor.4 Not tainted 5.10.245 #1 [ 733.047649] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 733.048790] Call Trace: [ 733.049147] dump_stack+0x107/0x167 [ 733.049637] should_fail.cold+0x5/0xa [ 733.050151] ? create_object.isra.0+0x3a/0xa30 [ 733.050765] should_failslab+0x5/0x20 [ 733.051278] kmem_cache_alloc+0x5b/0x310 [ 733.051828] create_object.isra.0+0x3a/0xa30 [ 733.052430] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 733.053116] kmem_cache_alloc_trace+0x151/0x320 [ 733.053749] io_uring_alloc_task_context+0x4a3/0x6a0 [ 733.054430] ? io_import_iovec+0x1120/0x1120 [ 733.055031] io_uring_setup+0x1dd1/0x2980 [ 733.055596] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 733.056286] ? wait_for_completion_io+0x270/0x270 [ 733.056953] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 733.057660] ? syscall_enter_from_user_mode+0x1d/0x50 [ 733.058357] do_syscall_64+0x33/0x40 [ 733.058856] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 733.059542] RIP: 0033:0x7ff9f8ea8b19 [ 733.060054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 733.062528] RSP: 002b:00007ff9f641e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 733.063543] RAX: ffffffffffffffda RBX: 00007ff9f8fbbf60 RCX: 00007ff9f8ea8b19 [ 733.064510] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 733.065465] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 733.066423] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 733.067375] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 19:26:00 executing program 6: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x640c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x80000000, 0x0, 0x0, 0x1}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x8) syz_io_uring_setup(0x3a75, &(0x7f0000000080)={0x0, 0x400000, 0x0, 0x2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240), &(0x7f0000000100)) syz_io_uring_setup(0x47e7, &(0x7f00000002c0), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000140)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)) r0 = syz_io_uring_setup(0x782e, &(0x7f0000000580), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x400000e, 0x30, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index=0x5}, 0x8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffffff9) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f00000003c0)={0x8402, 0x0, 0x15}, 0x18) dup2(0xffffffffffffffff, 0xffffffffffffffff) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x20010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x2a7b, &(0x7f0000000340)={0x0, 0x0, 0x4}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000140)) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB="61000100", @ANYRES16=0x0, @ANYBLOB="0009000000008000000044003f006f227808", @ANYRES32=0x0, @ANYBLOB="0c009900ff0f00006e0000000400bf0008000d00ffffffff0400cc00"], 0x38}, 0x1, 0x0, 0x0, 0x8010}, 0x240000d0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0x2, 0x1, &(0x7f0000000100)="b9bbb734ec3e0929789a3961a5b9680cd29efec6900cc290bb23b3fcff7d414f2931bb1c90ae40ce334aafb19e494aff84030f5e8849b01598eda6eecb2e661fd9ba3de4b6c8b6131fa48a94503b44258278606ee4f5e1b0c22fe722fc684181a5921c013d67acabe26a09d312cf88bd17c88f3494f58da6b5", 0x7, 0x0, 0x0, {0x1}}, 0x2) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58af, 0x0, 0x2, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x4, 0x2) 19:26:00 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r3, 0x400, 0x1) fcntl$setown(r3, 0x8, 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x0, 0x2e98, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x43}) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 19:26:00 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) [ 733.095239] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=6537 comm=syz-executor.1 19:26:00 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:26:00 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x2056, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000000), 0x0) fcntl$getown(r0, 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = dup2(0xffffffffffffffff, r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:26:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x4, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:26:00 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x2056, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000000), 0x0) fcntl$getown(r0, 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = dup2(0xffffffffffffffff, r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:26:00 executing program 0: r0 = fsopen(&(0x7f00000000c0)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000000)='ro\x00', 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x9010}], 0x1, &(0x7f0000000080)={0x77359400}, &(0x7f0000000140)={[0xf0]}, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x105142, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) ftruncate(r1, 0xffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp\x00') preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000200)={0x3, 0xc8, "df1f240aa6d76a256f6939908d22746cc12079d379e60801f5e00c6666074dc3411828d543c7c15c4e6654d2a6872f1e042e6d6a89a63959ae4c3fdfe50ffce173d5566ccc80a24c895f6805438ce6860b1243cf4eccd73aed086809d99945f7504d1cde882e3cdb974e340b3f8386475cfca7d4fb1e1b51028a5ed5b3d1fabd7b1646e490385d49873f99d669489a2537fcd928a99da383f0ddbc83ed3179666a69975e03bd1e934d5b74e7088f5a5146d85370c444fdb3ccca51297be75c354954b52f41076d92"}) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x100000001) 19:26:00 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) [ 733.208410] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=6553 comm=syz-executor.1 19:26:00 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r2, r1, 0x0, 0x7ffffff9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:26:00 executing program 3: syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f00000000c0)='.\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01806f3d0000000000000074cb2a"]) [ 733.296395] tmpfs: Unknown parameter '€o' 19:26:00 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x5, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) [ 733.315731] tmpfs: Unknown parameter '€o' [ 733.369887] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5 sclass=netlink_route_socket pid=6568 comm=syz-executor.1 19:26:14 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r3, 0x400, 0x1) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x43}) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 19:26:14 executing program 0: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) io_getevents(0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = dup2(r3, r2) lseek(r4, 0x7, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000180)=0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r5, r4, 0x0, 0x7ffffff9) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(r6, 0x6, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x43}) io_submit(0x0, 0x6, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x885, r0, &(0x7f0000000780)="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", 0x1000, 0x8, 0x0, 0x0, r1}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0xce3, r0, &(0x7f00000001c0)="5e0d7f18df34d51274bd85cb5cc7ae9fe454dc75f51b590cee4dcf3b49777ac6b3848b958cabd4592e8f49a1b98acb190e2a24f7ee5177df4010667406a4e1f95bb4c8dac165055b0fc75d0d9c1eeb8cf5e61190fb520d2f5e7e71ba79ba573e309523d4ffddd31ae87c3f8df0143dc0a1b93f395f0cae005bc03b0e887793e936ec7d5abf40d5e7560be21143dd7c9a0011580a5545dab5de5db2a5ed9a3ce4ab8b90f370f6f6d1261b587a06de42c8e75d56ab375ff257dcc63faf9832713677f95b205d3f289032e01b3612e71210cd6eb7", 0xd3, 0x7, 0x0, 0x1}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2, 0x1, r4, &(0x7f0000000300)="ec104c8f561e5710393c52d1c1b022bfacfe6fdd4c1403ad748c179686006107f83542312b7aa414ae6e978788152fbc8dabffcbd506a04c406c21d68d07c24e6bb58135945d2337939a448f88345aa44df5f51e27d29a2f99c1afe185484c755d26c797e4d73a4243b30ddaefab6b8af90597783150131114", 0x79, 0xfffffffffffffffe, 0x0, 0x2}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x2, 0x7, r0, &(0x7f00000003c0)="4abfdd81ba97a7011d7eda9750baebf1969ecb7ab2c007717883bb6131c0b3fb7cb75006435f3b56eb96f6f7ab678ced54952f037de36ac584e40554944f98ce279d8f2fb8713da6e057f6461c5fd8413da838a35f48e379a8a6b124fea6787cca35a96a7291a7bc0023dcfb888c9ce9045585883450d70b3db068fcb0a6f814df7a944b6eb0202d80af5faa458ea3c58159361344800c01a058d4d74c462f68457b440d61ecae093f59eaf7f50172b65fe5a81bd1619709739738e81f", 0xbd, 0x3, 0x0, 0x0, r6}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x5, 0x0, r0, &(0x7f00000004c0)="4d6f03b27d9ff6529bf62febdd412a256a17283e585de9bba986db64969f56ca1d8c", 0x22, 0x4b, 0x0, 0x3, r0}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x5, 0x80, r0, &(0x7f0000000540)="eaf9359a63260ebdf0e56108244740506e993d071091910d97f5ecdb9db3cd503b2b101fe522b6ee2f3fb60f8dfe33020c35d0303c2201d4926780282743da2f9d9457ebcc05ad90900d5e70771667be47981c04ea2125cc03daf115839af76f5ea0a7752e2c97ae", 0x68, 0x67}]) syz_mount_image$iso9660(&(0x7f0000000680), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)) open(&(0x7f0000000040)='./file0\x00', 0x482200, 0x99) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r8, r7) openat(r7, &(0x7f00000000c0)='./file0\x00', 0x101480, 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) 19:26:14 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000040), 0x4) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000dc0)=@ethtool_sset_info={0x19}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r4, r3) sendmmsg$inet6(r4, &(0x7f00000012c0)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x8, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80}, 0x1c, &(0x7f0000000540)=[{&(0x7f00000000c0)="003a87d867b5fff1a6be13eba9d1dc42cee2ed051d0c7697ad18ff2e7a51144a1d8ffea125baacc4f08e6ef3eb8869dcd5b186b63913f53f1a736862edaa783565f832bd4ea6ddf0a1c5ad6facfdb3daa509745d967a45b9319f85ecab3b0951eb42ca421bb63683931547268e0ca2e68262707ca02a22c9430c75ef102498ed161a21f441577b1e78f981abbac00e813ce04fc05707fe5a57e40af539a5681417fb0537e0f870aadc04a384cdcd5d4edeaedb64ca4a02f93b9dc3d8c5484889e684e603d13270c098898b12949555750728f41851f179e7466538c2e6e3d6e6a4c3e27d1aff170103a9", 0xea}, {&(0x7f0000000240)="a346ddfedb4b47c9acdeb100e9c8a9b152191a9f9a981e7a118c1358d3cc9de64f800bc7eac8ef936823f4830c6c2cc8a1fb2d1d18777f8873e1809d3c13eb16c38069921c16bb98a10d76d83c4349f6265221906d9c81cc0c944ae6c84e753d85ff5b8c0263debb29c0f45533441e1c5fc20e158c8108e1402a14c102d4fd3b76c1548d102bc963409135711b68e29a126c7135ca4ab15b8ff28ea80caea056d2d56c427f90f95056e03146b165ae1c3eaad149db60ba09537ffc31e8f0efc7c0e9b2e96b35564d19341ecdcecc9bcf9ad4da143655d678c5b5d6302c4af14ee24d16cdf5a8af55", 0xe8}, {&(0x7f0000000340)="7e53fed3df19a8f1baf90fc84849b46c3dd0e7a8037bca53702805e30cd13f1ba82f2aaa6c94c2bc9b991e88819c4213577e41ad31ca7848c9c990cd53dce114a2351cfd4eb57191428a119414bcdc3c1be353156adf09a71e05b04d6388520cf141dbba7fa8af9f6a55eb9c28dc6596b7", 0x71}, {&(0x7f00000001c0)="f6a87d93b8c727169b28b34aca24b23f3bc770ff9614dbcb94bb", 0x1a}, {&(0x7f00000003c0)="691eedeff9a290f002929f1458d7d72cc0314f4e4fc0dee48bb251830f0581c3e00e546b03ee4123bb8084c450cf0d01116e9b4ace073a64753ddfa02e4682f6f42111abd0184fdbbd39f6344f0db09bb7d49b2ad112d5f4b4ae510c839dc73415f55aa87180573d85b2f6009a8ef8e3a61b5b15e7cf6431efeae906d18c0e6afffeb993ed9ae4d10ab966cf46a30b5147c5214d6b90e24f7560e5db7d7b1c204cb3f778cae3a06a77fee9d383957eb11b57", 0xb2}, {&(0x7f0000000480)="535ecdb0cc6100c49d7a9d2e47b092a32b79ba36a363868ea323a154a53af941c6ad6a0182cb4d7b8955b5e6f1c35ec585ad7bb69cb449068e657f7ff5a56c0fc21d2d51e6a227283c0b1e97c1998ebcd337e95e036e34b8af9e731f95e78eeb26c0a968811b13f5d8741440ac4812cfb853fbfa474af29185dd", 0x7a}, {&(0x7f0000000500)="057abe257fafbf3d4d91599bb5d54f87ac214a2a933dc854f90861229bb53a123d716edf2ddc5cc61b37", 0x2a}], 0x7, &(0x7f00000005c0)=[@rthdr_2292={{0x38, 0x29, 0x39, {0x3b, 0x4, 0x0, 0x2, 0x0, [@ipv4={'\x00', '\xff\xff', @broadcast}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}, @hopopts={{0x68, 0x29, 0x36, {0x32, 0x9, '\x00', [@hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x28, {0x3, 0x8, 0x0, 0x6, [0x6c82, 0x3, 0x3ff, 0x9]}}, @calipso={0x7, 0x8, {0x1, 0x0, 0x7f, 0x3}}, @jumbo={0xc2, 0x4, 0x1}]}}}], 0xa0}}, {{&(0x7f0000000680)={0xa, 0x4e24, 0xfffffba3, @local, 0xc15}, 0x1c, &(0x7f0000000980)=[{&(0x7f00000006c0)="d66fe48f9c8c963285df905e58208121479a3e1e518b1ae6e4c12d2670e4588ce6bd1e3a7e093cde413b94104e004d15c2fbf3182b11", 0x36}, {&(0x7f0000000700)="c734ffc7989245c559b6e5a36501cab6effa2bf0c16e22a8e6976f2757273d29b22120aef851dd47d7d6d87644a366da888fc373914ac0a71994e8b423c8d404d428023614ffcf306ffcda730e36908fe4c0045fd3cb0a2b98710121981f7deff2f163935b560671a20cfa5f55012a49742d91403425b88820a18968866af8c7e1e1", 0x82}, {&(0x7f00000007c0)="8e9aa2f928f912c7ffdf8dc9dd625ff30d", 0x11}, {&(0x7f0000000800)="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", 0xfb}, {&(0x7f0000000900)="f768145f577695b35042d9ef4e8593f333ab0d6a77ebabba6e566fb4a6d7c7c56bb3983e423a7487cfb237840ce1cb8c85f979a04df62f666fc9e84ed3d349e098b4f0ea1d75263a8d60468c8232c0f36a77e454d0a96094a267bc6855ce3498ade6bb319afdadb4c60f", 0x6a}], 0x5}}, {{&(0x7f0000000a00)={0xa, 0x4e23, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000c80)=[{&(0x7f0000000a40)="d0b7f1d5c31c6c2ad8c190f75f409641060c7a7296b6841763ec6b", 0x1b}, {&(0x7f0000000a80)="68eb45c87288fdfb3c4d67f7073d9191fd92ac701ecd5b8b2f12c3b3da952f4402289a824f80a29a02ee972d74d2163a3acb671d94423bcead9ce10abbb9e59e90a639a663739621dd9c8765e2f761e55f099493df252a6f7c14c4cecdb25f26f45bdd5567c79b6fdaf342876e8e062598104739c21990be8ca5ac2f0296699bac5fba020ffdde396777aef8934364bdfbfd4377b8329953ad2683e226b7eff6", 0xa0}, {&(0x7f0000000b40)="d460616debd9c0ae02b11d54b3046ac2a5808f45eeef415117f1a77bbf74e9f8b07a", 0x22}, {&(0x7f0000000b80)="216434cd6e1c3b197a1d316f6910f4f5d7fc02c94b5bd4521ecda3c31b83af5019021a835bf9edd9e1cb66e4fd96ba6f52c2ebe5d839adde796d4a30483b5e2efb072905d3765b9edc300ee68cb6ae39ae5c6c66138b189e1ae9ba60eb98d5a8f18e8b6a820e2c4e6c0356db10957de9e226f1f85a3089c7e2ed245792032c1414487c57bf7760a2bde9346a1778f2c44f569b881732ba5e81812713d9a959491b04dd653290ee53c1b012cab33c6fd321", 0xb1}, {&(0x7f0000000c40)="d3f2d9d661c5e21b51e8e095316f093ed67874", 0x13}], 0x5}}, {{&(0x7f0000000d00)={0xa, 0x4e22, 0x2, @mcast1, 0x800}, 0x1c, &(0x7f0000001240)=[{&(0x7f0000000d40)="c6d06e6c49d722d166a5eba09fcc6454ee20057947d0a5f6de59102b1382789afcacc8039d62e915e49e9e8842bf1b65", 0x30}, {&(0x7f0000000e00)="07e2a30bccb2a23e50359c79ef509c50bf7ac1441c061c76966563470509ec37f881347a392858e817be8a24e73717bb8f39cd504535d5a0fe7cd30b15b738c402812b22aebde27618724e4ad6844b229a4add8facc99f1da94b85a7f342993e0b32364d6a3cbb47b1d3b1e913bbe781efba702009e9", 0x76}, {&(0x7f0000000e80)="29b9b02c7835e8e75b18c98d02b2a7f214742f12b74ea2c6a8c3b7f02df245e13535895bdfb8b7fb62d5f07b5b33614a56d671c1b99377e5ea2c13a2c8e2765d8db78d321279c4f8bb160495ef4a2e50510ce0406fbcf7fa548579e722ae2b440cf0122ef5959e21cc6fcc7eaebc0db23b0ea75797768f947f6d69b53e171c2abbd10f1e462bae5f6c390f48d0e6ae9b667b269314b236b96b9f9e080f295b71ea8849a07232c208af7109953fda7cd804513d08b30c9e554d3538e4fcced8775cac7966384e08630a", 0xc9}, {&(0x7f0000000d80)="3ee64f9aae2df5704984a6e03e9ba540df2c4c860c682646d94d967e6e9dfb5d4f8dbba0589c9faa0dc5f437f80b1819d121b8de6b4203acfea1", 0x3a}, {&(0x7f0000000f80)="98ea8d541941da2857b5b8557d095e42faf4f99ce83f5ea04e238b7f1d612edf46dea1ab8eddddb7dd2617e6493ac628b141f4d13643f6c83fb998b2b1eea76eb10e00c620757a8aa1cbd6ae6a393c585ed4eeca5961a642155b37dbf8d429b5b306fb0e3688d49e550c170c5ac82e0f1f317c91796f49220e300c5aaa4a816d56ce2e985969040a51027e27850226d35beeb413ada2989f0a647da817", 0x9d}, {&(0x7f0000001040)="4a2eba532e0bdc0705b81070e19f0ce0d142703b2a7b1ca569a52b28b985e526f22c173e0cf9ebfad54675130051a6c5f40e26d9dd6f9159ca93af13c08b8884496757e21e7d8123865777e2290d1140b3b9017ac6242003a0a1a99745be766c72444071b9387668902a3bc3ba30f987eede2062f417bdad336d6cf019808a8a64a8b1dc1300b1adeb24a7d7a2b8ac0b6ef3a740c83729635ed168b125546cfd751c7eaf19e716a7b153758033a1a8178ebbf8f965ea9e333bce430b9752955521ecd6a0724c761b712713857ebf7ded6ca434ed", 0xd4}, {&(0x7f0000001140)="0a27b1ebd0c4562a04ff9a8caff2c4c52094d0e99fd18f34ad80f897100fb7f6bb978315f7ec7dbe3dd8f0defe41fdf3a5804bd43aa012fa5b4d3151697f7217cd1933ada50f026b7bac50f12d48dcb62b4cc03ca1b74d05528fa86a2e5a37b5bd09f38da1c25fbedfd53cdf0d8779d60d805ea762497af728225176813d8f680a6c26caa9a532bc824a48f9dcf79f287141a855b5359b0caca457400e49319523e2f7628acc1d3bf2ca291c06b28fc6eba3a3b6f097fabe2630a488de", 0xbd}, {&(0x7f0000001200)="19d332fdf46e20274907cc4334", 0xd}], 0x8}}], 0x4, 0x4000) syncfs(0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000240)=ANY=[]}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00), 0x0, 0x0) 19:26:14 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x2056, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000000), 0x0) fcntl$getown(r0, 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, 0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:26:14 executing program 4: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 31) 19:26:14 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r2, r1, 0x0, 0x7ffffff9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:26:14 executing program 3: r0 = semget$private(0x0, 0x4, 0x100) semop(r0, &(0x7f0000000000)=[{0x2, 0x6, 0x1800}], 0x1) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) semop(0x0, &(0x7f0000000040)=[{0x0, 0x4, 0x82b4d8da1ae7c66c}], 0x1) r2 = semget$private(0x0, 0x4000, 0x0) semctl$GETALL(r0, 0x0, 0xd, 0x0) semctl$SEM_STAT_ANY(r2, 0x2, 0x14, &(0x7f00000010c0)=""/79) semop(0x0, &(0x7f00000000c0)=[{0x3, 0x0, 0x1800}, {}, {0x2, 0x8, 0x800}, {0x4}], 0x4) semctl$SEM_INFO(0x0, 0x5, 0x13, &(0x7f0000000080)=""/101) r3 = semget(0x2, 0x4, 0x20b) semop(r3, &(0x7f0000000340)=[{0x0, 0x4, 0x800}, {0x2, 0x57, 0x1000}, {0x1, 0x4, 0x1800}, {0x1, 0x80, 0x800}, {0x1, 0x6, 0x1000}, {0x1}], 0x6) semget(0x0, 0x0, 0x40) semtimedop(r3, &(0x7f0000000400)=[{0x0, 0x4, 0x1000}], 0x1, &(0x7f00000003c0)) unshare(0x48020200) r4 = getpgid(0xffffffffffffffff) r5 = signalfd(r1, &(0x7f0000000200)={[0x847]}, 0x8) perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0x0, 0x0, 0x1, 0x1f, 0x0, 0x8, 0x21080, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xfffffffffffff792, 0x4}, 0xd4c7864e238dcc6b, 0x7, 0x8164, 0x1, 0x7, 0x9, 0xb, 0x0, 0x9, 0x0, 0x5}, r4, 0xe, r5, 0xb) semctl$SEM_INFO(0x0, 0x5, 0x13, &(0x7f0000000080)=""/101) semtimedop(0x0, &(0x7f0000000000)=[{0x2, 0x4, 0x1000}, {0x3, 0x0, 0x1800}, {0x0, 0x8, 0x800}, {0x3, 0x1000}, {0xf, 0x5, 0x1000}, {0x3, 0x5c9, 0x1800}, {0x3, 0x1000}, {0x2, 0x72, 0x800}, {0x2, 0x1ff}], 0x9, &(0x7f0000000140)) semctl$IPC_RMID(0x0, 0x0, 0x0) 19:26:14 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x6, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:26:14 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$setlease(r3, 0x400, 0x1) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x43}) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 746.675774] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6 sclass=netlink_route_socket pid=6594 comm=syz-executor.1 [ 746.682432] FAULT_INJECTION: forcing a failure. [ 746.682432] name failslab, interval 1, probability 0, space 0, times 0 [ 746.684916] CPU: 1 PID: 6596 Comm: syz-executor.4 Not tainted 5.10.245 #1 [ 746.686354] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 746.688100] Call Trace: [ 746.688654] dump_stack+0x107/0x167 [ 746.689438] should_fail.cold+0x5/0xa [ 746.690244] ? io_wq_create+0xeb/0xc00 [ 746.691050] should_failslab+0x5/0x20 [ 746.691848] __kmalloc+0x72/0x390 [ 746.692595] io_wq_create+0xeb/0xc00 [ 746.693399] io_uring_alloc_task_context+0x1f1/0x6a0 [ 746.694491] ? io_import_iovec+0x1120/0x1120 [ 746.695412] ? io_apoll_task_func+0x2d0/0x2d0 [ 746.696352] ? __io_req_find_next+0x300/0x300 [ 746.697291] io_uring_setup+0x1dd1/0x2980 [ 746.698164] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 746.699218] ? wait_for_completion_io+0x270/0x270 [ 746.700254] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 746.701347] ? syscall_enter_from_user_mode+0x1d/0x50 [ 746.702422] do_syscall_64+0x33/0x40 [ 746.703203] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 746.704284] RIP: 0033:0x7ff9f8ea8b19 [ 746.705061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 746.708931] RSP: 002b:00007ff9f641e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 746.710520] RAX: ffffffffffffffda RBX: 00007ff9f8fbbf60 RCX: 00007ff9f8ea8b19 [ 746.712016] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 746.713512] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 746.715001] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 746.716498] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 19:26:29 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000003) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0) r2 = creat(&(0x7f0000000000)='./file2\x00', 0x0) syncfs(0xffffffffffffffff) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="3401000017000100fbcffd88633564d9ba6af0ef00ed000000000000fe8800000000000000000000000000010000000000000300000000000000000000000000000000007f000001000000000000000000000000fc000000000000000000000000000000000000009a1b9ea36b07ec25", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="200100000000000000000000000000027f0000010000000000000101000000000000e0b5df2600000000000300000000", @ANYRES32=0x0, @ANYRES32=0xee00], 0x134}}, 0x0) close(r2) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x13, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x5000)=nil, 0x5000, 0x4, 0xabe023afc5a1eeb9, r2, 0x10000000) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000080)={0x1}) io_uring_enter(0xffffffffffffffff, 0x4e09, 0x6baf, 0x1, &(0x7f0000000140)={[0x6]}, 0x8) sendmsg$SOCK_DESTROY(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="cc0100001500040001000000fedbdf25211a39000100c5d675e5afa79b5c642eafb2a0fa8a44a9a11961137d7b5379a395c945d049bb2f76d9478fd1fa7b358daa7e69d1e4e3d05e454f340000009c000100499bcde8b182a3631934ccfea2e507191520e579cdd14ba73db3737f806e797bdbf8cc64a2ee80727efdef3ef2a2a43d87581483d05a346e3314fc1d3a92d163e08aca1a5acd7c49d9eeafecc6c43be5228004eca654c499ca24e842205cfc5ae254062cc220d3d842c0851c0d9c2b02bc334b30940c358f8230846db25d9b2fa20ea73f210362a9c5a55587ca416498f2e9c7ea950d51d7dd000100d3cfc2983412b0911523b7a107b4e6bd46e5eefb2ebe51dc6beb8c0794b79c99201d4ade522b226c2277671421c36da77f674c232817b73841fb02d5e464cddef888e517b118abf98cc3c9c093d54368b9edee3eada73d809903316dfc82c8217f1b5a30edbc010d2ed10b9cde584520442e5dfc89997b9a86597c4528ee9a8c7a7dba19cbfddef7ae71000000001000080070301a6ac89d6e7e51506651d10c9a3e1d8a630412ea9c0d5bf5dcdf4b283bfd49bdb40d63562710937bf880fd1c71d86982b62a263523be874b835e3ba012910a06bf620dfdff0000000000"], 0x1cc}, 0x1, 0x0, 0x0, 0x80}, 0x20000020) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000800)={&(0x7f0000000640)=@alg, 0x80, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/160, 0xa0}], 0x1, &(0x7f00000007c0)=""/39, 0x27}, 0x0, 0x40, 0x0, {0x3}}, 0x80000003) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r6, 0x0, r1, 0x0, 0x200f5ef, 0x0) 19:26:29 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r2, r1, 0x0, 0x7ffffff9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:26:29 executing program 0: syz_open_dev$vcsa(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x70431, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0), 0x9}, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r0, 0x0, 0x0, 0xfffffffffffffff7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x121042, 0xa3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) bind(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = dup(r2) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000080)={@local, 0x2d}) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8916, &(0x7f0000000000)={@remote, 0x21}) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000180)={0x6}) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f00000000c0)=0x9, 0x4) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r1, r5, 0x0, 0x100000001) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/file0\x00', 0x0, 0x89) 19:26:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x7, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:26:29 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x43}) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 19:26:29 executing program 6: unshare(0x28020600) acct(&(0x7f0000000040)='./file0\x00') r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdc, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r2 = openat$cdrom(0xffffffffffffff9c, 0x0, 0x40800, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000280)={@link_local, @random="aeb481414a86", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x1c}, @local}, @dest_unreach={0x3, 0x10, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @broadcast}}}}}}, 0x0) fcntl$dupfd(r2, 0x0, 0xffffffffffffffff) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x53, 0xfffffffffffffffd, 0xac, 0x6, @buffer={0x0, 0x0, &(0x7f00000000c0)}, &(0x7f0000000240)="3dc19c9f7bc3371c512d41607b19e4ff97e6d960a09c39818f37608daed0ba44e13508800a6ebc647a4976c982699309977aa7fc4c5772fc89e24125aa8e46d61f0b638068136018e8eea6d9070b6dce2a97982a5960cded403ffc4f57a948187bcd40d7b09862512ddfba11b933adfcf940990e1906573201dfdaea31fc56cf08a24d8925ff9c026e914e5300b300ee42b693c4c87d2c7a040d6f2f0a89aaf3d31e66c489dac480f6912239", &(0x7f0000000480)=""/253, 0x3, 0x10030, 0xffffffffffffffff, &(0x7f0000000340)}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000100)='\x8b\x00') write$binfmt_script(0xffffffffffffffff, 0x0, 0x45) unshare(0x48020200) syz_emit_ethernet(0xc9, &(0x7f0000000140)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @val={@void, {0x8100, 0x5, 0x1, 0x2}}, {@ipv4={0x800, @generic={{0x18, 0x4, 0x2, 0x0, 0xb7, 0x68, 0x0, 0x3, 0x89, 0x0, @loopback, @loopback, {[@timestamp_addr={0x44, 0xc, 0xeb, 0x1, 0xe, [{@empty, 0xd71}]}, @ssrr={0x89, 0x17, 0x21, [@rand_addr=0x64010102, @multicast2, @private=0xa010102, @multicast2, @dev={0xac, 0x14, 0x14, 0x28}]}, @ssrr={0x89, 0x23, 0x4a, [@dev={0xac, 0x14, 0x14, 0x34}, @remote, @local, @multicast2, @private=0xa010101, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @ra={0x94, 0x4}]}}, "dda5a58c19966dc37d96ab49b1128dc5ba832358134491166cd00e3b1bc1ffd9bc964d08342c6a6a570a62db73e32f01f002fa7643e9917f52b7777c207e088d8887a65ba9bd93714a1427017f61da03094609591c6c30"}}}}, &(0x7f0000000000)={0x1, 0x3, [0x7b9, 0xf78, 0x7ad, 0x262]}) 19:26:29 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x2056, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000000), 0x0) fcntl$getown(r0, 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, 0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:26:29 executing program 4: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 32) [ 761.394487] FAULT_INJECTION: forcing a failure. [ 761.394487] name failslab, interval 1, probability 0, space 0, times 0 [ 761.396895] CPU: 1 PID: 6615 Comm: syz-executor.4 Not tainted 5.10.245 #1 [ 761.398320] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 761.400056] Call Trace: [ 761.400620] dump_stack+0x107/0x167 [ 761.401386] should_fail.cold+0x5/0xa [ 761.402182] ? create_object.isra.0+0x3a/0xa30 [ 761.403199] should_failslab+0x5/0x20 [ 761.403996] kmem_cache_alloc+0x5b/0x310 [ 761.404868] create_object.isra.0+0x3a/0xa30 [ 761.405789] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 761.406849] __kmalloc+0x16e/0x390 [ 761.407611] io_wq_create+0xeb/0xc00 [ 761.408418] io_uring_alloc_task_context+0x1f1/0x6a0 [ 761.409477] ? io_import_iovec+0x1120/0x1120 [ 761.410410] ? io_apoll_task_func+0x2d0/0x2d0 [ 761.411341] ? __io_req_find_next+0x300/0x300 [ 761.412302] io_uring_setup+0x1dd1/0x2980 [ 761.413171] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 761.414217] ? wait_for_completion_io+0x270/0x270 [ 761.415239] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 761.416354] ? syscall_enter_from_user_mode+0x1d/0x50 [ 761.417457] do_syscall_64+0x33/0x40 [ 761.418230] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 761.419302] RIP: 0033:0x7ff9f8ea8b19 [ 761.420077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 761.423954] RSP: 002b:00007ff9f641e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 761.425543] RAX: ffffffffffffffda RBX: 00007ff9f8fbbf60 RCX: 00007ff9f8ea8b19 [ 761.427032] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 761.428522] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 761.430022] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 761.431499] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 [ 761.443908] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 761.446142] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=6628 comm=syz-executor.1 19:26:29 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r2, r1, 0x0, 0x7ffffff9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:26:29 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x43}) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 761.468480] sd 0:0:0:0: [sg0] tag#0 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 761.470509] sd 0:0:0:0: [sg0] tag#0 CDB: Update Block [ 761.471658] sd 0:0:0:0: [sg0] tag#0 CDB[00]: 3d c1 9c 9f 7b c3 37 1c 51 2d 41 60 7b 19 e4 ff [ 761.473514] sd 0:0:0:0: [sg0] tag#0 CDB[10]: 97 e6 d9 60 a0 9c 39 81 8f 37 60 8d ae d0 ba 44 [ 761.475331] sd 0:0:0:0: [sg0] tag#0 CDB[20]: e1 35 08 80 0a 6e bc 64 7a 49 76 c9 82 69 93 09 [ 761.477163] sd 0:0:0:0: [sg0] tag#0 CDB[30]: 97 7a a7 fc 4c 57 72 fc 89 e2 41 25 aa 8e 46 d6 [ 761.478962] sd 0:0:0:0: [sg0] tag#0 CDB[40]: 1f 0b 63 80 68 13 60 18 e8 ee a6 d9 07 0b 6d ce [ 761.480799] sd 0:0:0:0: [sg0] tag#0 CDB[50]: 2a 97 98 2a 59 60 cd ed 40 3f fc 4f 57 a9 48 18 [ 761.482623] sd 0:0:0:0: [sg0] tag#0 CDB[60]: 7b cd 40 d7 b0 98 62 51 2d df ba 11 b9 33 ad fc [ 761.484443] sd 0:0:0:0: [sg0] tag#0 CDB[70]: f9 40 99 0e 19 06 57 32 01 df da ea 31 fc 56 cf [ 761.486242] sd 0:0:0:0: [sg0] tag#0 CDB[80]: 08 a2 4d 89 25 ff 9c 02 6e 91 4e 53 00 b3 00 ee [ 761.488051] sd 0:0:0:0: [sg0] tag#0 CDB[90]: 42 b6 93 c4 c8 7d 2c 7a 04 0d 6f 2f 0a 89 aa f3 [ 761.489866] sd 0:0:0:0: [sg0] tag#0 CDB[a0]: d3 1e 66 c4 89 da c4 80 f6 91 22 39 19:26:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x8, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) [ 761.547994] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 19:26:29 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x2056, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000000), 0x0) fcntl$getown(r0, 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, 0xffffffffffffffff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) [ 761.601068] sd 0:0:0:0: [sg0] tag#0 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s [ 761.603157] sd 0:0:0:0: [sg0] tag#0 CDB: Update Block [ 761.604316] sd 0:0:0:0: [sg0] tag#0 CDB[00]: 3d c1 9c 9f 7b c3 37 1c 51 2d 41 60 7b 19 e4 ff [ 761.606144] sd 0:0:0:0: [sg0] tag#0 CDB[10]: 97 e6 d9 60 a0 9c 39 81 8f 37 60 8d ae d0 ba 44 [ 761.607966] sd 0:0:0:0: [sg0] tag#0 CDB[20]: e1 35 08 80 0a 6e bc 64 7a 49 76 c9 82 69 93 09 [ 761.609802] sd 0:0:0:0: [sg0] tag#0 CDB[30]: 97 7a a7 fc 4c 57 72 fc 89 e2 41 25 aa 8e 46 d6 [ 761.611646] sd 0:0:0:0: [sg0] tag#0 CDB[40]: 1f 0b 63 80 68 13 60 18 e8 ee a6 d9 07 0b 6d ce [ 761.613486] sd 0:0:0:0: [sg0] tag#0 CDB[50]: 2a 97 98 2a 59 60 cd ed 40 3f fc 4f 57 a9 48 18 [ 761.615292] sd 0:0:0:0: [sg0] tag#0 CDB[60]: 7b cd 40 d7 b0 98 62 51 2d df ba 11 b9 33 ad fc [ 761.617125] sd 0:0:0:0: [sg0] tag#0 CDB[70]: f9 40 99 0e 19 06 57 32 01 df da ea 31 fc 56 cf [ 761.618956] sd 0:0:0:0: [sg0] tag#0 CDB[80]: 08 a2 4d 89 25 ff 9c 02 6e 91 4e 53 00 b3 00 ee [ 761.620785] sd 0:0:0:0: [sg0] tag#0 CDB[90]: 42 b6 93 c4 c8 7d 2c 7a 04 0d 6f 2f 0a 89 aa f3 [ 761.621971] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=6639 comm=syz-executor.1 [ 761.622585] sd 0:0:0:0: [sg0] tag#0 CDB[a0]: d3 1e 66 c4 89 da c4 80 f6 91 22 39 19:26:29 executing program 3: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x7, 0x80, 0x3, 0x0, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xfffffff8, 0x1, @perf_config_ext={0xffffffffffffffff, 0x9}, 0x4040, 0x1, 0x200000, 0xe33367d09eba8e26, 0x1ff, 0x1, 0x1, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0xc, r0, 0x3) 19:26:29 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r2, r1, 0x0, 0x7ffffff9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:26:29 executing program 4: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 33) 19:26:29 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x9, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:26:29 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x43}) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 761.739788] FAULT_INJECTION: forcing a failure. [ 761.739788] name failslab, interval 1, probability 0, space 0, times 0 [ 761.742238] CPU: 1 PID: 6647 Comm: syz-executor.4 Not tainted 5.10.245 #1 [ 761.743687] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 761.745432] Call Trace: [ 761.745990] dump_stack+0x107/0x167 [ 761.746761] should_fail.cold+0x5/0xa [ 761.747568] ? io_wq_create+0x6ef/0xc00 [ 761.748410] should_failslab+0x5/0x20 [ 761.749215] kmem_cache_alloc_node_trace+0x59/0x340 [ 761.750269] io_wq_create+0x6ef/0xc00 [ 761.751081] io_uring_alloc_task_context+0x1f1/0x6a0 [ 761.752155] ? io_import_iovec+0x1120/0x1120 [ 761.753090] ? io_apoll_task_func+0x2d0/0x2d0 [ 761.754034] ? __io_req_find_next+0x300/0x300 [ 761.754993] io_uring_setup+0x1dd1/0x2980 [ 761.755881] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 761.756959] ? wait_for_completion_io+0x270/0x270 [ 761.757999] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 761.759102] ? syscall_enter_from_user_mode+0x1d/0x50 [ 761.760195] do_syscall_64+0x33/0x40 [ 761.760991] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 761.761598] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9 sclass=netlink_route_socket pid=6653 comm=syz-executor.1 [ 761.762068] RIP: 0033:0x7ff9f8ea8b19 [ 761.762103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 761.768848] RSP: 002b:00007ff9f641e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 761.770451] RAX: ffffffffffffffda RBX: 00007ff9f8fbbf60 RCX: 00007ff9f8ea8b19 [ 761.771958] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 761.773466] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 761.774977] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 761.776503] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 19:26:42 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r2, r1, 0x0, 0x7ffffff9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:26:42 executing program 3: io_setup(0x2, &(0x7f0000000880)=0x0) io_pgetevents(r0, 0x1, 0x3, &(0x7f0000000000)=[{}, {}, {}], 0x0, 0x0) 19:26:42 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x2056, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000000), 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) [ 774.430531] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10 sclass=netlink_route_socket pid=6668 comm=syz-executor.1 19:26:42 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x43}) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 19:26:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0xa, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:26:42 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xd68cba6}, 0x400, 0x0, 0x0, 0x0, 0x7ffffffe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4004) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x0, 0x1, 0x40, 0x6, 0x0, 0x1, 0x20, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x10001, 0x0, @perf_config_ext={0x80, 0x5}, 0x4a00, 0x5, 0x7ff, 0x5, 0x400, 0x3, 0x8b2, 0x0, 0x5, 0x0, 0x5}, 0x0, 0x8, 0xffffffffffffffff, 0xa) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x2c, 0x6, 0x6, 0xa00, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000814}, 0x10) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x4042, 0x61) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x14, r1, 0x100, 0x70bd29, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x40000) 19:26:42 executing program 4: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 34) 19:26:42 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x93b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)=ANY=[]) r1 = socket$netlink(0x10, 0x3, 0x0) fallocate(r0, 0x30, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="24000000100000000000000000000096000009000500000000003b00000500008048000000786ba0e0411a717b99d7585ecebcea2b4b69b373cbc87f675e8d173dfdf78a0648f73082b44b42ece2ef4961bab2"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0) r3 = openat(r2, &(0x7f0000000400)='./file1\x00', 0x0, 0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xcc, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0xb8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x1ff, @private0, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e20, @remote}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xde}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x8084}, 0x100) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000640)={0x7c, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc2}]}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x20}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff7fff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x62}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffe1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xb9d}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100d}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24008804}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0xfffffffc, 0x2, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffff57e9, 0x4006) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000880)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x0) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdb5f25030000000500050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x240041c0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000a40)=""/4096, 0x1000}, {&(0x7f0000000500)=""/114, 0x72}], 0x3, 0x16, 0x4) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000800)={0x0, 0x0, "17f042"}) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) openat$cgroup_procs(r3, &(0x7f0000000200)='cgroup.threads\x00', 0x2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x300000a, 0x13, 0xffffffffffffffff, 0x36266000) [ 774.442266] FAULT_INJECTION: forcing a failure. [ 774.442266] name failslab, interval 1, probability 0, space 0, times 0 [ 774.443777] CPU: 0 PID: 6669 Comm: syz-executor.4 Not tainted 5.10.245 #1 [ 774.444663] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 774.445723] Call Trace: [ 774.446072] dump_stack+0x107/0x167 [ 774.446538] should_fail.cold+0x5/0xa [ 774.447022] ? create_object.isra.0+0x3a/0xa30 [ 774.447602] should_failslab+0x5/0x20 [ 774.448091] kmem_cache_alloc+0x5b/0x310 [ 774.448641] ? io_wq_create+0x114/0xc00 [ 774.449151] create_object.isra.0+0x3a/0xa30 [ 774.449735] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 774.450417] kmem_cache_alloc_node_trace+0x16d/0x340 [ 774.451088] io_wq_create+0x6ef/0xc00 [ 774.451592] io_uring_alloc_task_context+0x1f1/0x6a0 [ 774.452271] ? io_import_iovec+0x1120/0x1120 [ 774.452866] ? io_apoll_task_func+0x2d0/0x2d0 [ 774.453453] ? __io_req_find_next+0x300/0x300 [ 774.454048] io_uring_setup+0x1dd1/0x2980 [ 774.454605] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 774.455272] ? wait_for_completion_io+0x270/0x270 [ 774.455923] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 774.456626] ? syscall_enter_from_user_mode+0x1d/0x50 [ 774.457310] do_syscall_64+0x33/0x40 [ 774.457802] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 774.458480] RIP: 0033:0x7ff9f8ea8b19 [ 774.458975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 774.461421] RSP: 002b:00007ff9f641e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 774.462425] RAX: ffffffffffffffda RBX: 00007ff9f8fbbf60 RCX: 00007ff9f8ea8b19 [ 774.463367] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 774.464312] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 774.465263] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 774.466207] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 [ 774.474964] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1542 sclass=netlink_route_socket pid=6670 comm=syz-executor.6 [ 774.476825] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 774.477786] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 19:26:42 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, 0x0, 0xa001, 0x61) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:26:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0xb, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) [ 774.494921] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1542 sclass=netlink_route_socket pid=6675 comm=syz-executor.6 19:26:42 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x43}) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 19:26:42 executing program 4: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 35) [ 774.567334] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11 sclass=netlink_route_socket pid=6681 comm=syz-executor.1 [ 774.593918] FAULT_INJECTION: forcing a failure. [ 774.593918] name failslab, interval 1, probability 0, space 0, times 0 [ 774.596406] CPU: 1 PID: 6685 Comm: syz-executor.4 Not tainted 5.10.245 #1 [ 774.597898] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 774.599703] Call Trace: [ 774.600279] dump_stack+0x107/0x167 [ 774.601076] should_fail.cold+0x5/0xa [ 774.601909] ? io_rsrc_node_switch_start.part.0+0x43/0x250 [ 774.603114] should_failslab+0x5/0x20 [ 774.603936] kmem_cache_alloc_trace+0x55/0x320 [ 774.604946] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 774.606121] io_uring_setup+0x14f6/0x2980 [ 774.607028] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 774.608118] ? wait_for_completion_io+0x270/0x270 [ 774.609197] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 774.610332] ? syscall_enter_from_user_mode+0x1d/0x50 [ 774.611448] do_syscall_64+0x33/0x40 [ 774.612260] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 774.613372] RIP: 0033:0x7ff9f8ea8b19 [ 774.614172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 774.618157] RSP: 002b:00007ff9f641e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 774.619804] RAX: ffffffffffffffda RBX: 00007ff9f8fbbf60 RCX: 00007ff9f8ea8b19 19:26:42 executing program 6: sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, 0x0, 0x9, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x14}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000040}, 0x8090) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x58, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7ff, 0x8001}, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() ptrace(0x10, r1) ptrace(0x4208, r1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x59, 0xe4, 0x0, 0x0, 0x5, 0x2014, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000240), 0x7}, 0x4f1a0, 0x1f, 0x1, 0x2, 0x48659e7e, 0x7, 0x800, 0x0, 0x7fffffff, 0x0, 0x8}, r1, 0x1, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000004c0)) [ 774.621359] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 774.623111] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 774.624601] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 774.626124] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 19:26:42 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0xc, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:26:42 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, 0x0, 0xa001, 0x61) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:26:42 executing program 2: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) [ 774.708254] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=6691 comm=syz-executor.1 19:26:56 executing program 4: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 36) 19:26:56 executing program 0: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) readv(0xffffffffffffffff, &(0x7f0000003700)=[{0x0}, {&(0x7f00000003c0)=""/121, 0x79}, {0x0}, {&(0x7f00000014c0)=""/160, 0xa0}, {0x0}], 0x5) r3 = clone3(&(0x7f00000004c0)={0x110000600, &(0x7f00000001c0), &(0x7f0000000240), &(0x7f0000000280), {}, &(0x7f00000002c0)=""/32, 0x20, &(0x7f0000000300)=""/141, &(0x7f00000003c0)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0xfffffffb) r4 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(r4, &(0x7f0000000040)={0x11, 0x1b, r6, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000200)=0xac87, 0x4) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) recvmmsg$unix(r0, &(0x7f0000001680)=[{{&(0x7f0000000740), 0x6e, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/51, 0x33}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f00000008c0)=""/193, 0xc1}, {&(0x7f00000009c0)=""/154, 0x9a}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000000a80)=""/75, 0x4b}, {&(0x7f0000000b00)=""/207, 0xcf}], 0x7, &(0x7f0000000c80)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000000d00)=@abs, 0x6e, &(0x7f0000001080)=[{&(0x7f0000000d80)=""/236, 0xec}, {&(0x7f0000000e80)=""/217, 0xd9}, {&(0x7f0000000f80)=""/197, 0xc5}], 0x3, &(0x7f00000010c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{&(0x7f0000001140), 0x6e, &(0x7f0000001600)=[{&(0x7f00000011c0)=""/75, 0x4b}, {&(0x7f0000001240)=""/187, 0xbb}, {&(0x7f0000001300)=""/186, 0xba}, {&(0x7f00000013c0)=""/195, 0xc3}, {&(0x7f0000001580)=""/80, 0x50}], 0x5}}], 0x3, 0x10000, &(0x7f0000001740)={0x0, 0x3938700}) r9 = fork() ptrace(0x10, r9) clone3(&(0x7f00000017c0)={0x8800a400, &(0x7f0000000480), &(0x7f0000000540), &(0x7f0000000580), {0x18}, &(0x7f00000005c0)=""/100, 0x64, &(0x7f0000000640)=""/164, &(0x7f0000001780)=[r3, 0x0, 0x0, r3, 0x0, 0x0, 0x0, r8, r9], 0x9}, 0x58) bind$packet(r4, &(0x7f0000000440)={0x11, 0x16, r6, 0x1, 0x0, 0x6, @remote}, 0x14) 19:26:56 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:26:56 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) [ 788.374810] FAULT_INJECTION: forcing a failure. [ 788.374810] name failslab, interval 1, probability 0, space 0, times 0 [ 788.377345] CPU: 1 PID: 6707 Comm: syz-executor.4 Not tainted 5.10.245 #1 [ 788.378808] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 788.380588] Call Trace: [ 788.381167] dump_stack+0x107/0x167 [ 788.381949] should_fail.cold+0x5/0xa [ 788.382767] ? create_object.isra.0+0x3a/0xa30 [ 788.383744] should_failslab+0x5/0x20 [ 788.383886] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13 sclass=netlink_route_socket pid=6714 comm=syz-executor.1 [ 788.384556] kmem_cache_alloc+0x5b/0x310 [ 788.384573] ? _raw_spin_unlock_irqrestore+0x38/0x40 [ 788.384589] ? trace_hardirqs_on+0x5b/0x180 [ 788.384611] create_object.isra.0+0x3a/0xa30 [ 788.391096] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 788.392189] kmem_cache_alloc_trace+0x151/0x320 [ 788.393207] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 788.394369] io_uring_setup+0x14f6/0x2980 [ 788.395266] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 788.396350] ? wait_for_completion_io+0x270/0x270 [ 788.397413] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 788.398542] ? syscall_enter_from_user_mode+0x1d/0x50 [ 788.399651] do_syscall_64+0x33/0x40 [ 788.400450] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 788.401561] RIP: 0033:0x7ff9f8ea8b19 [ 788.402358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 788.406294] RSP: 002b:00007ff9f641e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 788.407920] RAX: ffffffffffffffda RBX: 00007ff9f8fbbf60 RCX: 00007ff9f8ea8b19 [ 788.409461] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 788.410988] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 788.412514] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 788.414052] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 19:26:56 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, 0x0, 0xa001, 0x61) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:26:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0xd, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:26:56 executing program 6: sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, 0x0, 0x9, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x14}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000040}, 0x8090) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x58, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7ff, 0x8001}, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fork() ptrace(0x10, r1) ptrace(0x4208, r1) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x59, 0xe4, 0x0, 0x0, 0x5, 0x2014, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000240), 0x7}, 0x4f1a0, 0x1f, 0x1, 0x2, 0x48659e7e, 0x7, 0x800, 0x0, 0x7fffffff, 0x0, 0x8}, r1, 0x1, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f00000004c0)) 19:26:56 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x43}) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 19:26:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0xe, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) [ 788.468554] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14 sclass=netlink_route_socket pid=6721 comm=syz-executor.1 19:26:56 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x43}) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 19:26:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0xf, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:26:56 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x61) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:26:56 executing program 4: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 37) 19:26:56 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x43}) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 788.662737] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15 sclass=netlink_route_socket pid=6737 comm=syz-executor.1 [ 788.669543] FAULT_INJECTION: forcing a failure. [ 788.669543] name failslab, interval 1, probability 0, space 0, times 0 [ 788.672160] CPU: 0 PID: 6738 Comm: syz-executor.4 Not tainted 5.10.245 #1 [ 788.673757] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 788.675683] Call Trace: [ 788.676301] dump_stack+0x107/0x167 [ 788.677160] should_fail.cold+0x5/0xa [ 788.678042] ? create_object.isra.0+0x3a/0xa30 [ 788.679100] should_failslab+0x5/0x20 [ 788.679987] kmem_cache_alloc+0x5b/0x310 [ 788.680939] create_object.isra.0+0x3a/0xa30 [ 788.681969] kmemleak_alloc_percpu+0xa0/0x100 [ 788.683021] pcpu_alloc+0x4e2/0x1240 [ 788.683901] ? io_async_queue_proc+0x80/0x80 [ 788.684934] percpu_ref_init+0x31/0x3d0 [ 788.685859] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 788.687114] io_uring_setup+0x14f6/0x2980 [ 788.688082] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 788.689267] ? wait_for_completion_io+0x270/0x270 [ 788.690410] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 788.691626] ? syscall_enter_from_user_mode+0x1d/0x50 [ 788.692829] do_syscall_64+0x33/0x40 [ 788.693692] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 788.694873] RIP: 0033:0x7ff9f8ea8b19 [ 788.695727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 788.699996] RSP: 002b:00007ff9f641e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 788.701768] RAX: ffffffffffffffda RBX: 00007ff9f8fbbf60 RCX: 00007ff9f8ea8b19 [ 788.703417] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 788.705070] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 788.706722] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 788.708369] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 19:26:56 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x43}) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 19:26:56 executing program 0: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0) lseek(r0, 0x4c6, 0x4) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000680)=0x7ff, 0x0) syz_emit_ethernet(0x1a8, &(0x7f0000000040)={@broadcast, @multicast, @val={@val={0x9100, 0x6, 0x1}, {0x8100, 0x4, 0x1, 0x3}}, {@mpls_mc={0x8848, {[{0xd9e5, 0x0, 0x1}, {0x81}, {0x7}, {0x5, 0x0, 0x1}, {0x5}, {0xfff, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x401}, {}, {0x1, 0x0, 0x1}], @ipv6=@dccp_packet={0x4, 0x6, "11dd0c", 0x142, 0x21, 0x1, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, {[@hopopts={0x33, 0x0, '\x00', [@ra={0x5, 0x2, 0x7}, @enc_lim={0x4, 0x1, 0x7f}]}, @routing={0x1d, 0x6, 0x1, 0x1f, 0x0, [@remote, @private2, @local]}, @dstopts={0x2f, 0x3, '\x00', [@enc_lim, @jumbo={0xc2, 0x4, 0x1}, @jumbo={0xc2, 0x4, 0x2}, @calipso={0x7, 0x30, {0x1, 0xa, 0x6, 0x4, [0xf2a, 0x1, 0x29, 0x1, 0x7]}}, @enc_lim={0x4, 0x1, 0x9}, @ra={0x5, 0x2, 0xb48}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @fragment={0x3c, 0x0, 0x90, 0x1, 0x0, 0x8, 0x64}], {{0x4e20, 0x4e24, 0x4, 0x1, 0xf, 0x0, 0x0, 0x8, 0x7, "6e0160", 0x62, "d79c29"}, "a74998abfb855fa8e765394aa89b78a03ceb89b471cac57b99cdfeb15a3a60d535f885eea74b1a38fe24ebbf90ceac8939ba98d84e8c369a22c28108ba94764a1659efbc985bcb01431ad545a426f8d8b37c5e78f7fe0e8c41bc09295e2a4fbfe5623fc509536f582759e80ece723d224c7b254f6550ecf20ffe45acbecf3805aadc"}}}}}}}, &(0x7f0000000200)={0x0, 0x3, [0xa9, 0xf9d, 0xfb4, 0xdf9]}) lseek(r0, 0x20, 0x3) fork() 19:26:56 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) lseek(r2, 0x7, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000180)=0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r3, r2, 0x0, 0x7ffffff9) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x20, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@debug={'debug', 0x3d, 0x7}}, {@cachetag={'cachetag', 0x3d, '-\','}}, {@aname}, {@cache_loose}, {@privport}], [{@permit_directio}]}}) r4 = inotify_init1(0x80800) ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000000)={0x8, 0x3, 0x4, 0x8000, 0x4, 0x8}) 19:26:56 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x11, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) [ 788.846571] netlink: 'syz-executor.1': attribute type 13 has an invalid length. 19:27:11 executing program 7: r0 = syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x43}) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 19:27:11 executing program 6: ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000300)) pipe(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xbe}, 0x0, 0x0, 0x1002, 0x0, 0x7, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @remote}}) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f00000003c0)) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x49) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x4f, 0x0, "3c1c2fd629c4af55a8680f7a892e0865c7fbba0cdfa184016bc00618cdb5732d900802764f98b1af0cd43f34e89ab87a13a460acbb4433cb8a7aaa5797c2f5b5cc15058fbbef4c13daa3094bf3e22ec6"}, 0xd8) syz_io_uring_setup(0x7f1, &(0x7f0000000280)={0x0, 0x100018d7, 0x4, 0x1, 0x376, 0x0, r1}, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fed000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000340)) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fstatfs(0xffffffffffffffff, &(0x7f0000002e00)=""/4102) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0xff, 0x5, 0x5, 0x0, 0x0, 0x7, 0x6802a, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x93, 0x1, @perf_config_ext={0x1, 0x8f2}, 0x3a, 0x0, 0x5, 0x0, 0x2, 0x0, 0x3, 0x0, 0x80000000, 0x0, 0x80000000}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x9) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x0) dup2(0xffffffffffffffff, r0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x18) ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000000c0)={0x0, 0xfffefffffffffffd}) 19:27:11 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x61) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:27:11 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x43}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x44, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x40081) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x43}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000000)={0x11, 0x9, r4, 0x1, 0x0, 0x6, @random="29872b7f4900"}, 0x14) 19:27:11 executing program 4: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 38) 19:27:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x12, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:27:11 executing program 0: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, @in_args={0x1}}, './file0\x00'}) bind$802154_dgram(r1, &(0x7f0000000040)={0x24, @short={0x3}}, 0x19) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x0, 0xee00}}, './file0\x00'}) pread64(r2, &(0x7f00000000c0)=""/163, 0xa3, 0x10000) 19:27:11 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) [ 803.737409] FAULT_INJECTION: forcing a failure. [ 803.737409] name failslab, interval 1, probability 0, space 0, times 0 [ 803.739860] CPU: 1 PID: 6762 Comm: syz-executor.4 Not tainted 5.10.245 #1 [ 803.741320] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 803.743071] Call Trace: [ 803.743634] dump_stack+0x107/0x167 [ 803.744404] should_fail.cold+0x5/0xa [ 803.745223] ? create_object.isra.0+0x3a/0xa30 [ 803.746194] should_failslab+0x5/0x20 [ 803.747002] kmem_cache_alloc+0x5b/0x310 [ 803.747864] create_object.isra.0+0x3a/0xa30 [ 803.748805] kmemleak_alloc_percpu+0xa0/0x100 [ 803.749767] pcpu_alloc+0x4e2/0x1240 [ 803.750566] ? io_async_queue_proc+0x80/0x80 [ 803.751482] percpu_ref_init+0x31/0x3d0 [ 803.752333] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 803.753501] io_uring_setup+0x14f6/0x2980 [ 803.754396] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 803.755513] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 803.756636] ? syscall_enter_from_user_mode+0x1d/0x50 [ 803.757780] do_syscall_64+0x33/0x40 [ 803.758592] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 803.759711] RIP: 0033:0x7ff9f8ea8b19 [ 803.760522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 803.762489] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 803.764552] RSP: 002b:00007ff9f641e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 803.764571] RAX: ffffffffffffffda RBX: 00007ff9f8fbbf60 RCX: 00007ff9f8ea8b19 [ 803.764581] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 803.764601] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 803.772562] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 803.774126] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 19:27:11 executing program 7: r0 = syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x43}) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 19:27:11 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:27:11 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000b80)={&(0x7f0000000ac0), 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x14, 0xe, 0x2, 0x5}, 0x14}}, 0x0) r1 = perf_event_open$cgroup(&(0x7f0000000140)={0x2, 0x80, 0x2, 0x3, 0xca, 0x0, 0x0, 0x5, 0x20, 0x7, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x72a8, 0x4, @perf_config_ext={0x7, 0x6}, 0x900, 0x2946, 0x5, 0x8, 0x37, 0x4, 0x7, 0x0, 0x9, 0x0, 0x4}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0xb) ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000000bc0)={{r1}, "f7d98b5bdbe143102c097e5f25f3e610591a5899c8568c0a058fa138ee51030142c4c3b7615955490b430bd34c27d6b2b7bc76f2ebd59cdbbed9dfba71bc7d1e302652c2b86efb3f12d2c3a916a94eda62102817ea3b6c8e3cfd009cefb053da2b9274d1619d40678280611c881e709ad7403388d3c8d1f7f80c1c1f8b0c6a3138725509cef7fe1ad5c4491760139b37f4e9d035381fd0fd87f9674f6295acb908ba96d7eb314e635be902144c80a0480bdc72225e0dd34632b5808878e89d152fae2ac58f16a5f277e5f3101dcc594008d993c234484869714aef6db5580dbce0b3546e8dcae3e87eee7aa9f56c5633554a11594abedf12034adf1014925a536f01b64deeddf6cd0d07b87ebcc483aca4de74a05ea2ced432a776a8287a0e980c7019160b7ad476417947037a40c72e0797b8636d33bbde7eeb538951d530c2dc76ac85653812663ebbf7e3eca4d558bc2a3189f78c7fc2e9b6d484b161cb87acc2d17751b81315acb708104d4ad4b520f633a542fe3d3c0f57120a089d06be426e148e56503689069bd438b4583479b1267f46a23310f32ab4d42ab914725a0ee63c7e043e26950168e6550062fa2a4b0c8ea19937d33b4c23cd7a9867e76e7ebe32b21cac4f1026bde3290ceb32ed02080a9caf9d3c4184ec1a8989c35618eabf8d9009c56b6e11560ccdf8bb0f74c856eba661de955d4b9eff78993bc2f492c227a8a7bf1650a6ba6eebfff9908aae782c1942408119aadb48a7ee131f2649bf449486cc2776876786cc5422d74cfea51664fb78466441dca90653b55bfc5e241ceebd1c3ffebbea1982cf635b013d8907f5151900e1e2c3155d837c19cc3247860d6b3a9daccb6715fa77977225a2055c99cdddc318a44df0f661504b1679e4ae95ff984749801a2b5e31de50bd7bb8600063f32cf462e65646f5317664a003e837b59e7222c5ee5debd307efd56b36fd27b971cc63930205d605543d25bdbfdeef3eda9e56bcae3f55980902bfaeb147057aeda3471d42dd6e36771c6b5f5812d894aeb81205ce037a9c25fb4b02baf4c6afdac3f26878a56f62a475172f5e2ed6d8af42f0464db24cf83983cdd004e486b67b0648062642e7d39c0ebf38d83ebb2fe733f8fe9dec667447542800dd8178ddcf3698c177d53c2561deb8005214a32edf60c552bc869e72aae9b146707d66ac9c2f43499bfb2d1529b6cb03f3d6f6d20be60ee89a41d2220728beaaa6e7e5b03a0fcf5341103d7485307f95bc1b6714a2540592eb516b36297f53ae32481cc9bb77c634d3a47d3362a12c34273dc538765a6ab059ca42ebca89328fd18de0c434605cd99a720f4d9e8e9c973dae4ee0cc86791b9b125220d9095d1cf16520ed7c16aeadceb848f39ec8442dc33f9d56b076aae3f27a91c76bf1cd91de9eb40ca4a2e2c6daf8bc8f0f7f09313f39f904d570c45b4ecea6d15ccfc024bd00c70dabeb8e1414c74bb3e0a7018c03b60132058b2c06ea504fd2058911c84374ee596c28b8e41826752acb603ee78d6d8b3e483d47eecd44cdf835d6a70eecf97582c43cac6352341fda359f7b736e192526c2edd5feb786fa27a5b46444300d1837542491ea304230e5412e727def3a6db1d7b19636da0e64604bd22e24ab2017e05b0796e13bf2a5219226dd77cb20053909ba33b04d5673e08f64dfb53b1c53de39573c2dc6b74ebe0597bc7a16def91a61e02bc3ee95eaa7bfc431a1f3d77c2ca4e52ac70b9274a36cf08341ca8764b935c596c8d92cea26435c43fd8dc3a39182a5d991393870c33dd091d17a1653537fc768d124c6ccc47ee4eb3f2f67f36ad13903c76024d4fa0e828c8002ac3fa1ac01a73c536a6054b59f56b3d30931eed64ca96ee35887c7ee70e969da1b089c117e2e86e893c39a251762f8dc531c66013aa5bf943ca7726e4d05053cc3d125c5b483fa169e2d595d036f8058f5cfa02c0bf4fc419e59963665ed3d82eb3d006a4c232ed696b67739692e50ff68173ce770720e0c1734c63f03d281394f4ef740205a5267da654f0a446c4ef532cca2684d03ceac7b6b9d975b68d28b32ef5ec5473fd66f98d955e7c4426262fb8e332a31346dd42c096fd73e59edbd5aeb1f80a978161876c99e22c09fb58ae6512030fbfa696c56604dc76f906a3b53fb19ebec56335b7b243a4d705f625e5ada88b3dba0024434136b531a7b28ee7e47bff04a559fd9b245ad046c9e7ee5239abbb75aaf75f49b5dff1cfacc19f3715fe265812f9be9751ff2b8bc01c8088f27ad3ef445097fa522d21a2e48a232d558f2d7c695f48e3a0e03412f71c30603d07d1053c898c161510d015f8f72375928d52c5911de4d91715e20472d30b17045a92923313c554cc082d77851bcbe8ba7607a2e5f4052d910699ce611bf7bafd21334ed84ac8787b49aef86b8db671a588f8f3d4bbb54a7a21151fc9f98e0a469448357317018a07e1a845a42319dcfac66e4c1680e7b398c54420663050dd53a4726178ab309bd985cc400386ad58f205ada64ac48c0df37efb1a624cc878e313471281a1ceaa93a29d209eb754157753c69df9f8e972edbd22f84bc6fff6aabeba51b1161324e55b29e88ae68054adcd0814e2388a1dec2a05c5ff75add9603e1873f1268d359385dc2498e7cde5ce2a674a6c669cf4c69a0b7056e77092540292cda8df61962351c86ceaf737045a57d7fb7901c0222b506ad5713637c6848ff22d5c7f537d45860ce0ab1084bba0c572857aa1acf18e6e6993a712d10dbf2a99a20eef37cf94c7eb6a2ec4e824cd497c7b7e79a4ab4e0129d5e0610d136ba859b843a8d59ad3ed8773e3921841ea5d491a7850806cf17b884b3ab419ab50c93d657cf7426afffcc5815889d555ccc7b678169f28e6e0da2a1314e2d9ca23288a8de3259c42b7dce4a1979b0ff76ecf77cb0fe8ab5c4ff22ed146c4d70d08b9f6e9d4c73bba19eb31189727acaeb892b941d322ad8fcec78723d3e384f566b0dcc7cb88fdf022c8a10edc932add8afeecdde736ee4f79486ce22acecd6b8e4968114a90a9de2b7bdbb332e5cf551e53173827a67a95e103a88244c95960b015dd82e2c84b86021d2007a7106d5db4aae805170b16a57c7101cd0d2b99773674b4b6d6029bff1eb0114e1dda30368cdc97030147c2e8bfd8dad2765f25253cae4eb9050a9fb9cc2e1722dd13d6af90ce6deac62871eca0c5e20a46feb91c9c7cef7c3e3db54c751ef30d57069cd411587c23697224e36199cb26ad4034c286f0068ec2df07a4309fc29590db547f532c2c6f3998600673dcfcae9b25a5568bb704eae21172a33df837d2f450a1d1d367061d6acc8ac48f6e0ba758e80500532b0431fd13ce77058b078aaa814c86fb1467179c5786f16f1dd3135b950c1df0d2117e7fa5e171f21668fb997ee444cf54d7520a3413879b4e74178a22dc7a03d8a4d85e3acb5ff10aec2378d52e073db83abfbb7ce637a017d31f8d44f9cd8bcd2ed93ba440ba3b4895aaa4cb1157a1adcf212d62f762992a2078359e6c84392faa4fd262dde64a8835c5d9bd638f7d0499b7bad53cbb1a3703986914da6b2f82ebca6a2995c762adb69d1adbba59e20f026a1ddb3f33badea29a1028044c0ebb0a7b02a141c9ab4cf3e9fb8565020bf37b84f8678a45a55a75b2f6adeec017acd460081f2343e3fb40d030b3678fb3c4c17d4b627e641eb63362871e0bf2ab00dc7314bd278ac144ef54212e4dc1c819a31ac125faaf512fae2c6d744b6faf85924a4d289a4ece43cf7abe6b8c7aed789d11572b02216420e7afb0608bed0ec63ebc1945ee2d62dc670b3f36d1951ccd2a87fafbba9a27783ec006fdca84b81a7ff638b96d08f05116afb2b82274cc78ab161029f3c9f2982ac0797236afa109bf09c1c74122de64ed535e04f38ad75067c1e65cf8cef9e31a7a9f231e13954a977c80065b3ed83a3eaab8c6629f16179802c580df0238747ab3b8b452e0dea6c5d86cb9da5df3cc2cc064506e912895be0bb2d589f192862f7a4920aa91a04abc808f98214673cc8d42d6dd4d7f8e8597aa8889fbd409d60597dee9cff40c9340ffaaf0bef38301c38a7913f21d5b172435e539a099148c7b9ca455e0c4c1de9865f9c8ca2b3f13b53ef7c1e39e9bcbe4dbd2bd2f0e1bbaf26a9053b21821e2637f22d9ce3019abf3ec0062325f5404d3a988941a7d8b7e73bff3443724b0210f179bb972b0153ef2d9414374c5a91f320c5dcfbadc26d3646244cec62356dde72abbf19bf5d06b93b43f5dc6f5f4785bc94dd54eec61528c67863a8f07538c28b5fcb1bce9d9d616835fbd2a5bcbc00a52f9764e0b46ab59cbffa293ee5c44f0c3a7163b0a5ade2f2f8eca1bf48e9dc7e34b641c63782444526ed0e4a7b0c2e5807e90cbc479d85bf927aca027a63a027765bc433b7d7764e657b1487cf26a4001c42e416e81b06310638943b2030efd6ecaea3469d235abe3b27d6ff0c8658236e726f35bd6186667121957ecc84d6390cd741e7f85b4d6bbdcd6820b4b602beceb05f113095c9b231e07e375ecf35faee1a14decf64d1e7afa0c54dd602077e856a01edbb27ad2a4de31060f3e534bc04d9668c3efb35b605d8cb3244b3b697f34e80e792ff65e12cdd139a39bf3ff4e45ce230016c80b5424cb4ad5bc3334751f3c02b1b8d85dcb9e57cf9bd47e1423b1b74be46218a62d712a41e2664bc6330c667f4e5c5d5b1c7422276056f75b00edaae03da2859e98a1c569bd0e4da799aa8c86fad865879267525bcbf81894cbed776fb5b78452eb2c45b035624db6827db0fb1b75bc221dbcba405e848a6d1582933089d30c742bd4b67a1258c8d76a18a5383835fef61034111e88967671450c611895e20582af87ccbb083774ddf328feca924c12f7ad992a461090e31ab466e6ea0ae90ef47a1cedfbe0093de30aaf90a4c0fec9d7879efc29bfe494666d22074933582e0776fabef5d7ddd6c9359917c1a7e7a4f24322412b4ef030073c2c63e61a341250fe768ff96b85ff632218040e3cac1ab41bb6572a9eda9fdcbd1929a99e203c88510fc58c7fccd395afed3477611364e1e770f5efeb0198581402b732a611c0cfafdb4a457e4e4e1216f28990c0994649ddf678bb6e356a16f57ef968f84d54cd0ddce669af4810de918daa61499bce07a2a856918c056c90bff8bbcc41c6cf7821c040a8aca3755e143bcdad9b68022c02f5e0baf8b020ac12de2508b05c7a5164e118b8cf5b7c06efe5d835927e3dfeaa5c27f4614239ec33bf7c2a4819a0f95f5ed197488ae0f4dee2b8456bcb5c2f57f3509ffeef069cbde4e3fa76f69aad89f50eecf21576cb4d8425531f4bce95298052abce25417796b9b787475cbe60df29b45c76bf1c1cf2322d76ff76df457ef659f5d65ee59e54d355e0f489ca95be181b349acf5288336d27f56c08f2d1668215d4cad308a3d346460857246ec54f74242a3b266b078d0c0130629c7fd39d8114edd1624d8c67d51599b788a49a6ea9314e779169df362171ab21d0ab106b659c823e1d6c349048c98ec35231eb88ccfa38f7c7dbafad16780a18af21ebfc43e7b10f93fe764bcf1bfb4011069addc85f9db94667ba56af652fe115d41cb8b74ce4a0e7e047f467458dfd16c1291af00c6d56af08cc69f4aa979ff43bcea6199f301bd2e7f67762234228784f77f41e6d72f8c7c670a5531d1c3075fcbae1ab0387837896bbd7beaccb3524ce7e1cf63b6ad342f334a0857"}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r3, r2) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x1, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x7]}]}, 0x1c}}, 0x0) 19:27:11 executing program 3: mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4000, 0x7, &(0x7f0000ffb000/0x4000)=nil) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd21}, 0x10300, 0x0, 0x0, 0x5, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1) mlock2(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0) 19:27:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x25, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:27:11 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x61) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:27:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x2f, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:27:25 executing program 0: syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60e7709100142b000000000000000000000000000000000000bb00000002", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) 19:27:25 executing program 6: ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000300)) pipe(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xbe}, 0x0, 0x0, 0x1002, 0x0, 0x7, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @multicast1}, {0x2, 0x0, @remote}}) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f00000003c0)) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x49) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x4f, 0x0, "3c1c2fd629c4af55a8680f7a892e0865c7fbba0cdfa184016bc00618cdb5732d900802764f98b1af0cd43f34e89ab87a13a460acbb4433cb8a7aaa5797c2f5b5cc15058fbbef4c13daa3094bf3e22ec6"}, 0xd8) syz_io_uring_setup(0x7f1, &(0x7f0000000280)={0x0, 0x100018d7, 0x4, 0x1, 0x376, 0x0, r1}, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fed000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000340)) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fstatfs(0xffffffffffffffff, &(0x7f0000002e00)=""/4102) perf_event_open(&(0x7f0000000400)={0x5, 0x80, 0xff, 0x5, 0x5, 0x0, 0x0, 0x7, 0x6802a, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x93, 0x1, @perf_config_ext={0x1, 0x8f2}, 0x3a, 0x0, 0x5, 0x0, 0x2, 0x0, 0x3, 0x0, 0x80000000, 0x0, 0x80000000}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x9) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x0) dup2(0xffffffffffffffff, r0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x18) ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000000c0)={0x0, 0xfffefffffffffffd}) 19:27:25 executing program 7: r0 = syz_io_uring_setup(0x0, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x43}) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 19:27:25 executing program 4: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 39) 19:27:25 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000002c0), 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, &(0x7f00000000c0)) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000480)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) getpgrp(0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000740)=ANY=[]) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000100)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000980)={{r1}, r3, 0x18, @unused=[0xb2be, 0x7f, 0x8, 0x1], @name="ea6526ce6a5ffb7b7bfe8bd209285a45ab26546ae9bf04e9477be706ace5df96d46315d31429bed15c4efb0d383ea99e87845dcdaa4bbac5d53b6420f6cb2ef3bf8a074e4ae4a3b1937c9f1791f009cbf7101d7a1a5514972a63d7ed7cb988d575023a77f6dfec44d6f9241557d7499cfcb03f48ca0e087d0c9f591fe4f1b854ef65ca2116be23a9f20133fd36028193013b27009052ec9d656e002150d69880f7ebf1250b551480dd25f194fe06993b6486e0af6adc3214ab1052e6ac156e952b889c2dc45a593fa0945c80e02488ac1f79376dc1195ae3ab4476f2090429d38f58c5e0c88d74b195c7e3db29a0381a6d9b8c8bf2517700446de6555f63def9b8e2264a8e6b2d409baac2f7253bd415fe294dacce6f69382bede173a4c1ddd66ec4b1e97c1e32a3db80f53717006fd6b53030dbc3b3c8875b4e9bf1c792bdd8d2c15daf1dd1a6ca67cb98d45549e170b164ee6542ccd213bf6b812b71362c9aca081716fc4e5e600f88b4bf2c84bcc1ed083c42034c202f00a4ca8547e479c6ae0594be645ceba2269e4be74138532dc669e780dbb954e852f8dfba9457869b10b9c380b94c4e3a6083b0355311d7f4ebaa53632b4145a7d5204672a0d3c3df979c098947b8fa2ed4a213376f7b184cddaa91175a6a9019a9f57f70f5f87801b35bb1498fef37cfa08452d244b698bd32dc68c3c075d28d4d352ad0158bdd0132ebccb19e162fa7361b36b88dec9f175c448a9ff3564cf39b711ca52ffebd61d3249f1af46de349fb06761ba38c97d76ec900caea844ea10e69ff8ecd5fb4530641ae24527da4b76c3eedfaba1ef03c7b48fba3c0e32035b3c09c5380b110cbd5d83359c43d474d124a3d8b54cc7bd7c01e7200d60138a5dcf68e61a50c1b912402db516bc21d7d7efcb203c4f182014b0cd23f0a1e21c0dd8bbf42b2702c12b8ceb832647e6ae864f10f71ab9d227dab2e34ddd5cee4789d37702cefdce64cf626224a4217851ca0fa369e49ea6fbf8fd7e4d497503507ce2dc2f72928cf08b2a7cca8d57d13821addf2b672778c7a3ddb5b429b7b8d9c3ea0a6a2a8dd368fa924027319d5f5afb33ec929d7aec64188139a368dd02bdab88901e3cdfb81ca9ff9724ef94d96ed88f7f1fcc9b8abdddb0b9160344e518e8e71f97f1fcd60263033a9c8585f36e368f245292e057a22ee92cca075c97de92452944c5e9818a81ea2928a0eee24bce076b8c18e55c60ef5238502c82e76733bf4bde24c31a2e99c7208ef1e09a51425d12ea66215e3d1c255de9e04334978cb1aee799582c954c2a8bbef10b0e9888c765f158c94e0dd77a733fafe37922a53e51c81a7d838ec86c344302c342ff30152f79db1ab9dd45533682596624786c16b807e83c3b11ec52396493082f25ca51a1504307c5695729927a7612a65667afa97860df9129d34005b148feab5ed1fefd5f9b37fd1223afc872db55e7ccbd0fab06afc9a8d5ede919ce2ef88ffff7dcbc0715ee6485e753110ccb98a6640e20768e7f542b95e388d54204f6b1ef113e0433e36b78b930398f6693e2aed831893c25ab40c06ac0ebb436bb7a571b3045b0b2139fdb074eda84285e05be2bf2dfc1be7c04cb69a33943d7a6fab777179b10f616fe30911b29c3df3746caab37e2560fb061668e9127079311ba9eab6b7b814a89886be459dbe4b7cd331e69c4928c9dfc69d5fb6b6ab00f8384685a5749171714d22aff80af8c31b3264d90bea8fb39caacd3dc2d73084d3e7b3dfc583736f446f05c4fc2a9763a0685243d0e7655dc7755c8f0e642bcc8b26cc13c9578a6b43242f77becb68dd31e273625324901bc4d69accc8485c46ca453a7b1dc50698fa556c5a1c35c2663432258fce2c40c3e99a2deffa0641dae649cd0c811dd5bddb5e81bcf73993cff09cdc075d91b982ec1b6d4634b7060c0f3f33daa1c1e2bc9a087b4e8ec0a8f2d13ce280293d063ed91dbbc8506e5ff73bd276486ab71ff9e4a06b2a92a5c5f472c8c13905e373302e2ecf0a39455c659552aa5012a5c34e8f018038577bdf11effa99920f094c047241b02edce82f485a6bf7eec71202ea58348cac54da3badc826afb9c0993274bda2f00b4c6b13e7e224d779ffdd193615b18d9eff17b6ce8807312caadf71ed05c7395a87a4e687735151dbcf47477ae95b563a06b59726cbc3b8f766af740c131b5c1cfd8110990965116763a51c2ecd70736e22fbb182dc2d8cc13c8946841bbd068a1f40cb0b97b7258135e84145f466f0c361942de83c10af33877bb55ccad4701ef0f794a85eda52c9274c67b3366ced8f81303f34c16ebbffaa9b724cb83495d92c205d8be1593ce1fdf5fd789cbf651a3d827e2bb0c639b72b711f06ef265ac9631ff9e644dde7b24de627b266e6b9620ed13cc6a3bf402d68a5681e039b082d4712bf4bc8946c4d966a146d3d70f2251c852ab529b54db71bc42deaaaa5eb26dfe918b51c739e213371a893e3a1ac02bee9a8065b4fce8bf7243d153c2c1a76b17090e7ea32f2e7e463f41a868b857ff846f0635ba538ed25f711264086bb0df1b1b68f5f11485d6bf821e55935cb5527f5452bcb6e3e1d52f359b8d89aad3545527f846a900d5244b0f88bf4218202b4b7a36c73eafaf5699a4609ba51f5ff278d60b90e0923798b12e7f881fa4c2fea59d5c68bd23da5eeb8682c89d139b5d8de770979fce9d9c5b1346ca2248eb20eef8791bd06e90b0e3eb9e712caaf60207e5c64757dd2bad4002efa6570e35103f7efea8221e54444066813ced32ded1914dd4b05d79ae1ef4b6202267eea96edf0049087aa14958a9ca9ed8af83843937c7c66889ffdb86e3abd128a15d07dcba4de8a7edeada304a7a1d7c2b3ace5471a4e3e58069fe131bb73cc16bd6571f290817fe183c401f13067665c36b96167278e4ace5393000027e16a5bcd3210e72c5e7eb60eca09f69e6ddf884a4117c13add274fa2e83dfa6c296f6a6539ad4cfb20088b9bbdb732b59dfd522d7c0aa79b3f17bec5c5ca3db0152f65118cfcb5bfb32b7cc7008a29ff1efa14dd1649b0faf2df2c9d3aa04b0be6359dfc3f5bb18960533606bd26620b365029a8afaef2d9fb1f49e3881ef35083ad4d038d10f54d67987524b15a368a5df9cfd58fd44898a04dc5d4eb0c91acba9e7fbb63ae1e58489fbac1d6447d62981a37bc5717b74a7be5eac48c128b881446adf01375c512a82d2cc25629298e41ac39e4df339dc58a22676690fb892b5908be7b15bbb783e0f2fe9934088799d976681eeaac83b2db4a144ed05b6c069ea5d64e5cd6e692ddb7ff1c0aafc42e118c1047f412f900e27bf2542ffe7a9f325181344c0000694038771e2de0623881669b84dcea1ddde20b3a7d83a21b26d02388d7ad745097fe9abcf7b3ebc24ed756b6201e7dae6b4f123dc4246c834ae57830df333e3ff525bd4e6bbb8c93a4c3bed04b3285ad310ecbe4435902d65b962a72acab646596466e0943d8f2b93a5a3eff4302b59d550675a1999d3c6c1e82def31b047a2d1e5e2b20027adac5f9d84370b9713c8c9562c29ba49a9bf6b2ce3a3fc66f66063fdb39ecd3cf9b50447027105c5133f322761dabff7c2b2a5889a61d1d35e22b8cb00d434caad501f23f27dceb692fcf95cfe5c9987a2353e99c00f453b5d79c874263f428e45bf715f4299e0f91f05263f86657fdd479ea81409ba1e0c4bfb6d78a6059a0f833a51c77f4042d1a931b4fa7993e16ff5e9bd504982300f5cf7b9f5dc48eff7f75d2828d2c5a4239149cdee1cced50f7b312a3b83323e83105aa0de9052008cd1b0af0296dc272f7f4781c1d756036a9b5f9bd132d240af87f81ce399a66a2fb8bb87359e858efb653ffa4ad0434cf0e16a3cf69bf4f8b3fb7745181823da223c63c8b1896bc0964b57420fd8ac95aa2c5e5ab2f7640af1423c6ede999c858cbfda62c02f8e3ee746140015e241c75f2c3ebd4f2be2a9e6d46805bbbec425c59b3b58751597cadf17e7acbd975e12e593b81bc91bee3409a8788183489a6a0ddf885ec04d3bd4c6a6d22176d2d28813a6fe30c5ca119b1845702fa902428ae26fe082b2e7a808014628541faf2c6ea9b825fff2535701ae8d217fc41a533721f86f8754b6db60ead788257e971135f5aeb7b7127647bb7181fa67996e1e9f8ffbbe2242fc87a17fb2a058c88dc5a500648bb3c42aaa20f73f75eb95495938e160bed7a24afb201f5165c64d97418ea4416b28897e2bf056306ebfd3f6afbe7bad0647a251fe06d09ed22c363be47610ea71121034976f047a3ab99de4bf684e7366aa86a00c17235c254d4b9cddd215ba1593d5675a48e52d9f786706868f568acfd4513f1012c530b9c87d15d85df98c6d13866447481271f9cd9f6fa775c081f355aff0178557c271deadad02e413bd3aa542643992cb270adfe505a00f71c8bb353346cfe6be4787979183b24a5d9505691d14c97b5633fee354f3e3f71bf9d759e270121d949b868e6e10b3ead967370947640c06ce64900c5bbde99f7ba51016f9ac6730da76b829fe0eddfbd72e93d23bfd1a93fd7b20290ede27c5284ac64333146d8bda38e47065393ac92edb2e0f21347b0a7d170b6b9296873975f17993fb4f225f81900e5cdca2cbaf29bcd731dad49081173b3fa0cc984c7157c19983a8ec6bc6de4c0c0c90e3e829f39e0f37dd68f0ab9f2b6908d6e1f6fd8ad1315b325ae645be2517ea58ba437760b0b7b6605637c40e3c75c1d090effa9a6d451eacf224ed9369c3f9963c0541a21eeca64d040b18c7842140684a328f93fe2ffac4c09320d8ef2710b236dcff3bb0860a5115e0a6bb165d335655a987d588fd8a8ea4dfa8933dd0ac8ab316d99ad4059065d0b41bb61d2d19d7088ab1ba51c5f7468338c2ada08616df2e360d4669e5e5e11b477f864a96513c3089c05bb7a156c9d4052bda15df3fd82b4cd17d5e3ac8a68a161c190ba8a88ac8606cb19e5282c60c9565d2053c79f2a3cc8cd83da88c1a42fa93e18c07a7baeb325baae7df1a3e62860033c793f83e823d4cd5e3856dae531d52f644379155ea2cc99aa275b172d8890ffd04e1a6a02860ab4ef5f9bad95e4b3c861cd4fbd0f878cf2467086a186e5d1852e068bbfdc516f0d50b7f654344513957de2351ee559443b508b96356491b3e64ecc16cdd461c5849b981f5622f19885e78579e2738b62379fb84e7397138b5e774deca492eb3a31442ac73eec5fce22a8d0b601c2238d76b8e39a5808d560bde27ebdab6d9fcae6ee507186b8015f3e9b8706b2c7f2db7d601af292ca0f1f5b70de237d4fe7ad7656120ce7b835f5b5fd9092423bc1268cb54a82d38b8a7baa79f8a16c94ea349d3e8a7a9e6c21363ca72018827ec433831f854a2387183c50a99b5f5a698d7198a4eba1b1758f6738b53e092c666576587ac36b8720bdee79beac49cda80a34b94b8b1a6e5fdd306170860843d3751e69cb899f509fbaddcdc8479a19eac97a27bfba8d34ea8ff7443928125443a367ec26e8f2851bf0b2f8563dab445c67f97e1c44096cc46e4aa59cdf5a85ed443a7397b04b4404864d7bd7652b0486ab026e421b1f54d614536f25d36bf6b29194e006951497613b3805bee8691ac1173dae6483476a99b962d800f785414f969809c9eefdbe90eb0fed310d93291f97e69686c0c0"}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="3c00000001000000030015c1e10000030000000220000001dee8fc131fc92b57000000014d0ffee000008068fb93f20624d998bb2382fbef2e605d20efd13ad8020454fe726d5ec494d8000000000000b7382cb035ae"]}) sendmsg$nl_generic(r1, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="d400000014000268e872002a36e58c2516000000309195bcedd4a355ffd0b57d36c80aa3cd5c00a209ab410588e2acf39f612a058aca019d424c1cfefa9bd84118e7b9a3dc7b648488e3b314280151f16e53c3b34d356001432e0e37dbfac2e264d49dde22ffb05d71782e4588a22964e120c9b3e8ac10a180903c642a26553943488705f8f9389f0dc82f10989f62b3874701ee49da692b47f3a2374ddcf5407ac1d8d6ece93e8156a83bca75748906b35121f4bfbcd532464798ecfcbf0151eccc1703000000e09aefabad56510f51901f721fb776488673f91400"/230], 0xd4}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="010601060000000000000000000000000000000000000001ff020000000000000000000000000001fc000000000000000000000000000000f88226a91f8b26296906a7c6112d7c23cc1890b9dac6ad76f124cc078544b156c06a4b5f643402a388b7b6ede5be94169040c873919189f0bb22567c3a24bc8125a2e76bd2b3104ebbdb6802785a82b050ac7fb3228ceb0b614ec31cae8c820bae862312b19eb847822245ff0be847d669f25a0ffc03bce9499a5dbcd92b9d93e2314ecfcf71562229babcb88fdce82b9783e2c30ebcbb0b8b28701efe37da5c"], 0x38) signalfd4(r4, &(0x7f0000000180)={[0x9]}, 0x8, 0x80000) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x5, 0x81, 0x0, 0x1ff}]}) prlimit64(0x0, 0x6, &(0x7f0000000440)={0x4, 0x16ba}, &(0x7f0000000600)) unshare(0x48020200) 19:27:25 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:27:25 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:27:25 executing program 0: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs={0x1, 0x0, 0x4e24}, 0x6e) write$rfkill(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x2}, 0x8) r0 = epoll_create(0x81) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018004000", @ANYRES32=r0, @ANYBLOB="01000063a54f4ae092c91b696c653100bb97ba5692e5b99cf8b2d824f5172b2ab52b372245feeb6bb1c1ba18adecce48a02f6b40aa96ac"]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) fallocate(r1, 0x0, 0x0, 0x1000002) mmap(&(0x7f0000a8e000/0x1000)=nil, 0x1000, 0x1000002, 0x1f012, r1, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$rfkill(r2, &(0x7f0000000040)={0x0, 0x0, 0x2}, 0x8) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000140)={0x1f, 0x1, 0x0, 0x0, 0x10000}) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x4882, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_io_uring_setup(0x7184, &(0x7f0000000280)={0x0, 0x0, 0x20, 0x40000000, 0xffffffff}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000200), 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000400)=ANY=[@ANYBLOB="e1212d8ecaff24a0f0441e04de8d794070028924c1027abfb591fd3cde663bcf6c81f005f070039836fbed79f358779590f92f07e9241370e1c63d874bf1baae384f19a250e9cb47bbcb42a7496b5d7828f1a5dd76c1cd5c0db4bb25", @ANYRESOCT]) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) [ 817.652392] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=6810 comm=syz-executor.1 [ 817.654461] FAULT_INJECTION: forcing a failure. [ 817.654461] name failslab, interval 1, probability 0, space 0, times 0 [ 817.656532] CPU: 0 PID: 6809 Comm: syz-executor.4 Not tainted 5.10.245 #1 [ 817.657459] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 817.658599] Call Trace: [ 817.658964] dump_stack+0x107/0x167 [ 817.659443] should_fail.cold+0x5/0xa [ 817.659944] ? percpu_ref_init+0xd8/0x3d0 [ 817.660474] should_failslab+0x5/0x20 [ 817.660974] kmem_cache_alloc_trace+0x55/0x320 [ 817.661588] ? io_async_queue_proc+0x80/0x80 [ 817.662180] percpu_ref_init+0xd8/0x3d0 [ 817.662706] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 817.663406] io_uring_setup+0x14f6/0x2980 [ 817.663968] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 817.664632] ? wait_for_completion_io+0x270/0x270 [ 817.665280] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 817.665953] ? syscall_enter_from_user_mode+0x1d/0x50 [ 817.666654] do_syscall_64+0x33/0x40 [ 817.667159] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 817.667811] RIP: 0033:0x7ff9f8ea8b19 [ 817.668315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 817.670808] RSP: 002b:00007ff9f641e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 817.671846] RAX: ffffffffffffffda RBX: 00007ff9f8fbbf60 RCX: 00007ff9f8ea8b19 [ 817.672810] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 817.673780] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 817.674742] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 817.675706] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 19:27:25 executing program 7: r0 = syz_io_uring_setup(0x3872, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x43}) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 19:27:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x53, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:27:25 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:27:25 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x5, 0x4004, @fd_index=0x9, 0x3, &(0x7f0000000680)="f7d263b7842483b71a8e64ca461975756805969e9da7f6e06dd806d81043473dc3c215127945e02add9165f3665f012a7716119782d49d68ab9bd32467c1e583d14f43e9cd18d2c293223c1a835e929e256cf9f2ead29fc91790fc8cbdc16bd4b90b21ee18156f2a6e1743b387673d027ff5630298090b4a943e8f9b68c666732aa49695d4942c739c6a95b8", 0x8c, 0xe}, 0x9) r2 = mq_open(&(0x7f0000000980)='\xc4fdn/\xda\x1ag\x92\x05\xdb\xe7\xf2\xaa5T\xb5\x0e@\xa5\x15M\x1b\xec\xbf\x97\x05\x00\x00\x00\x00\x00\xec\xa6t\xd7\x01\x81\xa7\x81\xc9\x8dNK\x02K\x89\xcc\xfd\xd4n\x06\x8e\xd3{\t\x1d\xf5f\x9e_\xb5sF\x90\xe0\xf4\xfc\xa7\x9a\x16{\x87K<\"\xb9\xea\xb3\xefh\xfd\v$\xda\xe8x\x1e\xe1\x97S)\x10q\xd3\xa0|\xe5\xd1\xd88\xfcZK.t\xe9\x831\xc9\xd9K\x9a\xfe\x14\x14yu\x86\xb2O\xffOO\xe4/\xb0\xc9\xbbB\x99\v\x19\x06\x95\xb5\xd3r\r\x91d0\x9b\xb8-\xbbx\xaf\x051*\x01\xa7\xfb\\\xc4\x1f\x1f\x81\x98\x9b\x1dz\xbc\xd2\xcdc\xa3\xda\xa0\x85\xccb\xe2\'\x04\xf3>\xc1f\xf0\xc5R\x04C\xbb\x9a\x94\xb6Si\x80\xf9\x02\xcans\xee(\x8f\xf8\xfb\xcf$YhS\b\xa1:.\xc1O\xc8\x885\xf6V\xb8\xb3\x00}\xe4\x11`[\xda(\x94\xd7\r\x1eJ\xeb\x1f\xa4\xde\xd0\x9bo\x94y\x0e&\x01\x90#\xe2\xb3\b\xb0-\n\x90\xb8\x8a\xca\x95\xd2\xf7f\xbf\xdb\xcb~i\"\x98\xa24\xb4*;\xbb\x9f\xea\xf0}^\x16|5\x7fi\xc8\xb4t\xfbv:R\xec\x8b\x8d\xa6\a\x8e,\x96\x8f|W@{\x99w\x1fD\x90\xc3k\x925\r\xa4T\x91\x1a}\x14\x87Q\xdd\xac@6XOC5\xa5\xdcj\xddG\x16w\xbc\xe1\xb7\x19\xd6n1\x84m\xc5\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2, 0x83, &(0x7f0000000200)={0x9, 0x4, 0x400, 0x1}) write$binfmt_elf64(r2, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x299) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0x10, r1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x2d, 0x4, 0x1, 0x7ff, 0x0, @local, @private1, 0x8000, 0x20, 0x1f}}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x7}) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$HIDIOCINITREPORT(r5, 0x550c, 0x20000000) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e21, 0x6, @local, 0x9}, 0x1c) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000000)) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x8, 0x1) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3dbbc16aea59d9765db5a4655a0c12cc5e6903e8087992526ac68f2c375b0d0004d69f80a0a497ef5536b1ecfc575cc7a09734624bde253431368e6a0f829d6da6bce83d60bc214175460f4778b04f1042cc6817944932781bc3e1a224dd85b6346a57b5d35f6d78b5ded9280764844c7daa4c3b7412dc09d4d928fd5f5fa0453f4e6dd6028adb416ba85da7e4c93a176c9a905bf1a035961446bcb889e97b37dff1e95f5fc5e6761b4b46f332e5f371d3b8d0eef80e8fb4c87f6042f0ee47a2014875605a8f7fa713b997cdae18cfb56faf25b1008fa0e9be1672399761a9249728450f1bc7c76b27e1c1928e131e2be9", @ANYRESDEC, @ANYBLOB="f57777119040395dd960a3ba6bfe75200b4637efa966ec5a518466a819dd88a0bf09f77a05bb46cf535d4863b94a4312c944a9a21b0c802240ac4e0f6b3b5d5fc67d05b90003ee78b127392fbad9176b228f41c6584a70a663c23ae7394741b1cf3ccd0ee01cbb2f8408582c51a9163cfa48d96266d26bf9a4fafd35c344e6b6076fc7f8de60cf9244b8499cb1c8f5d06bb580b159967f7887fb0fc22d296b2a6c090c5ae041ee58ec1fc6e4554b842f7ee12699f5a5bdb242109d23329736cf64044f109a62c3cfd365cd3d2ad916a5440d9df89cf1f59c3b21cef210787a5b61824b0399d8eb9d52a5", @ANYRESHEX=r4, @ANYRESOCT=r1]) [ 817.740524] 9pnet: Insufficient options for proto=fd 19:27:25 executing program 4: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 40) 19:27:25 executing program 7: r0 = syz_io_uring_setup(0x3872, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x43}) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 19:27:25 executing program 6: timerfd_create(0x0, 0x80000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = dup2(r2, r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1ff}}, './file1/../file0\x00'}) ioctl$EXT4_IOC_GROUP_EXTEND(r5, 0x40086607, &(0x7f0000000240)=0xa0b9) clock_gettime(0x0, &(0x7f00000001c0)) timerfd_settime(r4, 0x1, &(0x7f0000000180)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000200)) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000080)={0x8, 0x80000001, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffc, 0x0, 0x5, 0x100000000}, 0x0, 0x0, &(0x7f0000000140)={r6, r7+60000000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000, 0x10, r2, 0x0) [ 817.819535] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=83 sclass=netlink_route_socket pid=6827 comm=syz-executor.1 19:27:25 executing program 7: r0 = syz_io_uring_setup(0x3872, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x43}) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 817.824255] FAULT_INJECTION: forcing a failure. [ 817.824255] name failslab, interval 1, probability 0, space 0, times 0 [ 817.825659] CPU: 0 PID: 6830 Comm: syz-executor.4 Not tainted 5.10.245 #1 [ 817.826516] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 817.827553] Call Trace: [ 817.827895] dump_stack+0x107/0x167 [ 817.828351] should_fail.cold+0x5/0xa [ 817.828832] ? create_object.isra.0+0x3a/0xa30 [ 817.829431] should_failslab+0x5/0x20 [ 817.829911] kmem_cache_alloc+0x5b/0x310 [ 817.830423] create_object.isra.0+0x3a/0xa30 [ 817.830965] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 817.831603] kmem_cache_alloc_trace+0x151/0x320 [ 817.832186] ? io_async_queue_proc+0x80/0x80 [ 817.832735] percpu_ref_init+0xd8/0x3d0 [ 817.833246] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 817.833922] io_uring_setup+0x14f6/0x2980 [ 817.834442] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 817.835072] ? wait_for_completion_io+0x270/0x270 [ 817.835694] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 817.836345] ? syscall_enter_from_user_mode+0x1d/0x50 [ 817.836987] do_syscall_64+0x33/0x40 [ 817.837442] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 817.838085] RIP: 0033:0x7ff9f8ea8b19 [ 817.838558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 817.840896] RSP: 002b:00007ff9f641e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 817.841865] RAX: ffffffffffffffda RBX: 00007ff9f8fbbf60 RCX: 00007ff9f8ea8b19 [ 817.842732] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 817.843621] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 817.844518] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 817.845402] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 19:27:39 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x43}) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 19:27:39 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:27:39 executing program 6: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cc, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = dup(r2) syz_io_uring_setup(0x6198, &(0x7f0000000140)={0x0, 0xeec6, 0x10, 0x3, 0x22, 0x0, r3}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000000c0), &(0x7f00000001c0)) dup2(r2, r1) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(r4, 0x6, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x43}) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000080)={0x4, 0x0, "dd3b73", 0x3}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 19:27:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000100), &(0x7f0000000140)=0x4) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f00000000c0), 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r3, r2) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)={0x88, r4, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x7}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x8) r5 = fcntl$dupfd(r0, 0x0, r0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r8 = dup2(r7, r6) lseek(r8, 0x7, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r8, 0x40082404, &(0x7f0000000180)=0x2) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r9, r8, 0x0, 0x7ffffff9) ioctl$F2FS_IOC_GET_PIN_FILE(r8, 0x8004f50e, &(0x7f00000002c0)) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="24007cc8e2fc30d7ec00001800210c4000000040000000485d55c153cc50de020000f52700f80000f3ffff0700050000000001"], 0x24}}, 0x0) 19:27:39 executing program 4: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 41) [ 831.952424] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=115 sclass=netlink_route_socket pid=6852 comm=syz-executor.1 19:27:39 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x0, 0x158) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) lseek(r2, 0x7, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r5 = dup2(r4, r3) lseek(r5, 0x7, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000180)=0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r6, r5, 0x0, 0x7ffffff9) fchownat(r5, &(0x7f00000001c0)='./file0\x00', 0xee01, 0xffffffffffffffff, 0x400) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000180)=0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r7, r2, 0x0, 0x7ffffff9) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) pread64(0xffffffffffffffff, &(0x7f0000000240)=""/108, 0x6c, 0x8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x59, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000001500)=ANY=[]) 19:27:39 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x7ffffff9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:27:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x73, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) [ 831.981951] FAULT_INJECTION: forcing a failure. [ 831.981951] name failslab, interval 1, probability 0, space 0, times 0 [ 831.984619] CPU: 0 PID: 6857 Comm: syz-executor.4 Not tainted 5.10.245 #1 [ 831.986183] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 831.988064] Call Trace: [ 831.988664] dump_stack+0x107/0x167 [ 831.989502] should_fail.cold+0x5/0xa [ 831.990369] ? create_object.isra.0+0x3a/0xa30 [ 831.991402] should_failslab+0x5/0x20 [ 831.992274] kmem_cache_alloc+0x5b/0x310 [ 831.993197] create_object.isra.0+0x3a/0xa30 [ 831.994196] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 831.995353] kmem_cache_alloc_trace+0x151/0x320 [ 831.996409] ? io_async_queue_proc+0x80/0x80 [ 831.997407] percpu_ref_init+0xd8/0x3d0 [ 831.998316] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 831.999567] io_uring_setup+0x14f6/0x2980 [ 832.000535] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 832.001690] ? wait_for_completion_io+0x270/0x270 [ 832.002808] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 832.003989] ? syscall_enter_from_user_mode+0x1d/0x50 [ 832.005159] do_syscall_64+0x33/0x40 [ 832.006016] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 832.007176] RIP: 0033:0x7ff9f8ea8b19 [ 832.008011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 832.012221] RSP: 002b:00007ff9f641e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 832.013945] RAX: ffffffffffffffda RBX: 00007ff9f8fbbf60 RCX: 00007ff9f8ea8b19 [ 832.015548] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 832.017150] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 832.018771] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 832.020384] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 19:27:39 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x43}) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 19:27:39 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x7ffffff9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:27:39 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:27:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x2, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:27:39 executing program 4: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 42) 19:27:39 executing program 6: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, &(0x7f00000000c0)=ANY=[]) chdir(&(0x7f00000000c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x100000001) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x10f) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r0, r2, 0x0, 0x80000001) [ 832.131672] FAULT_INJECTION: forcing a failure. [ 832.131672] name failslab, interval 1, probability 0, space 0, times 0 [ 832.133026] CPU: 1 PID: 6874 Comm: syz-executor.4 Not tainted 5.10.245 #1 [ 832.133837] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 832.134796] Call Trace: [ 832.135105] dump_stack+0x107/0x167 [ 832.135526] should_fail.cold+0x5/0xa [ 832.135965] ? __d_alloc+0x2a/0x990 [ 832.136388] should_failslab+0x5/0x20 [ 832.136824] kmem_cache_alloc+0x5b/0x310 [ 832.137313] __d_alloc+0x2a/0x990 [ 832.137715] ? find_held_lock+0x2c/0x110 [ 832.138183] d_alloc_pseudo+0x19/0x70 [ 832.138625] alloc_file_pseudo+0xce/0x250 [ 832.139098] ? trace_hardirqs_on+0x5b/0x180 [ 832.139590] ? alloc_file+0x5a0/0x5a0 [ 832.140032] anon_inode_getfile+0xc8/0x1f0 [ 832.140520] io_uring_setup+0x138b/0x2980 [ 832.141001] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 832.141595] ? wait_for_completion_io+0x270/0x270 [ 832.142160] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 832.142758] ? syscall_enter_from_user_mode+0x1d/0x50 [ 832.143352] do_syscall_64+0x33/0x40 [ 832.143777] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 832.144361] RIP: 0033:0x7ff9f8ea8b19 [ 832.144787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 832.146937] RSP: 002b:00007ff9f641e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 832.147814] RAX: ffffffffffffffda RBX: 00007ff9f8fbbf60 RCX: 00007ff9f8ea8b19 [ 832.148628] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 832.149467] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 832.150292] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 832.151113] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 [ 832.162350] loop6: detected capacity change from 0 to 33559552 19:27:39 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000001780)={{0x2, 0xfffe, @dev={0xac, 0x14, 0x14, 0x42}}, {0x304, @multicast}, 0x0, {0x2, 0x0, @multicast1}, 'ipvlan1\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e24, @local}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000000)='veth1_to_bridge\x00', 0x9, 0x5, 0x3ff}) 19:27:39 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x43}) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 19:27:39 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x7ffffff9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:27:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x3, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) [ 832.312345] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 832.313826] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len 19:27:52 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:27:52 executing program 4: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 43) 19:27:52 executing program 6: write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000480)={0xf, 0x1f, 0x2, 0x100000000}, 0xf) r0 = open_tree(0xffffffffffffffff, 0x0, 0x80980) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4044}, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5, "77004a6efdff00"}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r2 = socket$inet(0x2, 0xa, 0x0) r3 = syz_io_uring_setup(0x4cc1, &(0x7f0000000080)={0x0, 0xed63, 0x0, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000002a40)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000700)={0x0, 0x2, &(0x7f00000006c0)=[0xffffffffffffffff]}, 0x1) syz_open_dev$vcsa(&(0x7f0000004700), 0x0, 0x4400) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x3f, 0x5, 0x3, 0x1b, 0x0, 0x8, 0x100, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x4, @perf_config_ext={0x20, 0x80}, 0x400c0, 0x7fff, 0x4, 0x7, 0x100000001, 0x3ef8ed4d, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x8) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x4090) mount$tmpfs(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000500), 0x4000, &(0x7f0000000540)=ANY=[]) pwrite64(0xffffffffffffffff, &(0x7f0000000080)="cfb51db7b4aef657d69b7d6f8d9fa8bedaa6006ddceb933f3cf4ef90895513108dee8630697149f293a1d1f7213993307208d16219b1bd3754ae85fa", 0x3c, 0xfffe) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="4e14ce81f08dd15b8e1d6dda79b7222420b26d78b25207c2256f2f5426cbd5d8ff85", @ANYRES16=0x0, @ANYBLOB="000425bd7000fcdbdf25140000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000300000008000b000004000006001100062000000800150001010000080001007063690011000200303030303a30303a31302e3000000000080003000300000008000b000900000006001100020000000800150008000000080001007063690011000200303030303a30303a31302e300000000008000000000008000b000010000006001100020000000800150020000000"], 0xcc}, 0x1, 0x0, 0x0, 0x8000}, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r1, 0x0) 19:27:52 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xee00, r1, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000001140)=0x0) r4 = semget(0x2, 0x0, 0x20b) r5 = getuid() stat(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f00000002c0)={{0x1, r5, r3, r6, 0x0, 0x39, 0x8}, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {r2, r3}}, './file0\x00'}) setresuid(0xffffffffffffffff, r2, 0x0) setresuid(r1, r2, 0x0) setfsuid(r1) r7 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$chown(0x4, r7, 0x0, 0x0) 19:27:52 executing program 3: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000200)='macsec0\x00') write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[], 0x98a) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = getpgrp(0x0) pidfd_open(r3, 0x0) fcntl$lock(r2, 0x5, &(0x7f0000000000)={0x0, 0x4, 0x7, 0xff, r3}) creat(&(0x7f0000000440)='./file0\x00', 0x20) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000fffffdfd020100000000000000000000000000000000000000000000000000ff0700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ffffff00000000000000000000000000000000000000000400"/256]) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'macsec0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="3c00000001000000030015c1e10000030000000220000001dee8fc131fc92b570000000100008068fb93f20624d998bb2382fbef2e605d20efd13ad8020454fe726d5ec46065bf6e5c2fd748b7382cb035aee7d07675"]}) clone3(&(0x7f0000000480)={0x2080, &(0x7f0000000180), &(0x7f00000002c0), &(0x7f0000000300)=0x0, {0x2}, &(0x7f0000000380)=""/10, 0xa, &(0x7f0000000900)=""/4096, &(0x7f0000000380)}, 0x58) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = dup(0xffffffffffffffff) pidfd_open(r4, 0x0) preadv(r2, &(0x7f0000001900), 0x0, 0x9, 0xede9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000500)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x81) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) unshare(0x48020200) 19:27:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x4, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:27:52 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r1, r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x7ffffff9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:27:52 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x43}) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r2, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 19:27:52 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x43}) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r2, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 844.970762] FAULT_INJECTION: forcing a failure. [ 844.970762] name failslab, interval 1, probability 0, space 0, times 0 [ 844.973424] CPU: 1 PID: 6907 Comm: syz-executor.4 Not tainted 5.10.245 #1 [ 844.974961] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 844.976846] Call Trace: [ 844.977472] dump_stack+0x107/0x167 [ 844.978310] should_fail.cold+0x5/0xa [ 844.979197] ? create_object.isra.0+0x3a/0xa30 [ 844.980262] should_failslab+0x5/0x20 [ 844.981161] kmem_cache_alloc+0x5b/0x310 [ 844.982119] create_object.isra.0+0x3a/0xa30 [ 844.983117] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 844.984274] kmem_cache_alloc+0x159/0x310 [ 844.985218] __d_alloc+0x2a/0x990 [ 844.986029] ? find_held_lock+0x2c/0x110 [ 844.986973] d_alloc_pseudo+0x19/0x70 [ 844.987856] alloc_file_pseudo+0xce/0x250 [ 844.988798] ? trace_hardirqs_on+0x5b/0x180 [ 844.989804] ? alloc_file+0x5a0/0x5a0 [ 844.990686] anon_inode_getfile+0xc8/0x1f0 [ 844.991657] io_uring_setup+0x138b/0x2980 [ 844.992619] ? __do_sys_io_uring_enter+0x1890/0x1890 19:27:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x5, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) [ 844.993788] ? wait_for_completion_io+0x270/0x270 [ 844.995110] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 844.996307] ? syscall_enter_from_user_mode+0x1d/0x50 [ 844.997499] do_syscall_64+0x33/0x40 [ 844.998339] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 844.999509] RIP: 0033:0x7ff9f8ea8b19 [ 845.000340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 845.004530] RSP: 002b:00007ff9f641e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 845.006264] RAX: ffffffffffffffda RBX: 00007ff9f8fbbf60 RCX: 00007ff9f8ea8b19 [ 845.008206] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 845.009927] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 845.011678] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 845.013636] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 [ 845.015057] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 845.020947] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len 19:27:52 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r1, r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x7ffffff9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:28:08 executing program 4: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 44) 19:28:08 executing program 3: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000c00)={'sit0\x00', &(0x7f0000000b80)={'sit0\x00', 0x0, 0x4, 0x40, 0x1, 0x5, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x38}, 0x7800, 0x20, 0x2, 0x7}}) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r2 = perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x50000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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", @ANYRESOCT=r0, @ANYRES16], 0x78}, 0x1, 0x0, 0x0, 0x24004000}, 0x34000010) fallocate(r3, 0x0, 0x0, 0x1000002) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000080)={'ip6gre0\x00', r0, 0x4, 0x0, 0x4, 0x4, 0xd, @remote, @mcast2, 0x80, 0x40, 0x200, 0x6}}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x1cbb43, 0x0) lseek(r3, 0x0, 0x4) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, 0x0, 0x11) stat(&(0x7f0000000200)='./file1\x00', &(0x7f0000000580)) sendfile(r4, r5, 0x0, 0x100000001) openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x488040, 0x0) mmap(&(0x7f000071d000/0x1000)=nil, 0x1000, 0x200000a, 0x100010, r4, 0xb323e000) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r3, 0x0) 19:28:08 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x43}) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r2, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 19:28:08 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_audit(0x10, 0x3, 0x9) fsetxattr$security_selinux(r0, &(0x7f00000000c0), &(0x7f0000000080)='system_u:object_r:lirc_device_t:s0\x00', 0x23, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r2) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_USER_TTY(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000006404000826bd7000fbdbdffdf2250800d6bb8c9fe23b91cef2ace6fe340074560000530ac63bffc361a11d1acc4271dc27b21f03ba78955671f21dc9"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) splice(r2, 0x0, r4, 0x0, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) quotactl(0x2, &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000680)="69eb1e6f327054e098d4b672a2ac69e4a486eec99baaeb24bc9dc28efe8d0c838961f1d61ceaf812d84d496f943e749abf74baedc04a5553b47861f92ca15074048c41addccf37") r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000008c0)={0x1c, 0x0, 0x69844ea0a6ddcd11}, 0x1c}}, 0x0) ioctl$CDROMEJECT(0xffffffffffffffff, 0x5309) unshare(0x48020200) 19:28:08 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:28:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x8, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:28:08 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r1, r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x7ffffff9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:28:08 executing program 6: accept4(0xffffffffffffffff, &(0x7f0000000300)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @local}}}}, &(0x7f0000000040)=0x80, 0x80000) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x90101, 0x0) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) utimes(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x9}}, './file0\x00'}) openat(r3, &(0x7f0000000200)='./file0\x00', 0x40800, 0x188) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000001c0)={[{@subsystem='freezer'}, {@clone_children}]}) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x40001, 0x0) pipe2(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000004c0)=ANY=[@ANYBLOB="010000200000b900df030000", @ANYRES64=r5, @ANYBLOB]) ioctl$VFAT_IOCTL_READDIR_SHORT(r4, 0x82307202, &(0x7f0000000500)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) fsmount(r1, 0x1, 0x71) fsmount(0xffffffffffffffff, 0x1, 0x4) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000001c00)) openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x940, 0x0) [ 860.404883] FAULT_INJECTION: forcing a failure. [ 860.404883] name failslab, interval 1, probability 0, space 0, times 0 [ 860.407955] CPU: 0 PID: 6928 Comm: syz-executor.4 Not tainted 5.10.245 #1 [ 860.409936] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 860.412176] Call Trace: [ 860.412887] dump_stack+0x107/0x167 [ 860.413878] should_fail.cold+0x5/0xa [ 860.414894] ? __alloc_file+0x21/0x320 [ 860.415930] should_failslab+0x5/0x20 [ 860.416944] kmem_cache_alloc+0x5b/0x310 [ 860.418059] __alloc_file+0x21/0x320 [ 860.418951] alloc_empty_file+0x6d/0x170 [ 860.419954] alloc_file+0x5e/0x5a0 [ 860.420750] alloc_file_pseudo+0x16a/0x250 [ 860.421705] ? alloc_file+0x5a0/0x5a0 [ 860.422586] anon_inode_getfile+0xc8/0x1f0 [ 860.423629] io_uring_setup+0x138b/0x2980 [ 860.424578] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 860.425734] ? wait_for_completion_io+0x270/0x270 [ 860.426925] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 860.428104] ? syscall_enter_from_user_mode+0x1d/0x50 [ 860.429257] do_syscall_64+0x33/0x40 [ 860.430146] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 860.431376] RIP: 0033:0x7ff9f8ea8b19 [ 860.432210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 860.436433] RSP: 002b:00007ff9f641e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 860.438241] RAX: ffffffffffffffda RBX: 00007ff9f8fbbf60 RCX: 00007ff9f8ea8b19 [ 860.439830] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 860.441532] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 860.443177] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 860.444822] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 19:28:08 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r3, r2, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) [ 860.467493] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6937 comm=syz-executor.0 19:28:08 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:28:08 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x43}) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 19:28:08 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x21, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:28:08 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x43}) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 860.600462] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 860.620538] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len 19:28:08 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r3, r2, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:28:08 executing program 6: r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0xc0f85403, &(0x7f0000000040)=0x1) 19:28:08 executing program 4: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 45) 19:28:08 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r2, r1, 0x0, 0x7ffffff9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) [ 860.812875] FAULT_INJECTION: forcing a failure. [ 860.812875] name failslab, interval 1, probability 0, space 0, times 0 [ 860.815444] CPU: 0 PID: 6965 Comm: syz-executor.4 Not tainted 5.10.245 #1 [ 860.816986] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 860.818875] Call Trace: [ 860.819475] dump_stack+0x107/0x167 [ 860.820295] should_fail.cold+0x5/0xa [ 860.821149] ? create_object.isra.0+0x3a/0xa30 [ 860.822194] should_failslab+0x5/0x20 [ 860.823054] kmem_cache_alloc+0x5b/0x310 [ 860.823970] create_object.isra.0+0x3a/0xa30 [ 860.824954] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 860.826161] kmem_cache_alloc+0x159/0x310 [ 860.827213] __d_alloc+0x2a/0x990 [ 860.828047] ? find_held_lock+0x2c/0x110 [ 860.828982] d_alloc_pseudo+0x19/0x70 [ 860.829871] alloc_file_pseudo+0xce/0x250 [ 860.830889] ? trace_hardirqs_on+0x5b/0x180 [ 860.831913] ? alloc_file+0x5a0/0x5a0 [ 860.832784] anon_inode_getfile+0xc8/0x1f0 [ 860.833800] io_uring_setup+0x138b/0x2980 [ 860.834846] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 860.835986] ? wait_for_completion_io+0x270/0x270 [ 860.837150] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 860.838449] ? syscall_enter_from_user_mode+0x1d/0x50 [ 860.839654] do_syscall_64+0x33/0x40 [ 860.840585] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 860.841792] RIP: 0033:0x7ff9f8ea8b19 [ 860.842217] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6968 comm=syz-executor.0 [ 860.842637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 860.842646] RSP: 002b:00007ff9f641e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 860.851611] RAX: ffffffffffffffda RBX: 00007ff9f8fbbf60 RCX: 00007ff9f8ea8b19 [ 860.853340] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 860.855013] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 860.856744] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 860.858420] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 19:28:24 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x43}) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r2, r1, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 19:28:24 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r3, r2, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:28:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x25, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:28:24 executing program 6: unshare(0x6000480) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000020000000000000090471c350000000000000000000000000000000062ff3f4c741c0a56ec231b5c0cfee24bad56a872"], 0x0) 19:28:24 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r2, r1, 0x0, 0x7ffffff9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:28:24 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) close_range(r0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) ioctl$HIDIOCINITREPORT(r1, 0x550c, 0x20000000) r2 = mq_open(&(0x7f0000000100)='wfdno', 0x801, 0x83, &(0x7f0000000200)={0x6, 0x4, 0xb0, 0x7}) write$binfmt_elf64(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c46010400010000000000e500c0038203008c01000009010000000000004000000000000000a70300000000000003800000040038000200070001010500000000700000000008000000100000000900000000000000010000000000000001000000000000003d00000000000000090000000000000051e57464010000000400000000000000000000000000000001000000000000000300000000000000ffffffffffffffffff000000000000004f96338ba86e5cdfe44ee0f43ab046f63282228a899c796de403b7cdc51e00bd5222da942c52daca00009f38cf00864cec4c272653ef65cfc48b4a049be7f0e33406e7c056004c104e6bd0d9b03d1734627bcf5e67a9bbda831e1dd7d8ae93c8038162605cd2ad2e5d9e7bc449c8b941d8f05aa7544be2f4c333ce52065cc196dffa62f6265d5d8cda213114f428de04e2404de639d40ea3a405b71b4aaf5f52c8152fb492d4f94fd9027300d931185efd044aee2b9937b6cf911e1fd0a2b3f1761c2274e0899b33cde9a27706f7a33304ac5188604c684acdc763a8795c537bef3a5ee28d49bd280b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/665], 0x299) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x100000, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000080)=0xc0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = dup2(r5, r5) ioctl$HIDIOCINITREPORT(r6, 0x550c, 0x20000000) fcntl$F_SET_RW_HINT(r6, 0x40c, &(0x7f0000000140)=0x7c0283a40842d60c) r7 = syz_open_procfs(0x0, &(0x7f00000002c0)='oom_score_adj\x00') mount$9p_fd(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000240), 0x3102808, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@cachetag}, {@version_L}, {@aname={'aname', 0x3d, '*--'}}, {@noextend}, {@version_L}, {@access_any}, {@dfltgid}, {@cachetag}, {@version_L}], [{@subj_role={'subj_role', 0x3d, '\b\x00\x00\x00^^{)'}}, {@measure}]}}) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) 19:28:24 executing program 4: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 46) 19:28:24 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0xc, &(0x7f0000000100)=0x3f, 0x4) fcntl$setlease(r0, 0x400, 0x3) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xfffffffeffffffff) fcntl$setlease(r1, 0x400, 0x2) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff2f, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001a0001000000a1dd4ed20000000000005e836635e2ede1841331a3f9b3c7da88ae497b6c2f5e3a7dcaf4f164ad3393ca993a4af9a3e476deabcc9f3e6a5960c4737ee7643da765649fbe9852d0cec48d"], 0x1c}}, 0x0) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000003c0)=0x1c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r5 = dup2(r4, r3) lseek(r5, 0x7, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000180)=0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r6, r5, 0x0, 0x7ffffff9) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000011c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r8, @ANYBLOB="0b0b00000000000000000100000004000180708870b47428d9e93cbe"], 0x18}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r6, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x94, r8, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x14}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x5}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x1c}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xbc}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x7f}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x6}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x12}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x4}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x7}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000800}, 0x20001000) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000400)=0x1, 0x4) [ 876.979299] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 877.000000] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len [ 877.015637] FAULT_INJECTION: forcing a failure. [ 877.015637] name failslab, interval 1, probability 0, space 0, times 0 [ 877.019395] CPU: 1 PID: 6987 Comm: syz-executor.4 Not tainted 5.10.245 #1 [ 877.020850] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 877.022609] Call Trace: [ 877.023168] dump_stack+0x107/0x167 [ 877.023943] should_fail.cold+0x5/0xa [ 877.024753] ? security_file_alloc+0x34/0x170 [ 877.025763] should_failslab+0x5/0x20 [ 877.026885] kmem_cache_alloc+0x5b/0x310 [ 877.027775] security_file_alloc+0x34/0x170 [ 877.028687] __alloc_file+0xb7/0x320 [ 877.029476] alloc_empty_file+0x6d/0x170 [ 877.030351] alloc_file+0x5e/0x5a0 [ 877.031093] alloc_file_pseudo+0x16a/0x250 [ 877.031975] ? alloc_file+0x5a0/0x5a0 [ 877.032791] anon_inode_getfile+0xc8/0x1f0 [ 877.033682] io_uring_setup+0x138b/0x2980 [ 877.034588] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 877.035655] ? wait_for_completion_io+0x270/0x270 [ 877.036692] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 877.037797] ? syscall_enter_from_user_mode+0x1d/0x50 [ 877.038893] do_syscall_64+0x33/0x40 [ 877.039675] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 877.040748] RIP: 0033:0x7ff9f8ea8b19 [ 877.041529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 877.045407] RSP: 002b:00007ff9f641e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 877.047017] RAX: ffffffffffffffda RBX: 00007ff9f8fbbf60 RCX: 00007ff9f8ea8b19 [ 877.048520] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 877.050039] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 877.051548] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 877.053051] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 19:28:24 executing program 6: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) stat(0x0, 0x0) r0 = inotify_init1(0x80000) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x101000, 0x100) r1 = inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x2000003) inotify_rm_watch(r0, r1) inotify_rm_watch(0xffffffffffffffff, 0x0) 19:28:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x30, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:28:24 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x43}) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 19:28:24 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, 0x0, 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:28:24 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = dup2(0xffffffffffffffff, r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r2, r1, 0x0, 0x7ffffff9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:28:24 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x80, 0x0, 0x0, 0x0, 0x5e, 0x96220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400028020000400000004f8000020004000030000000000000001", 0x25}, {&(0x7f0000010500)="f8ffff0fffffff0ff8ffff0f", 0xc, 0x4000}, {0x0}], 0x0, &(0x7f0000011300)) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4270, 0x0, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000001740), &(0x7f0000000140)=0x0) ioctl$EVIOCREVOKE(0xffffffffffffffff, 0x40044591, 0x0) syz_io_uring_submit(0x0, r1, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000016c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee01}}, './file0\x00'}) r4 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = fork() ptrace(0x10, r5) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x58, 0xfe, 0x56, 0x6, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x3, 0x7f}, 0x80, 0x3, 0x8, 0x8, 0x6, 0xfff, 0x8, 0x0, 0x7, 0x0, 0x5f54}, r5, 0xe, r2, 0x2) openat(r2, &(0x7f0000001b80)='./file0\x00', 0x6c3bad269d050c1b, 0x4) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f00000000c0)={0x1, 'gretap0\x00'}) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x1000007, 0x10, r4, 0x8000000) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x8, 0x10, r0, 0x10000000) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000180)=0x80, &(0x7f0000000280)=@nfc, 0x0, 0x0, 0x1}, 0x9) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3, 0xffffffffffffffff}}, './file0\x00'}) 19:28:24 executing program 4: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 47) [ 877.243315] loop6: detected capacity change from 0 to 32768 19:28:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x53, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:28:24 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x43}) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 877.271727] FAULT_INJECTION: forcing a failure. [ 877.271727] name failslab, interval 1, probability 0, space 0, times 0 [ 877.274137] CPU: 1 PID: 7007 Comm: syz-executor.4 Not tainted 5.10.245 #1 [ 877.275566] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 877.277296] Call Trace: [ 877.277858] dump_stack+0x107/0x167 [ 877.278619] should_fail.cold+0x5/0xa [ 877.279420] ? create_object.isra.0+0x3a/0xa30 [ 877.280374] should_failslab+0x5/0x20 [ 877.281179] kmem_cache_alloc+0x5b/0x310 [ 877.282027] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 877.283183] create_object.isra.0+0x3a/0xa30 [ 877.284099] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 877.285158] kmem_cache_alloc+0x159/0x310 [ 877.286033] security_file_alloc+0x34/0x170 [ 877.286930] __alloc_file+0xb7/0x320 [ 877.287706] alloc_empty_file+0x6d/0x170 [ 877.288558] alloc_file+0x5e/0x5a0 [ 877.289312] alloc_file_pseudo+0x16a/0x250 [ 877.290203] ? alloc_file+0x5a0/0x5a0 [ 877.291011] anon_inode_getfile+0xc8/0x1f0 [ 877.291903] io_uring_setup+0x138b/0x2980 [ 877.292775] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 877.293849] ? wait_for_completion_io+0x270/0x270 [ 877.294884] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 877.295999] ? syscall_enter_from_user_mode+0x1d/0x50 [ 877.297088] do_syscall_64+0x33/0x40 [ 877.297883] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 877.298954] RIP: 0033:0x7ff9f8ea8b19 [ 877.299733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 877.303595] RSP: 002b:00007ff9f641e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 877.305182] RAX: ffffffffffffffda RBX: 00007ff9f8fbbf60 RCX: 00007ff9f8ea8b19 [ 877.306681] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 877.308169] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 877.309665] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 877.311156] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 [ 877.316538] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 877.328283] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 877.330780] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len [ 892.514010] FAULT_INJECTION: forcing a failure. [ 892.514010] name failslab, interval 1, probability 0, space 0, times 0 [ 892.515530] CPU: 0 PID: 7034 Comm: syz-executor.4 Not tainted 5.10.245 #1 [ 892.516642] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 892.517721] Call Trace: [ 892.518082] dump_stack+0x107/0x167 [ 892.518544] should_fail.cold+0x5/0xa [ 892.519033] ? io_uring_alloc_task_context+0x99/0x6a0 [ 892.519711] should_failslab+0x5/0x20 [ 892.520202] kmem_cache_alloc_trace+0x55/0x320 [ 892.520786] io_uring_alloc_task_context+0x99/0x6a0 [ 892.521526] ? io_import_iovec+0x1120/0x1120 [ 892.522101] ? lock_downgrade+0x6d0/0x6d0 [ 892.522620] ? do_raw_spin_lock+0x121/0x260 [ 892.523166] ? rwlock_bug.part.0+0x90/0x90 [ 892.523707] __io_uring_add_tctx_node+0x2c6/0x520 [ 892.524321] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 892.524975] ? alloc_fd+0x2e7/0x670 [ 892.525443] io_uring_setup+0x1fbb/0x2980 [ 892.525968] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 892.526624] ? wait_for_completion_io+0x270/0x270 [ 892.527248] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 892.527918] ? syscall_enter_from_user_mode+0x1d/0x50 [ 892.528575] do_syscall_64+0x33/0x40 [ 892.529042] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 892.529687] RIP: 0033:0x7ff9f8ea8b19 [ 892.530187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 892.532555] RSP: 002b:00007ff9f641e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 892.533536] RAX: ffffffffffffffda RBX: 00007ff9f8fbbf60 RCX: 00007ff9f8ea8b19 [ 892.534438] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 892.535372] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 892.536272] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 892.537212] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 19:28:40 executing program 3: r0 = creat(&(0x7f0000000000)='./file2\x00', 0x0) fcntl$setlease(r0, 0x400, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) close(r1) truncate(&(0x7f0000000040)='./file2\x00', 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000100)={0xfffffffffffffffb, 0x0, 0x597}) 19:28:40 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r2, r1, 0x0, 0x7ffffff9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:28:40 executing program 6: ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0x2) getpgid(0x0) getpid() perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa418b6d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x6, 0x8}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001300)=ANY=[@ANYBLOB="010006000100000018000000f80ad1c5e839aa4bd261a3cc32354d1a3be4e3f4b40f39e6d7c6f6036402000000019bb4b01ae8f1e9814dd573d7d64ff8572aa6128d018b5cd6f9396c21336ceeb4a38e0a4e435741876b8d86dfaea9d551e80ad53394b8641332d401000100000000004193e431ba9320e88feeb256d48f7206922789ac2465", @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) ioctl$sock_bt_hci(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000140)={{0x2, 0x1, @multicast1}, {0x0, @random="763f245057aa"}, 0x0, {0x2, 0x0, @loopback}, 'team_slave_1\x00'}) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x0) getresuid(&(0x7f0000001240), &(0x7f0000001280), &(0x7f00000012c0)=0x0) syz_mount_image$nfs(&(0x7f0000000100), &(0x7f00000001c0)='./file0\x00', 0x740, 0x1, &(0x7f0000001200)=[{&(0x7f0000000200)="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", 0x1000, 0x8}], 0x10, &(0x7f00000015c0)=ANY=[@ANYBLOB="6c6f00000080272c6c6f002c65e0940651ce125f622a8722f4a5d358839ef1e3de99152c446b4023d03a8dc5058dd50725badd32b6e097e2cba356d66528eaa311b1e7341815fb65a82dbff7141616364dfbe0bd28b7747e3078535a91767c0ce92546f4ac3ed3af8e556bc6c98da5f072c4ee44138fb4062856e18c969af0b1a69b334356b508a937bd109b162cb907b70c4ef4134beb526ecdd68761188149575a3cdf5f25594dd94bd150bcd0819be8d1c0283ff3804172a322013da83aada89528c12646ecf30665fc5615e3bfa3aea2e2", @ANYRESDEC, @ANYBLOB="2c666f776e65723eff8b250d5ec7ba5992b5df5c9003e805b33f749708e9131cc208e4599803a835b9d8f42a62decafc6a4c344299be0f5140d8d0a3d5a25188", @ANYRESDEC=r0, @ANYBLOB=',fscontext=user_u,euid>', @ANYRESDEC=r2, @ANYBLOB=',smackfshat=lo\x00,func=MODULE_CHECK,obj_type=lo\x00,\x00']) 19:28:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x300, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:28:40 executing program 0: r0 = creat(&(0x7f0000000100)='./file2\x00', 0x0) fcntl$setlease(r0, 0x400, 0x1) r1 = syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x100000001, 0x3, &(0x7f00000002c0)=[{&(0x7f0000000080)="16771839658e6cfcb47efc48314f54e9bfd5a6445478c0e3dc590eeaaac124002944f3f3c4ebefcd21cd144e4aa1e0606ba1b8c98bf5966ae4304faed6bcd139eca5ec25a215ca0f6be2dd4f6b16a26d05", 0x51, 0x8000}, {&(0x7f00000001c0)="c5ea7d273723b8c785d30eb3174de87a3a3f253203be62b99ba5b190243965e653b49b7eb3f60572e3cc57d40d1af2fd8a184bce79ada5c07f3bff3f5991a20297281ed14c32888e492879397d64e1b55c0c7a79eb45a19eb5a22b10e7ac4dde1c1a3cd16ae34a728c65698e416556b61e79297e0f9dba799ef0b0c1e5f9fa17f9e2b05e540652c66e48d9e35d63f07ad93e1b5c883761ca047c952faa552a02f20e6d08d7d037845f3b718ed3fe82bb957feb637ef47762b1f7536ad7c47d9b9cdc6422af591f4d299c19a11302991ea935788f22d96b585d942ea94aacd3f5ebe0b37836edab63b9e886585791159ba6f3f4f58a173db0", 0xf8, 0x6}, {&(0x7f0000000140)="1e016ccc4ca24b242d3d9ca70e", 0xd, 0x1}], 0x10, &(0x7f0000000340)={[{@dots}, {@fat=@sys_immutable}, {@dots}, {@dots}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@dots}]}) dup(r1) fcntl$setsig(r0, 0xa, 0x6) fcntl$setown(r0, 0x8, 0xffffffffffffffff) creat(&(0x7f0000000180)='./file2\x00', 0x0) 19:28:40 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x43}) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 19:28:40 executing program 4: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 48) 19:28:40 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, 0x0, 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:28:40 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x43}) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 19:28:40 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r2, r1, 0x0, 0x7ffffff9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:28:40 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x3ca, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:28:40 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x43}) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 19:28:40 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x1f9) close(r0) r1 = socket(0x29, 0x5, 0x7f) fallocate(r1, 0x31, 0x7, 0x80000000) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r3, r2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r5, r4) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000002c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0, 0x0) 19:28:40 executing program 4: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 49) 19:28:40 executing program 6: r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = syz_mount_image$vfat(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f00000001c0)='./file1\x00', 0x170) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000003c0)=ANY=[@ANYBLOB="030000180000000000000000", @ANYRES32=r2, @ANYRES32=0xee01, @ANYRES32, @ANYBLOB="2ea611b169578ff982c297b3fe47679c0766696c653100"]) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) dup(r3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_INTERFACE(r3, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="04002abd700002000000000000000c00990040000000300000008ac6f0ec595364a611924e6adb58623134f9c5c4eb3a489e37db7f8e6c365dd808c8f5a30ee08972a7d938f4d65e1b4815824ef0dbc15124bc6016010813f550793a9c13a22e11ee6cc13539a0dcbf1cb65abfbcbdf8cd036b11081239838fe3f5b1c91d3bd845741995589ecbbfd924723da3a178450fcef23f937a8e57a971528561f671077cbcd957a9dd1a59d99d096b5daec630db188ea55acbcf04c349595b0cda18972e46c86e9f269ffe1ebc8884c21e56e70b65ab31"], 0x20}, 0x1, 0x0, 0x0, 0x44024}, 0x800) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000001440)={{}, 0x0, 0x2, @unused=[0x1], @name="22aa1f5488b9052868a3fd2b828f3ab7ca3e83688e5f8c8cf9768ade7918aa9c1332bfa292e9672e7631795ddb0c8197dab2dcffea9d2f0eace285aa3e7e207f9f3f8f86d65977c79856b836dcf348eae2d39703d0629afbafbf00d51e866f947b60b32ddad93ed754db200f8234549d827254e7f29f7f05bc6213ecc9dceb636ab84750df44b4b8b28d4823072756ee7c216e47afefcf8ac87959c4009beb47e89431faafdf7c2cc24abd25845b303e42b65b98a26c6315f880a09b64cf29027664720691d4b5da4a8283a4e0111f741a75518cfde704268b6c9c1c65592702e602c355824da9240e83457e2e08064cfa205cc00694e399c8e926ae6509ee184ed996d7c553ac55e3f003a94f52ea8bf27a988e5216d762537686422a4fd55bc63bd444e95ff2377a5fed5d8e75fe0a5dbbf916851f3fe0c7818ef1a604298b662072885ee5510e263d31abcab02db827d71eccedb843401e7a8302076b6ff27853481a26a37a92c1613dee981d1c406af43ca5a56bb3b1e78e2c17363e4b322d12256664da2368d0bc87c3726d00a68cef044d170494a6800edc32d62e3d53a6acbc52a3027c366ccf2bc517820aaae1f71cfb856065e6ea74f482c3109e49d260c1d09074cb373df2c25e8fcd1975d219c48a0c66194b32dcdcd3e778de657a476eb17f7d579e151bbd70b2b2d6735a9424885c21ad1406a7d03fe73d9378d826dcbbd2cd0efb59d977bd376611ad9b6c8e3917f04a5c2f353dbfff6dba7318cca5c94b2571ef9bcc0052f5c3ed9c5833eabbfb10f08d9814a9da54d26764a9783f03ba39a0e17952c33d08dfb262c4947f856600c47d537a2b042bfaf85062462ca686f3e1ace31ba5069242223931fbbcd67ab23074094c40b60742ba2f722a97ce8f0d9a2ae260eb0724b7d526e50912100393e9d04a5566c54292ec9fe51b76daa68fcc2cfd3844b8251e191f273daf8db43efd2bf66da54a4c8616860a9524f6d5c337b9c10a8376b618ae21bc2747b4700f7a889951df8c3a7a30842e1a69a3cfc11ecbd97a00e4fa3e675b87e98f1ea14e0820186fe0be0c9efabf078b8ed467d94d705ec4cc559b187bd62f33be7f2736e2077bfa74db8c616988120e73200dccca94dfb3d91ed11fe1d5e96a58a3b04f4bfd5b37e865ac1cc6d39e1b886d09a434ff10dd93d7e35b1f6285063946989ed269cb9f012847f7f8003c5b6c44d91355a76e56247b561585eacbfbd47ebd5d563423695ed056679de9750540a6366ce9aad3f6a9ce2b054d18ea6c401dedceed61ab7152910c4e423c47579271f654a10f0d7b0131756f4b137703e86493e9cfeaa6803b4c24951191736f58d6302fd1bf8d335b3d6868c7817a463aca6289751e47ed22b9b4024bdc33e18dac8e93774a45201451f93a21bd74336781a864689fd9b5add61237920d07433b33201d8575f04435f7401649dbb623871434ccbf38e45346906539624e36f1044ef4f36d20f93e5803a8a6d63ba1d69980872618fc71bb86c197af855c1d571bd82008ee611919a79b18838f2168c3a3e48eb6b93ba6e11d7b1476d4f78962c20c13a6992c42425d388f58a5946dca948435236f84ddab1623e811899eb770c51fa42f4df10023bc53944304f51c60c13bb626fa82bf7cd0fea1936af7902a6ffb568eb066b36eaf5b71bfb007d1c6ddf871bad2f58a39802d2b6ec0ae5aa3aa6e587596b2064c86cd8e47cf428d2f46d28861a3da0bcee9628022973aab1215c9d7fcb3587f33f546718a2830e546f191407763c1a0abe656e4e5da06d8ea0e0d10759065d81d6ed2f52c57b94bb7d1f0721e497ce2958e817d579c5371db1a5cd76c86814368c9fda9145a1e767ea5745e6e7c0671d9ca927ed92a05550b796941a6f2f277729f8000fe0a0c45ad75bc27282806d1f9d8b339124297adf6970abedc2717ff7236b893904d032b47e1ea42f6ad1427b61eea9af8e0b7a3e1eba25100b84e37b7cae743c9e672081014766fef2da928e98968705b17a311a5cdcae0eb260b5f5253b359c0f6effeca70079929f77b06b497f6526ac0ed623e0bb60bc761404caeb4d642b0598baa2e2268ccaeaab91c641cdc352b314547cdd57d3e720c77d0b59d1568ce3a82a6ec2f0398c45d5ecad2c40294b4c6708877b8e7e5e187713da1dc5cc62ff9510ac14fa1f7df5f37e5146a936806beca29a38d011f43ded7af3ed2f7e945d9179aaba57de54c8bce6f65227efff4f08e00042b3408d5b8c127862bc3cd9f969e38bc8c22cda945cba82448b2b8920b115081e095daad9d184b06f119ca82eef8bb340accd77d140b6a46039cf2f6df83f42f96d5ddaf16a7527fbac7907033828e3c6272c86afd290abe796197c82603c923e9347e5d5146c2cf84a2ec007c7f66b48a5c819926ccec7ccd682a2eb87f52c0d784ae32563abe63ed274ff7fe2eb8f7c241da7a4b3fec63d29ce7cc4e10fc6f4ec697199faaddd8b7b12039214ea509098ca339f4cbf3a1b33ea8d2c5cbad16e88691492b11cd792d35c145bc983666702aa2b8d711aabdce08ca86dd53f5b52fa7178d9265846be1f8da37484bf970751563c31de9a599a15319817f8529b0757d7a98a50b0265ac93082825d6d5f2956bab6b97596d0ddd0fa9a8a66f8847c99c975e0e1ee917f73edf104c57c8217153b4242980aed9876e7167d65fd4d691e2395eff58743443acb04d14550299a4f4435ab688811d1238a0ba76898d08a6a318ba5c759caa3f795fa1d46bb03ee0115da76422409a83bdb52e972975febf4838a8b1263f223561f87831e4c633aa197a5c477df0dc4d881f30afa20fa399134192c983f6b64b1666ce3e562110e5beb6c5c2c8936741270c37dd32f373d3e977c944541e47540dff9ec2c3961d1e81af89c431c66570809f81321ed6421d7bf104f823c05e9411b823128782181dfb55c147aecaa04816240c7c9019cfedb4886f3aee9e42ae09215404257158b30e41d8f76fddc6674048cf98ae4e8dda7b4d33ddd4fb4a69a33ea2fab130d7e8c17cf795f43253aa5f449ddb75fa5623909792fcd9bf81d071b44a7e710b7a53772fc42d6ebd96b342a1a1db15592dcdaccafc1cdd0eace0e0d73758af451a2a734d5e860599e55df70c6bb325ec91d4bbbefbc0af2831b44d40a427535e80cb97c64db41c6c42bf2757d7fc25145d0988c991049afdaaa3ddf853b23dde7115627d3ebcd4416f17e2de8cd2087a0b45631b080c859718092d2888b643e77dd054829e9630d1ebb07f3bb81d14836da2ccb406c38295b48cbf779eb0ea169883f7f63d43e48793fb7cdd07340ef6d0dfb515f56b258681526850455a2299225b91ed7c3a2d8f528157dce720b13b5ade45576de9c5e90bfc28860468ce14beb77c3324458892ca52332a1cf6ef66607fff4f0e5d1960134c85968de9d5e6706b8654b57ca17260d4eaf333cfa82181f7cd0fd4cf2fd4692abb6ac778b007ef987918615689ebebbb8a887ea7e1f60fb6c1d15c7c701c91233c0858c27c465ee589dfe87c6e89b0a025b51603fc29f06204f6c5a52850afef70746c2dfebfb8514de2801985b710e344986fdc404584152e1ddab3597e80e97783b3f783475b1ca20a802a4c201bd6bf5cbfb22c42a7c508fc33c4d553064da8f86d9ce4482d871c29fc83b35fe23cacf02640bf8eafacc48ac0c1399ad2a9614b1c5e561fdc8f957ad7bdff8cc8a95ea02d784d956d0bd25b32d05975e46081f69eaab6cf59dc8ece1c9eb02a598b9caab9233e11313aa8802b4806e727db0a573ca37808845cd5c196bc27baa92a7092131d02a4d324f3f68ea31be4216af63ff8584100d59039a60743adf63baa728b0275c63ee16ae5adf53651d4558ff92d822fd8b9dfd033b96751afc4c7f067d9e3cebcd26aef7c1bdbc13bef5a22546f33870f767d6791c9243463be04f190115081862c8d641b4aff5d283198f0bb7cf11e215a6ff8638ca3df4d3edb78f5e237d8e4151c16db9eca2f537ed4691663831211ac0e3f8b56b0503117132ea480f493b04151b550ad2d97815e02c035ffa2631f31a3112a03479402a8b2b488ee1d25d961643faa9d865c551896f6d1e757715fca66c18e71f163a14525649c3913b22e2472269194919f3364b719033a5aa439d7942931e6c310cf99e2a4b9128b4b9a49e73971ca2cbb43a80c117bb6ec35b725ff64127031bc326e667946dd5fa9939bdf1be7a68fcc2cb9f2643076f3d18a85f55d9e0af27ec81b2689b9152372963838df1f411681b1c2104d87f4c2b9b42c3ef14331987d349bc44415873edba9906e4b7766985308cce8bf5c5889018875c5067d7da0894913ec23783923d215311131cac00814fbdf6118814ea4b41f42faa5f6c31a39b8031ef91e2c667f3c010f123551fcd8a0e00683a211adf25269939f98d0c7b24e91424759a5dbe3a9a447d22e04b7a01383922a383be6a06d347d074a2ac8d37c71ee5552919983b407906ebec236c6b7a892ce5c09d5f8fb5bab8e4f8d1845fe16a163092a7b1a32e88459b3f1a7fcaba24344efd670e16b76d87cb449882c480c526bb2a82e39cb2431d2bf45418a3216cee76fe4871679ed786ee9044540f786458e0fea9932e2bbc09edec953f865f0f731e0f6b99b7a1a950da0b6fe3d3c5aed81df9b12c55d885131e7d1d5b3625605ba840de080dc7f21a7f17eaa464943775a4b5ecd503f69e0abb372b3f15d9ea2e650fb68fb8cf40144ea3111b7d8c3d0c8f1651d6186893177c1d28455281225736852b476f6b968a1db59855f97a5d29794f392341fdfcdafe9972eefe3e782fdc34ac3fd3d189cab5ed2e305deeffc870c7013cab5894b58a6155a1b5151da04b8d5a4ab30c2461bc56f1267decad6374f509c863a4c11fb3c7c249aa401d7d662ac8d9a4cd6faae5dfb86aaa55d57cb320dfc4942d0b6831a3aa6de45df02245209198e0431e6bf44b1a8e2cf577a6a208397b63aeb1309037ba379a5aea048c9698ed30a77e4f184a1da23924894b1436c4254e5615306d8cd7242e6496c6838cbd0c9ea5dec64a2188d0722c8cf4b97e3b7741cbc9a084e814bd7ff3ca8a7d13f3057d634c77eb5a6f17c0d83285cfc736dfe34c4d3218601b3c27ae91057bdb41ed18ec47a74a85a50b9f1ec573bfba72e5e076405df0774ad8d2c7f642ef01ef41baae4e64a2c89207803d00afb36e71dd92e4f4a666b67e7dfe43f077dd6b124330cb02f421cc04e121f704af9311f55e0ac40d57c6dc148b347e54d7948fd43efefcdecaacc042f732ce648307c3e8f373f94a829b3149b9a2e37878f0719ad697ec0d801aee30d2350333454b5eb8cce9594a0a4817a775f8b6126d673f67c9211e57a63961cc1a18f4611a9724484c1bb8ed098e32c9e85c5d68d8487b34daecabdde075061f9ba4f39b41e1166059cee1b30acaae3a2bf1ef0b03f301ff93061942b840c93c1425d44cab7926b72121396d3a548089e576c05b40853b50fe719c9d273d7853eef1d686beff3d0797c5ae0f661467d0eb20ff6a6db49db280bde280cf65eb2baf7d1a3dab08dbd6f34848b8f99bddf7b7e17a5b65bf69fe3a9cd309335987c1fbfa2b408f9e3f313abbc3e27f114a016772545e3b34be6954b9a15e1b0d6f220df581a7de26cdb3162cebd7cd542fbf3125b"}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000280)="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") r6 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fstat(r6, &(0x7f0000000640)) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000600)=0x3e) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x10000000000000, 0x4, &(0x7f0000000440)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011600)="ed41000000080000dff46552e0f4655fe0f4655f000000000000040004", 0x1d, 0x2100}], 0x0, &(0x7f0000000140)={[{@lazytime}, {@jqfmt_vfsold}]}) [ 892.669307] FAULT_INJECTION: forcing a failure. [ 892.669307] name failslab, interval 1, probability 0, space 0, times 0 [ 892.670752] CPU: 0 PID: 7055 Comm: syz-executor.4 Not tainted 5.10.245 #1 [ 892.671576] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 892.672582] Call Trace: [ 892.672906] dump_stack+0x107/0x167 [ 892.673347] should_fail.cold+0x5/0xa [ 892.673810] ? create_object.isra.0+0x3a/0xa30 [ 892.674370] should_failslab+0x5/0x20 [ 892.674825] kmem_cache_alloc+0x5b/0x310 [ 892.675315] create_object.isra.0+0x3a/0xa30 [ 892.675841] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 892.676454] kmem_cache_alloc_trace+0x151/0x320 [ 892.677020] io_uring_alloc_task_context+0x99/0x6a0 [ 892.677616] ? io_import_iovec+0x1120/0x1120 [ 892.678153] ? lock_downgrade+0x6d0/0x6d0 [ 892.678653] ? do_raw_spin_lock+0x121/0x260 [ 892.679169] ? rwlock_bug.part.0+0x90/0x90 [ 892.679683] __io_uring_add_tctx_node+0x2c6/0x520 [ 892.680261] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 892.680888] ? alloc_fd+0x2e7/0x670 [ 892.681333] io_uring_setup+0x1fbb/0x2980 [ 892.681834] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 892.682453] ? wait_for_completion_io+0x270/0x270 [ 892.683044] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 892.683676] ? syscall_enter_from_user_mode+0x1d/0x50 [ 892.684302] do_syscall_64+0x33/0x40 [ 892.684763] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 892.685382] RIP: 0033:0x7ff9f8ea8b19 [ 892.685834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 892.688086] RSP: 002b:00007ff9f641e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 892.689001] RAX: ffffffffffffffda RBX: 00007ff9f8fbbf60 RCX: 00007ff9f8ea8b19 [ 892.689864] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 892.690728] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 892.691584] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 892.692445] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 19:28:40 executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r2, r1, 0x0, 0x7ffffff9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) [ 892.726830] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7062 comm=syz-executor.6 [ 892.772581] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7062 comm=syz-executor.6 19:28:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x3d2, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:28:54 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x43}) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 19:28:54 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, 0x0, 0xa001, 0x61) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:28:54 executing program 6: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) pidfd_open(0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8902, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1f012, r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0xb001, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {}, 0x38}) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) 19:28:54 executing program 4: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 50) 19:28:54 executing program 3: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f0000080000000400045539545cee", 0x22, 0x2100}], 0x4000, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) execve(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff9, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x3f, 0x0, &(0x7f0000001e00)="171bb59f43f345f880c182f5b19d0540d4eef7a7c9892dc84daf27a1f9c10b733e9e6a22cecfe28425edd1e3b4a1c5129c3fdaf8183355e89e8db85115f0e7a4425d6981d40c5164c58cb111c164f196a47cf931af8eaccb9c9c5f928700aa774f2f2710d1537d387485e32961e85cce43c5db5f30558db9a52bb3cfa53bf4b3ea5a8487ff01fc1214fccc0554a0fd4a1fa57b042bc556c9085c4240d90f68a2a5b308cb38e805bd7f0769b069c94a1ce146d23fd0e353b3da6c7dc96219fa467ad9e53540c0e120cb7e98c0e94e5c6bfb61977dc0c084bd8c60410f2118ce977fa03b52597d6b24e6b89ccd05f08565b984f213962da46332cb799f4bf67c74c4ecec3ba03dbded9801869e18adfbcca47b53c530d83bac4fb6a8132674df6d831050dfc98f8116d9a901c6ad1edeae7e47d57bb23a0fef07e355349b505ce2584136270db48dacd481bb3f2cafea173d03156a5e8d602016c641c6a4a14e71e553543849cd1b3b27c2fb116be02b6aac024dc4eb9595532acec33e3e0317fe4060d4e5487c5b06787aca025c4ed408e76bbc4fa1026c65b4669c2dcd54404423dbd3976eb8a23fa2e4c91a4bd12f3743891de3e5b59ddc8e04e97cd6490ace43bc1937b7ae0dd99d7a0c0e637b1a737286eb1019d60d575540d139ee007123f963d79b5a362690c0bd46b97f6397723228c99f0b032c054d3138382c43fdc76f93e0c23a4ef1d49a10411cbf91672400c48a0c219e3deeb1b3153253424970594f12927ef3f045ed1ead964816a72c90cbb89a20a345fbb7de8084e5f645a027b1fa012e8a3aa9947aa6f0b313d01529283dfb844ee8ff015d0dcae26a180233f2a2585ea385e0e299bbf263aae12260dcfa1ec1779568eb4e64f4d37654690816251c93ce1abb41fbb278e00316b43e1b59ec189d65fa9330cbdff244f3166651ed905bf26732f266775d92bfebe4c01d0c82251a843fdb0177511af6487e666a9aee3762ed1161712d4b6433184d941f1c4a8d4467b304504ab249572f05cef60deb1215e82154214525d9ec4a91c974670260b0ff2fed03fe20c8e8053c263af3018711c0ac0db7e1a101765fde0e42d3b1a68e02cc4117d9a435b9d8e2fee5f9cacc02be086c4973fe80b0ae44d2f0ccd35202b17da62f2ecfaf17ae26cccc1e12188cc72bb453ac85756b5cff2419c5902ed2ee6c750e1af1e72f8895011564dd38413b800087fb2678dd37bc7e86b7d3309950d4978bade16642176533b0bcc3ad438d6e11ed151213b124d3b1de92d756a3be219e97304dc83ce66ef6744367a0a549397b4f6ff88fdd5b301a7bbc4c1dbc137ef8332d1cfee030d0381555564f4056ac02d613e2324661f581b42f8584ccb618df25b06b4f7b3158ae690464c7e84ae02dce53a7011d6017718a46afee7f7b9c88f04f127a19306e6c9c0bd6bb03efa213b61d4af1f71f48c6431ed9b625ed4fb0f633b7eb0c45a39a27798a5fb4679f464d253c20502d4a68eaf613a0da5a13493e8262fff1d3a8a8a98c260a7993723bece8ae324689e14f966b2a164591155cec8bd8c97232cb9304dc00df20a6887db62ada834e5488598c21857c7630ec3415ba4e69c14e900c911936c721de3ef24422f6f80e6fa831ec4bdd67f23e454d9271fa0859524c85abdfc062904d529c4588e36198510f973370c7b589a54a9689195262a7df8e22bcd31aefa29df618b32590c6e00390ad333316cde4a942fb66cae65987b0690ba6d0c2539f88f714919e906f652f707308561d022ce3de11f9ae45ebf434c6685f1ba2a156b16d03004ee2d265fef18b781f31f13f43cba38b0738403a7685b36032553ca4364fc0de4297ea035ad9c2b67107cec6676cf091ff6f944f56fc4175d6092988fcaf358e635b4e49829d1d10acecd70aa88075390db0963783af1c4397f33bd6f19fcc3e8e8d4e2850400d66b5828ee1ece7a0565b5f945c30536e5356ee883a7f9d36a7143afe17062081d8646b39789e846d2013d10da7353c744ffe63692f1ef398f918e666655876654a3c0e9250fdc260b7376f13e92d5325fb11a909f00aa5d292af923099645d15da9004b33f773481c5958cd3dd4536416af7e15a5b53bb2f1078de987e5a61489d7e266612c0268f44df66cc56d426e5b66ff7c34b665e2d81f13d2247244e4224ab385eb5d4a9a1301c4cc202363606e1ce6e7248ec45a1b76d397fa12ff73ae3e5b722f2bc1674704991131c5b0943c71a38f019a7943b4338018df566c7878825c488a525849f85a1de757eb8ef3929e667f0c7acbc379383fea8b58049f33a1c4e192925a19500f57a9a94cceb6787f01536f6803335c6937bb0c2a7993d6566f6c8e34ec8dbb80a132cd2c0aeca0dff6fe4cceada7155ce4518978984d2e07a14a8fb457bdf24d1e1589830eb7b414a1b2f39d87a798a91babe687287df47818d1f39dd3ebb8ce018537e2a70ee2f115726927e6a78a3bb8e9a428576228c475ed498a0a04da00b8137eacae00d275de0b7b3645d6c172740ff1e666b59567d24806896fde747d354e402d6460b163e9adbfbabec5dc6c1e22dc593e3693af89c531b8ae7ab6c9dc7c12f0b3a9e0aa63956aaead1a81301b9f6438dcf1199e51c65d3f7b88ee98923f5c1bcce26a22ac71b3a122884ee67734373704467595ad7a733924f473fcbc4391f3b34a9269058f24f79e67fd797e07df46d8fa2d98ebfdc9d6271c4353528ca06bee80e136e907ec59284563f14585daf6fddbf76fad7798d4c60137e06647d9b47a5c769d3b6eb9a9a12b96eb12009a9d83e5231c4d8fc1c2179d1d4ea2616efbbe0da35350ac79ed613e6cfc7df305a9fab49539a4acfc516eb8a8c75c936cf7efac621f0b18ef28b3899658771e69061302a4936f030b475c414a3863b2a2d718b676aff87158a0e698f97d904ed4960ec219b1bf2da522f2db2f35294c072fbd54d601b52f7a6d6b9f8244b36451b9153d81c310c4b17d179158879cd0fcb6973858091a868cb3125397f26ab6a1910fef2d1da887cefe3b458a13b2a7679a9762536c7cc1f93783406b4794b65681775178fdeb34baf66ed57c968aafdd8feb156bc127fd983329db4fd36c21d31cd457034d8f735a44a320af81d8ad7159ea906a5deea9e254983f3977daf1afee53be0e4b8eddf113c3012aee84bb4d69440c54347facf7d4f563f64509be8bd88f945412cfeed1667b1ccf0e3f4b2f00969b849c27f16ba9f884159d28d60bf5451da403599acd36d6b5c6b46e009177cdd7175646629092fef4fa65e44a39cb451d2e9f71ec0f2c8c9f670b02d8217b94f1b32f2418459bca8d06e81edd746e91e6295bfefeb9746245a03a582200ffc9e7b36fce8bfb0753e903dc878eb7537c2c903a51111ffc8196c0cd30bae40601b14316cb68428dc417a1a8368ef0a5d13b11ed31ae8a97b24a1a47c3a7b70a3b580bdc9355e35800f0058835fed8ba80f4b3cd97752d13bc0873e202b84d9fff4e89afbf33148cccf20716c60fd47590602607d861d317590c3bf5bb6cf55328e61703daa3c58f8bc07aa8f66402265361a5402239731ee148c758d1ba1a6a6970db4d1abc4809abef1e14940a322cdc8e0b2203b0d631ab30648be4f28a7641bbbaef6213346e626da0e8c5089e255ce0f354e61824a8200c33acd74335f7d8e8608f3bfbd9705af99be4fe08821c202a3b67cc2069a4447344537b7bc5640af3f52464de277d0e089e1758c12823f26e8b2262d9d35758ae11778f3a55d019e2cc88aba9c1f6957b04610c1540f2c81b62f234709b4558e34cdae43dbebdfab73cd70cac0be637348eddac1550cc47cd1b1c9154d30af95977a26922b57fe2e90dce4424284f6743fade98b4594d8f2c6c22378e315fc25705b9be2daa7be7f3dca2d9c1a96667b453c0ac11ee6cb491e40248859a3464f8570558d3f3ed4bcf32cd3dca6c9cfa312c338aa4c6fec17cbe6ac064f0eb2a4b60e6b215642ccd46dbf9cbf6156e70e4a83f7d94d0de24500739bd6336f76f8d5c35941261e231b1156301ddfd2a1c26513d5b532bb58c3d0b206e1d52548d29f7db202d1918b7b4c6536937ca62286a107d2987710a71af075ebf3214fe22c4cd0c27fa38f5fb19b4d184f36cd24c4313f5b1c905aaed38724e74bac65e960c8607393d80e5e47b4a971a7a0c55c26fdb6ba868ac409414033bc5b6107e3bd76ee6ffbd151ab3fb2ce9a89c5c26e3fd360f311086219c73235edf5420b9d628113b998cca5afed243379a7a0bf56773ff3c38bec38ba6f9d10e5154695ba0820c1768631c29c4b07e77682bddab347a809d04318e74e1ff8cda425ade28956e133eebc844c63d4b2c6dadd4e1bddd316226f6968af49ce35eb45baf1d6e7aacda63ac72e809c44b53d1ed82f2b2c7ea265299a638c553d6f1479c74ecee62d37f22e765cd9526678a15eca616fe33ab3e8be56249f5a6b2d6ca143f6975929ce6056fb3fdc2c62c9e7961f3a0776bd3bd8214c61f95d6ee7e9af9a9ab9cde8fefeb48f7b0de835dc7be3a4e2b214821e1841fbb59b1101fe306b7742e50d916c346e77dcca74489487809fd332e86d9feb7a827d117893f1d9fb38bf3a4c50564b54996f09004690bdef8a15ac634da892d40ea7f826661d477a825bf64e8b44ee379f76cce32e3c0ddaa6d4aa0802f5fb83cb93f53e6dfcd1fdc3b26c704bc2ce9bfb9a1715defbdc10e7a9a357c904cbbe34505d3e2a97d53ebef34a414d2eb2054910272f879962875f5058522ce6d86759adfacabb85dac5787c767ab2eff7f268d83748496a43f020911d72f9f06f9d7be549f01d4d24a7add913149a481e091499f073c82bca2c0399dda5a3adc639a40922212dd664bec98fb1ff4c809519476b85146ec417078e6c3b7c33fbd3b3e64bd4d1b9e8e35cb8ca2b84b3ffd01a128d41165d6734c4e81d656baf983ecce58883e565bd7f7ba1eeb55f343d626b1e11dcc214e10a283205e4fe7d8fb267e4f31ddd886a77089ceffe0c2bae1c26ad1c0540db0f8eef1b48b81d4b41ff74c1637f0e2462f9693cadb7687ff065f6541d3e35f13c975bc28621ac43acb5e0a45db3de4713e8d253f24706d8ddbd648ad9004a635d107ddf7d49c18141f23df281cb97cc977e77cef50b6172ee5c5e991b4945d1a3fb5d83522fbe23bbbf3b0b4f265640170e699d021b74542cdf2c22c7491ea2e42701f6c9b6e72abdb88772c4e2bfa8b370851dd98187734ae78d6824a567d76af43cedf5bb2fa2b1a92f7dd4c0c384833ddf555d5368b4262a4a10c09d3b495a46adbd28ad65389cbe273eb2e7ac44c90977ba7f778e390fef3a0cc1b4e6ae4c549fb5a965729a0c5eaecd176f4aaafe90a4c3ecd3ccfd7c4441e3f2dc52b9044e1ceb4f03802a43ef18db492d073e0c7b063200554a8980af76518cd8c8a2ace2993c6e9624086b6be8746696d227ca37cf1afdd371038e004f4fad5efa6f040372e7ff5595af6bb1cc0b83006768abd892d9d6ccd5066f7891b3be65fad4d972244c78fd0d566e7128f28f59b742a3a0bf0ff0c27b80f256bbd5236504521d27f6134159e5781fea137d800674b57822e5f5410a0315dcc201989af3", 0x7, 0x0, 0x0, {0x2}}, 0x2) creat(&(0x7f0000000040)='./file0\x00', 0x20) ioctl(0xffffffffffffffff, 0x3, &(0x7f0000001100)="7f89dc22902919803070") r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x5e, 0x802, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwrite64(r1, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/timer_list\x00', 0x0, 0x0) lseek(r2, 0x9e46, 0x0) dup2(r2, r1) getdents64(r2, &(0x7f0000001400)=""/53, 0x35) bind$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e24, 0x53e, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffff}, 0x1c) syz_io_uring_setup(0x7184, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x40000000, 0xffffffff, 0x0, r2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001180), &(0x7f0000000240)) linkat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', r0, &(0x7f0000001400)='./file0/file0\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000001580)=ANY=[@ANYBLOB, @ANYRES32]) stat(&(0x7f0000001cc0)='.\x00', 0x0) linkat(0xffffffffffffffff, &(0x7f0000000000)='./file0/file0\x00', 0xffffffffffffffff, 0x0, 0x400) [ 907.087419] FAULT_INJECTION: forcing a failure. [ 907.087419] name failslab, interval 1, probability 0, space 0, times 0 [ 907.090698] CPU: 1 PID: 7078 Comm: syz-executor.4 Not tainted 5.10.245 #1 [ 907.092468] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 907.094631] Call Trace: [ 907.095324] dump_stack+0x107/0x167 [ 907.096274] should_fail.cold+0x5/0xa [ 907.097264] ? create_object.isra.0+0x3a/0xa30 [ 907.098476] should_failslab+0x5/0x20 [ 907.099465] kmem_cache_alloc+0x5b/0x310 [ 907.100531] create_object.isra.0+0x3a/0xa30 [ 907.101684] kmemleak_alloc_percpu+0xa0/0x100 [ 907.102875] pcpu_alloc+0x4e2/0x1240 [ 907.103873] __percpu_counter_init+0x10d/0x2d0 [ 907.105063] io_uring_alloc_task_context+0xcc/0x6a0 [ 907.106366] ? io_import_iovec+0x1120/0x1120 [ 907.107500] ? lock_downgrade+0x6d0/0x6d0 [ 907.108564] ? do_raw_spin_lock+0x121/0x260 [ 907.109670] ? rwlock_bug.part.0+0x90/0x90 [ 907.110778] __io_uring_add_tctx_node+0x2c6/0x520 [ 907.112020] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 907.113367] ? alloc_fd+0x2e7/0x670 [ 907.114328] io_uring_setup+0x1fbb/0x2980 [ 907.115405] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 907.116701] ? wait_for_completion_io+0x270/0x270 [ 907.117962] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 907.119312] ? syscall_enter_from_user_mode+0x1d/0x50 [ 907.120637] do_syscall_64+0x33/0x40 [ 907.121590] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 907.122876] RIP: 0033:0x7ff9f8ea8b19 [ 907.123731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 907.127991] RSP: 002b:00007ff9f641e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 907.129742] RAX: ffffffffffffffda RBX: 00007ff9f8fbbf60 RCX: 00007ff9f8ea8b19 [ 907.131393] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 907.133033] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 907.134681] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 907.136328] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 19:28:54 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, 0x0, 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:28:54 executing program 0: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000000c0)={[{@debug}]}) setxattr$security_evm(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x5000940f, &(0x7f0000000280)={{r4}, "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"}) r5 = dup2(r3, r2) lseek(r5, 0x7, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40082404, &(0x7f0000000180)=0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r6, r5, 0x0, 0x7ffffff9) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8, 0x3, 0x8abe, 0x4, 0x1, 0x80, 0x10001}, 0x1c) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x9, r8, 0x1, 0x0, 0x6, @random="29872b7f4900"}, 0x14) sendto(r0, &(0x7f00000001c0)="3ab2724f5b98357680959321941a0183d1d1db980f6479fcdf06fecf284eec5612f7c1a2701ac167", 0x28, 0x0, &(0x7f0000000200)=@ll={0x11, 0x1b, r8, 0x1, 0x4, 0x6, @random="12bd0e2984a6"}, 0x80) 19:28:54 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, 0x0, 0xa001, 0x61) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:28:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:28:54 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:28:54 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000000c0)='./file0\x00'}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x43}) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 907.217523] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 907.222186] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len 19:28:54 executing program 6: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) syz_io_uring_setup(0x1f8, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000ff5000/0x1000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='mountstats\x00') r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x48ed, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x40010, r4, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x7, &(0x7f00000001c0)={0x77359400}, 0x1, 0x0, 0x1, {0x0, r7}}, 0x7) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 19:28:54 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, 0x0, 0xa001, 0x61) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:28:54 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0x2, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:28:54 executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[]) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xe1db645676f387de, 0x112) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) syz_io_uring_submit(0x0, 0x0, 0x0, 0x4) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_io_uring_setup(0x52dd, &(0x7f00000003c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index}, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x1010400, &(0x7f0000000240)=ANY=[@ANYBLOB="7472616ef0ff0f0069782c616669033d3078303030303030303030303030303030332c736d61026b66737472616e736d7574040000000000000075626a5f726f6c6535002c6f626a5f747970653d636772ef757032022c00"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index, 0x8, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}, 0x10000) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0x6, 0x0, 0x0, 0x0, 0x1, 0x1, {0x0, r4}}, 0x101) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000300), 0x9}, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x365882, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x86) [ 907.300308] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 907.305770] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len [ 907.326646] 9pnet_virtio: no channels available for device ./file0 [ 907.356976] cgroup2: Unknown parameter './file0' [ 907.383984] 9pnet_virtio: no channels available for device ./file0 19:29:11 executing program 0: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee00}}, './file0\x00'}) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000}, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x28020600) r0 = getpgrp(0x0) r1 = pidfd_open(r0, 0x0) r2 = dup(r1) semtimedop(0x0, &(0x7f0000000000)=[{0x3, 0x4, 0x1000}, {0x1, 0x52c5, 0x1800}], 0x2, &(0x7f0000000040)) setns(r2, 0x20000) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) openat(r2, &(0x7f0000000080)='./file0\x00', 0x200402, 0x10) 19:29:11 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000000c0)='./file0\x00'}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x43}) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 19:29:11 executing program 6: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006d40)=[{{&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000580)=""/74, 0x4a}, {&(0x7f0000000600)=""/153, 0x99}, {&(0x7f00000006c0)=""/46, 0x2e}, {&(0x7f0000000700)=""/123, 0x7b}], 0x4}}, {{&(0x7f00000007c0), 0x6e, &(0x7f0000000f00)=[{&(0x7f0000000840)=""/156, 0x9c}, {&(0x7f0000000900)=""/201, 0xc9}, {&(0x7f0000000a00)=""/240, 0xf0}, {&(0x7f0000000b00)=""/248, 0xf8}, {&(0x7f0000000c00)=""/68, 0x44}, {&(0x7f0000000c80)=""/173, 0xad}, {&(0x7f0000000d40)=""/35, 0x23}, {&(0x7f0000000d80)=""/70, 0x46}, {&(0x7f0000000e00)=""/224, 0xe0}], 0x9, &(0x7f0000000fc0)=[@rights={{0x10}}], 0x10}}, {{&(0x7f0000001000)=@abs, 0x6e, &(0x7f00000013c0)=[{&(0x7f0000001080)=""/188, 0x567c389e668b58b1}, {&(0x7f0000001140)}, {&(0x7f0000001180)=""/249, 0xf9}, {&(0x7f0000001280)=""/155, 0x9b}, {&(0x7f0000001340)=""/71, 0x47}], 0x5, &(0x7f0000001440)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000001480), 0x6e, &(0x7f00000026c0)=[{&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000002500)=""/42, 0x2a}, {&(0x7f0000002540)=""/97, 0x61}, {&(0x7f00000025c0)=""/245, 0xf5}], 0x4, &(0x7f0000002700)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000002740), 0x6e, &(0x7f0000002b80)=[{&(0x7f00000027c0)=""/87, 0x57}, {&(0x7f0000002840)=""/94, 0x5e}, {&(0x7f00000028c0)=""/241, 0xf1}, {&(0x7f00000029c0)=""/91, 0x5b}, {&(0x7f0000002a40)=""/68, 0x44}, {&(0x7f0000002ac0)=""/144, 0x90}], 0x6, &(0x7f0000002c00)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000002c40)=@abs, 0x6e, &(0x7f0000003cc0)=[{&(0x7f0000002cc0)=""/4096, 0x1000}], 0x1, &(0x7f0000003d00)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}], 0xb0}}, {{&(0x7f0000003dc0)=@abs, 0x6e, &(0x7f0000004540)=[{&(0x7f0000003e40)=""/185, 0xb9}, {&(0x7f0000003f00)=""/225, 0xe1}, {&(0x7f0000004000)=""/250, 0xfa}, {&(0x7f0000004100)=""/94, 0x5e}, {&(0x7f0000004180)=""/255, 0xff}, {&(0x7f0000004280)=""/101, 0x65}, {&(0x7f0000004300)=""/114, 0x72}, {&(0x7f0000004380)=""/125, 0x7d}, {&(0x7f0000004400)=""/2, 0x2}, {&(0x7f0000004440)=""/240, 0xf0}], 0xa, &(0x7f0000004600)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}}, {{&(0x7f0000004700)=@abs, 0x6e, &(0x7f0000006c80)=[{&(0x7f0000004780)=""/215, 0xd7}, {&(0x7f0000004880)=""/4096, 0x1000}, {&(0x7f0000005880)=""/249, 0xf9}, {&(0x7f0000005980)=""/6, 0x6}, {&(0x7f00000059c0)=""/248, 0xf8}, {&(0x7f0000005ac0)=""/202, 0xca}, {&(0x7f0000005bc0)=""/183, 0xb7}, {&(0x7f0000005c80)=""/4096, 0x1000}], 0x8, &(0x7f0000006d00)}}], 0x8, 0x2, &(0x7f0000006f40)) syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x100000000, 0x2, &(0x7f0000000180)=[{&(0x7f0000000280)="4f1db4efee15eb259d43a4cd159626ac5552991323e582ca45a5b5450821033f407580e8a141e742cae01365bbe33a3124e19c0a08e08fc68047168efc13b4c2d5d8f697249389a2589def4e7f6730202a1826300dffa66f59d6cc65321db67cfd16267142764474ba5afaefdde3ff01dcf1b7a331fee40335a6f869541bb8f2b663148369d8bd79de7a95d7ad6b9993eee5444054f5f41289ba0d0cbebff7dda892", 0xa2, 0x7f}, {&(0x7f0000000340)="cdc8691dd18cf68bbc4d72e4689c12af37e192e99da04b28ae92107a2c0b23c82c048482761b6ce99fc627a8a1ff38a72d1558a1e77f6619e0efc93ec77e7eaf620f48f75ab7a66a7e60bed6db6c3e60ca5ae1093e687c0251ceaf5f64f471906130ce43f74b7cddac04052b2273992462f5100aa4ddcda5f4a599628fb46aeca9f147f5b2cd95e046b12fe6d7b48ecf57794a97415a7bc229a0a2d1416c1b7a5ae5b21b5ef993e9", 0xa8, 0x1ff}], 0x4000, &(0x7f0000006f80)={[{@size={'size', 0x3d, [0xc, 0x37, 0x36, 0x39, 0x30, 0x6d, 0x78, 0x32, 0x10]}}], [{@fowner_gt={'fowner>', r0}}, {@hash}, {@obj_user}, {@measure}, {@uid_gt={'uid>', r1}}, {@permit_directio}, {@smackfsroot={'smackfsroot', 0x3d, 'ext4\x00'}}]}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) 19:29:11 executing program 4: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 51) 19:29:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0x3, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:29:11 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x61) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:29:11 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:29:11 executing program 3: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = dup2(r2, r1) lseek(r3, 0x7, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000180)=0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r4, r3, 0x0, 0x7ffffff9) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = mq_open(&(0x7f0000000040)='-\x00', 0x80, 0x126, &(0x7f0000000080)={0x101, 0x40, 0x402d27d2, 0x1}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r9 = dup2(r8, r7) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f0000000140)={0x1ff, 0x8, 0x1, 0x5, 0x4}) lseek(r9, 0x7, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r9, 0x40082404, &(0x7f0000000180)=0x2) r11 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r11, r9, 0x0, 0x7ffffff9) io_uring_register$IORING_REGISTER_FILES(r4, 0x2, &(0x7f00000000c0)=[r0, r5, r0, r6, r0, r0, r0, r9], 0x8) [ 924.073728] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 924.081318] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len [ 924.082625] FAULT_INJECTION: forcing a failure. [ 924.082625] name failslab, interval 1, probability 0, space 0, times 0 [ 924.085522] CPU: 1 PID: 7125 Comm: syz-executor.4 Not tainted 5.10.245 #1 [ 924.087274] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 924.089383] Call Trace: [ 924.090065] dump_stack+0x107/0x167 [ 924.091000] should_fail.cold+0x5/0xa [ 924.091975] ? create_object.isra.0+0x3a/0xa30 [ 924.093140] should_failslab+0x5/0x20 [ 924.094111] kmem_cache_alloc+0x5b/0x310 [ 924.095159] create_object.isra.0+0x3a/0xa30 [ 924.096292] kmemleak_alloc_percpu+0xa0/0x100 [ 924.097432] pcpu_alloc+0x4e2/0x1240 [ 924.098407] __percpu_counter_init+0x10d/0x2d0 [ 924.099582] io_uring_alloc_task_context+0xcc/0x6a0 [ 924.100858] ? io_import_iovec+0x1120/0x1120 [ 924.101975] ? lock_downgrade+0x6d0/0x6d0 [ 924.103044] ? do_raw_spin_lock+0x121/0x260 [ 924.104145] ? rwlock_bug.part.0+0x90/0x90 [ 924.105234] __io_uring_add_tctx_node+0x2c6/0x520 [ 924.106476] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 924.107761] ? alloc_fd+0x2e7/0x670 [ 924.108605] io_uring_setup+0x1fbb/0x2980 [ 924.109544] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 924.110687] ? wait_for_completion_io+0x270/0x270 [ 924.111801] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 924.112976] ? syscall_enter_from_user_mode+0x1d/0x50 [ 924.114141] do_syscall_64+0x33/0x40 [ 924.114989] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 924.116147] RIP: 0033:0x7ff9f8ea8b19 [ 924.116995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 924.121140] RSP: 002b:00007ff9f641e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 924.122873] RAX: ffffffffffffffda RBX: 00007ff9f8fbbf60 RCX: 00007ff9f8ea8b19 [ 924.124498] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 924.126107] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 924.127724] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 924.129325] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 19:29:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0x4, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) [ 924.148745] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 924.153435] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len 19:29:11 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x61) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:29:11 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0x5, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:29:11 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x1000003) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x2, 0x0, @mcast1={0xff, 0x5}, 0x2000000}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2000000}}}, 0x108) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000500)=ANY=[@ANYBLOB="007a49b1e9acdd12b76ef70c2a06050000000000000043d5cdb1de46ca37eaa08a8aca3fafb85cbb4b14fd7049df3f83a8beed23feabacacdebb04ea3e81e015a9294d61783142dfc45cae39b4f0920ed7d4be073a1eb53e3657618b5a7ee99a2dba216640ffbd6e01ce2c49b880adbde259fe8edcf300f5", @ANYRES32=r0, @ANYBLOB="0000beed583c87d400800000005578e109000000"]) io_uring_enter(r2, 0x45ca, 0xf331, 0x0, &(0x7f0000000280)={[0x7]}, 0x8) pselect6(0x40, &(0x7f00000013c0)={0x0, 0xffffffffffffff00, 0x0, 0x9d, 0x5, 0xccf6, 0x8}, 0x0, &(0x7f0000001440)={0xe5, 0x80000000a, 0x0, 0x2000000000000005, 0x1, 0x401, 0x81, 0x104c0cd1}, 0x0, &(0x7f0000001500)={&(0x7f00000014c0)={[0x7]}, 0x8}) fspick(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1) quotactl(0x0, &(0x7f0000001340)='./file0\x00', 0x0, &(0x7f0000000180)="637b5d08aede0e6ded4f1e4ea75480cf7f06d1e53798a2acdb3a4a8f435a290000c65a7edea4f0d894b6") ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000200)={0x1, 0x0, {0x2a, 0x19, 0x15, 0xd, 0x9, 0xb54, 0x3, 0x142, 0xffffffffffffffff}}) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setxattr$trusted_overlay_opaque(&(0x7f0000000300)='./file1\x00', &(0x7f0000000340), &(0x7f0000000800), 0x2, 0x1) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)=0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB="770100001c000300fdfffffffedbdf256c0c0015005d073500d32000001c00040003004e204e210000fe8800000000000000000000000001010c000f02050000000000000008001d0005000000080016000900000015011200726663343534332861656769733235362900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004806000000010000ae6ebbd84e71ff9950749c765159aacae4b3a0df90fbdf2b4f48119d70b5d66045663504f15d63ba81239b2c66fdadfe6715a1f412e2032737f95d45584d63514560818240f51d2f9e235f821e9d0adedf606d73de9c8f35ad58f8f19f8fdecf889faf5b6a07a795a289a4b7e56e0af197e174983e9a7ffad327193d0548ea77ccc41be78ed032693dd5fe5909beef056640e064b45d868f2dbfb00a60b8f8afabca78fda4288091cbad07cbd8df9d56e645d382f08788b1fd9ab6fa1186613d3455b997ba5b5de7f01ab2ab4c000000240009000500000000000000ffffffff00000000000000800000000000"], 0x194}, 0x1, 0x0, 0x0, 0x24044804}, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000400), 0x800, 0x0) dup(r4) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000480), 0x400) unshare(0x48020200) 19:29:11 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000000c0)='./file0\x00'}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x43}) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 924.244970] netlink: 'syz-executor.1': attribute type 13 has an invalid length. 19:29:11 executing program 0: ftruncate(0xffffffffffffffff, 0x0) lstat(&(0x7f0000000780)='./file1\x00', &(0x7f00000007c0)) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x20002, 0x0) pipe(&(0x7f0000000200)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000100)=0x3f, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = dup2(r2, 0xffffffffffffffff) lseek(r3, 0x7, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000180)=0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r4, r3, 0x0, 0x7ffffff9) io_uring_enter(r3, 0x6b02, 0x965d, 0x1, &(0x7f0000000040)={[0x2]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000005c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="00000015000000002e2f66696c6531009933ebd01eb9e418cbce4da8fe256795dbba5f074c1c0e8647823d11cbec283aea20fff709a18f3df41060506eb60acd75c4daf79ef67292ce5d8c1c79d83e23de4550868a0d36163cfeed9412657df262f5044aaded9a3fc9d9a9c646fe70f9c341411b1fdd6150c4960bf03b7c9e9f177904f15d5c9cf19d6dd4a752d0a30159a384456d9ca621cfabea29829d361d1360c245070c4b0a9601778315d36c8525"]) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400007faa08b2577642567ffa079cfab8cb00128b859b3e99d99bac2ee53749642ec89f0336b8ef04bd74543bd11a7e2f0bce33385cacfb2fd57ddf2927185edca033d2970f2d03e0ba2c476e434abb06fa4f7a571e0dc4bb52c5368b90451442bb2b05dc66686da16496b36989534b43ec6f572bdc5b61c405fe86f65e3f22"], 0x14}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000b, 0x10, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc9a, 0x0, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x1c, 0x1d, 0xc21, 0x0, 0x0, {0x4, 0x0, 0x2}, [@typed={0x8, 0xc, 0x0, 0x0, @u32}]}, 0x1c}}, 0x20040000) [ 924.260572] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len 19:29:11 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) [ 924.283066] netlink: 355 bytes leftover after parsing attributes in process `syz-executor.6'. 19:29:11 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x61) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:29:11 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x18}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x43}) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 19:29:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0x6, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) [ 924.394750] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 924.396624] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len [ 924.411329] netlink: 355 bytes leftover after parsing attributes in process `syz-executor.6'. 19:29:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0x7, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) [ 924.469342] audit: type=1326 audit(1759951752.130:170): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7128 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f567b3a1b19 code=0x7ffc0000 [ 924.476245] audit: type=1326 audit(1759951752.130:171): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7128 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f567b3a1b19 code=0x7ffc0000 [ 924.478814] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 924.497833] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len [ 924.580402] audit: type=1326 audit(1759951752.241:172): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7128 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f567b3a1b19 code=0x7ffc0000 [ 924.588085] audit: type=1326 audit(1759951752.248:173): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7128 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f567b3a1b19 code=0x7ffc0000 [ 924.593199] audit: type=1326 audit(1759951752.248:174): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7128 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f567b3a1b19 code=0x7ffc0000 [ 924.598305] audit: type=1326 audit(1759951752.254:175): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7128 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f567b3a1b19 code=0x7ffc0000 [ 924.603527] audit: type=1326 audit(1759951752.254:176): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7128 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f567b3a1b19 code=0x7ffc0000 [ 924.608490] audit: type=1326 audit(1759951752.254:177): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7128 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f567b3a1b19 code=0x7ffc0000 [ 924.613931] audit: type=1326 audit(1759951752.259:178): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7128 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f567b3a1b19 code=0x7ffc0000 [ 924.618843] audit: type=1326 audit(1759951752.259:179): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7128 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f567b3a1b19 code=0x7ffc0000 19:29:25 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x18}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x43}) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 19:29:25 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) [ 937.976196] FAULT_INJECTION: forcing a failure. [ 937.976196] name failslab, interval 1, probability 0, space 0, times 0 [ 937.978651] CPU: 1 PID: 7181 Comm: syz-executor.4 Not tainted 5.10.245 #1 [ 937.980111] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 937.980357] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 937.981881] Call Trace: 19:29:25 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:29:25 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x20000000000, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x2, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef", 0x3a, 0x3fc}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x0, &(0x7f00000004c0)=ANY=[]) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x4, 0x4, 0x200}) 19:29:25 executing program 4: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 52) 19:29:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0x8, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) [ 937.981905] dump_stack+0x107/0x167 [ 937.981930] should_fail.cold+0x5/0xa [ 937.985232] ? io_wq_create+0xeb/0xc00 [ 937.986058] should_failslab+0x5/0x20 [ 937.986882] __kmalloc+0x72/0x390 [ 937.987629] io_wq_create+0xeb/0xc00 [ 937.988437] io_uring_alloc_task_context+0x1f1/0x6a0 19:29:25 executing program 6: ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="af", 0x1, 0xffffff) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x80000001]}, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x62, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x20}, 0x480, 0x3ba4141e, 0x0, 0x7, 0x100000}, 0x0, 0x6, r1, 0x9) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) [ 937.989518] ? io_import_iovec+0x1120/0x1120 [ 937.990556] ? io_apoll_task_func+0x2d0/0x2d0 [ 937.991521] ? __io_req_find_next+0x300/0x300 [ 937.992474] ? do_raw_spin_lock+0x121/0x260 [ 937.993390] ? rwlock_bug.part.0+0x90/0x90 [ 937.994294] __io_uring_add_tctx_node+0x2c6/0x520 19:29:25 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r1, r0) r2 = syz_open_dev$sg(0x0, 0x0, 0x2001) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {0x0, @usage, 0x0}, {0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f00000008c0)={r3, 0x5, 0x8}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f00000002c0)={r3, 0xf9c5, 0x10000}) syz_io_uring_setup(0x6563, &(0x7f0000000240), &(0x7f00003a6000/0x3000)=nil, &(0x7f000077a000/0x4000)=nil, 0x0, 0x0) [ 937.995330] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 937.996545] ? alloc_fd+0x2e7/0x670 [ 937.997306] io_uring_setup+0x1fbb/0x2980 [ 937.998196] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 937.999276] ? wait_for_completion_io+0x270/0x270 [ 938.000306] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 938.001414] ? syscall_enter_from_user_mode+0x1d/0x50 [ 938.002501] do_syscall_64+0x33/0x40 [ 938.003288] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 938.004364] RIP: 0033:0x7ff9f8ea8b19 [ 938.005153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 938.009009] RSP: 002b:00007ff9f641e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 938.010609] RAX: ffffffffffffffda RBX: 00007ff9f8fbbf60 RCX: 00007ff9f8ea8b19 [ 938.012104] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 938.013606] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 938.015116] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 938.016616] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 [ 938.019046] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len 19:29:25 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0x9, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:29:25 executing program 4: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 53) 19:29:25 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000000)=[{{&(0x7f0000000040)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000800)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @empty}}}], 0x20}}], 0x1, 0x4008840) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) sendfile(r0, r3, 0x0, 0xffe3) 19:29:25 executing program 0: r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x1000082, &(0x7f0000000840)={[{@nr_blocks={'nr_blocks', 0x3d, [0x35]}}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r2, r1) mknodat$loop(r1, &(0x7f0000000040)='./file0\x00', 0x1, 0x1) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000240)=0x40) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) utimensat(r3, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)={{r4, r5/1000+60000}, {r6, r7/1000+10000}}, 0x100) [ 938.102607] netlink: 'syz-executor.1': attribute type 13 has an invalid length. 19:29:25 executing program 3: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000c00)={'sit0\x00', &(0x7f0000000b80)={'sit0\x00', 0x0, 0x4, 0x40, 0x1, 0x5, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x38}, 0x7800, 0x20, 0x2, 0x7}}) syz_open_procfs(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012bbd7000fcdbdf25280000000a000600080211000001000004005f0004005f000a000600c48e6e70718d00000a00340002020202020200000a000600909f4aaa8b4400000a000600213ee0a42d3800000a00340001010101010100000600360093dc00e7073c4561d6a8e7b23c774809"], 0x78}, 0x1, 0x0, 0x0, 0x24004000}, 0x34000010) r1 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x228a00, 0x0) writev(r1, &(0x7f0000000500)=[{&(0x7f0000000140)="eb980a2c345d3cb384680185b9f5d33f7813b8028b66c212bbabafb51585fdd35e7b94d432f6ccdeb568627bc1d01fd78971e0929740cac6144a45b406d6adbe870856593f64274016c8bc4789ece441c513990da90a65cff90ef495f8b9ab1e67e778c20633750835fbd3a8cdad951bc7e66d046b753d176cba704b96e0b197ce7d4ccfee1c2a5bb343045b", 0x8c}, {&(0x7f00000003c0)="dcd8157d406c27219a5c25c87606e3d693cc3811c2f5389aae4cd68b39310db6503de69a7f9949e158c4f67aeb0a153f9927c415c432132e285075aa2fcd7d516070da39b926cb423a", 0x49}, {&(0x7f0000000600)="c36cb32354f67124b8b2524c9a4e8245409289c14887753a8baded83670d847111942cb4f8c65d12f250ac9a00af5e7ee198b113de06c046c8ed88e09aff45de5c1a813c763666ee78afafda535bfd026e0bd01cfd469c99d49a8274e98e7ed7d833e3d00a4bf5d746c7745afb2d37fc6f422e629fb5915a42473ae46166e8a8052774975f83b51aac0466fe5b5a555e03e29158ef9d89977d161fb8006b66da0d5367", 0xa3}, {&(0x7f00000000c0)="b921cec1ae23ff8b53be2bd9bebeb3", 0xf}, {&(0x7f00000006c0)="29166f5dc21803b94b00225a39432ac5bb69c92f759310ecaa94b4beb7a7867a1c2a681450f38528a92cd9d88082322eb5e4882e5f8187b06e39d8b56bdcf9a8b299736a7258e7cc6ffa52b35dc795e131fa6fe11ce4337553ebf01d02cf840c8d9917dbd2dacc0f6b57cd132de54703dc045ff698a7d8fb0bc2e5247b3fdf9fe33527af6f214c28d8691c9e1f00b398e4b0ddceabb3f0d4944aeafd76361dc45c4d580e32e8b732040fbd5621b74c53104317bfafe17b6797b6309b55d9cc5945ffb3", 0xc3}, {&(0x7f00000007c0)="34f3c70493bb4e37c0be8ea084ee69c9686e61fbfab310723bb7a613c778b9070a0b7388df64b76a315ec973e2fd6e69cee29bde733f105af04cb90f8c753749d008c402877c45bb248c038e3daf738ad44a4238e5641f4cdd386ec5ce99288387a5e56340d3269f1f4981509f704a4bc72ef557c1f49f66ef37992b219f9a19f2d2474eeb6f84e929c896cec3ce1db55c43de63442f8c7345d54e581b0a3d42adaa7c37c284e93be14602c533c528a8660641780d1e50137fc69c25e6b8bb8e22c30521027f4b3f54a3d1f7634f00e5cc7cf655ba7d0ffa396cbeb0f317cbe756b340486d3ef4e75ad676af9af35db52df8c48ed005dd", 0xf7}, {&(0x7f00000008c0)="00fdc77fcc33538cfbc46b2961b3ecbfaaf29ab4e03e76168b781871c10e7d89ab16801feeafa7c489e33871e97660b36755ed1ad4b60a781744a5ddaa540405f84be7cb8bec40a6167eae7d8a063136132d6987a26e45404bf3642732d71666d43d729e165c33da72b6d044e7d467893cd4c329f47ee18b8876bc2f70af369c5fa008a0dcb126d4815ddeaa035988bdf9484e212beed81dac050d9e3db7ad52de052c85e7216ea84301bd7d72b639003f1788919d4e2e573f30f6792b70b5fd716ada84b9add10f331a518ea0824135ab25534539423f", 0xd7}], 0x7) fallocate(r0, 0x0, 0x0, 0x1000002) openat(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x1cbb43, 0x0) lseek(r0, 0x0, 0x4) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, 0x0, 0x11) stat(&(0x7f0000000200)='./file1\x00', &(0x7f0000000580)) sendfile(r2, r3, 0x0, 0x100000001) openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x488040, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r0, 0x0) 19:29:25 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x18}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x43}) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 938.123672] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len [ 938.180808] FAULT_INJECTION: forcing a failure. [ 938.180808] name failslab, interval 1, probability 0, space 0, times 0 [ 938.183417] CPU: 1 PID: 7208 Comm: syz-executor.4 Not tainted 5.10.245 #1 [ 938.184941] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 938.186829] Call Trace: [ 938.187428] dump_stack+0x107/0x167 [ 938.188253] should_fail.cold+0x5/0xa [ 938.189106] ? create_object.isra.0+0x3a/0xa30 [ 938.190152] should_failslab+0x5/0x20 [ 938.191021] kmem_cache_alloc+0x5b/0x310 [ 938.191940] ? io_uring_alloc_task_context+0xf5/0x6a0 [ 938.193112] create_object.isra.0+0x3a/0xa30 [ 938.194104] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 938.195263] __kmalloc+0x16e/0x390 [ 938.196070] io_wq_create+0xeb/0xc00 [ 938.196915] io_uring_alloc_task_context+0x1f1/0x6a0 [ 938.198054] ? io_import_iovec+0x1120/0x1120 [ 938.199048] ? io_apoll_task_func+0x2d0/0x2d0 [ 938.200052] ? __io_req_find_next+0x300/0x300 [ 938.201061] ? do_raw_spin_lock+0x121/0x260 [ 938.202030] ? rwlock_bug.part.0+0x90/0x90 [ 938.202999] __io_uring_add_tctx_node+0x2c6/0x520 [ 938.204082] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 938.205250] ? alloc_fd+0x2e7/0x670 [ 938.206081] io_uring_setup+0x1fbb/0x2980 [ 938.207035] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 938.208172] ? wait_for_completion_io+0x270/0x270 [ 938.209284] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 938.210464] ? syscall_enter_from_user_mode+0x1d/0x50 [ 938.211644] do_syscall_64+0x33/0x40 [ 938.212484] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 938.213636] RIP: 0033:0x7ff9f8ea8b19 [ 938.214469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 938.218612] RSP: 002b:00007ff9f641e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 938.220324] RAX: ffffffffffffffda RBX: 00007ff9f8fbbf60 RCX: 00007ff9f8ea8b19 [ 938.221928] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 938.223548] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 938.225151] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 938.226760] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 19:29:38 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x7ffffff9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:29:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0xa, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:29:38 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/sem\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r0, 0x20, 0x70bd25, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0xa6, 0x79}}}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x62}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xff, 0x5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4005) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) clock_gettime(0x0, &(0x7f00000000c0)) 19:29:38 executing program 0: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') pread64(r0, &(0x7f0000001100)=""/4095, 0xae3, 0x6800) fspick(r0, 0x0, 0x1) r1 = syz_io_uring_setup(0x21, &(0x7f0000000100), &(0x7f00000a0000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) ptrace(0x10, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x12, 0x0, r3) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x2010, r0, 0x8000000) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_io_uring_setup(0x6a7d, &(0x7f0000000300)={0x0, 0xe453, 0x8, 0x1, 0x20f, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000380)=0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r6, r5) sendmmsg$inet(r5, &(0x7f0000000dc0)=[{{&(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000200)="2489479bed8804bbeab0d8f9f1e00aeebacbc5137c4d8533955d374c5b645a0ccea4b6cf663930202621a3cd6a7a1b7ab83cb29c86c30965210867f4c6dda9ab82ef4cdd05eb85876fe43c030053ce5a9b4de142bb31a7c710936053f640e664256a0ff5e82f914a3e6b44cefad11a45317557df78bb89addd77c21f4339c88717102dbfdef9042d68fc756657a9fd6523dc864d3962a5ff4e9e873eacf41631f0c3f55604c10f10a18971120ea92b71437388ac75873d5fa9", 0xb9}, {&(0x7f0000000040)="7db9e0cdbdfab1a1c482a9ee6560488f547c3421ff4a0754f1c719b0c3ff2ef20e", 0x21}, {&(0x7f0000000500)="bf7c52d896131226e17dfc09d77f84f4435a4a809ed93e73e4a1e73549ee3cfdd824774ce25a52198f804c55174ffabf6f66ec77a4b5452dd2eefd9c6ca966df0cc19a670936c2d0a8f8c2755e51723955ab9cea72ff569d952693f80ccb19283f6f4f7d05c367cdce4a77d99c95e681cd87f66fd02f32def80f9d2315b78a9c606c51afa18ead6e06354dfa16e199c0f3a8349ac8319ece47d4fda6e8d62cf9b17cb792b29fd8b758da5514271ef556fc5f15691c1700343b8ee7444fbacc761d7f37", 0xc3}, {&(0x7f0000000600)="9fb92915ecbdaab83c6007c89523c18d5a6094aea8c24121c9105bda46bab12a0a78ef91fa4b9b2789b939728d8a506974e89429a39dffdf8805c3cd1960f60c2aa0c50981eed4a8c5438221ef0e957d08c3bc83134b82dc3c0c236be36f4f52c3b112f9c05462786adb288967794dba860b96e0b9f4777e33be926aab2bbcf5d55b98a58792e3b71ce3db5a92c8f4d245e2ab9a06", 0x95}, {&(0x7f00000000c0)="0958d01a1cbfda8b575a92239604cb88e3ba6c2c52ca6b9c44d61631fe9580dd4f0b0a14", 0x24}, {&(0x7f00000006c0)="d4eb1c8fd0098f031fa54468257fcdfc26c242cb3d81a85f71ed6765aa779bd3f951c4f0eba267210450e43563193e55bb05f9bfc0cf1cf1d1c97846483d1b55a29f70187791e7971d1568c3fec2f2899a5db04c8a69e2fd911c61cb16be7e5253d799cbd97da2945c66fb85b3babf753bd7e7f0b1b03e8564afa0c966326c835596dde40a8ffa47fd45ace2491a53c29c0c793f4d482ee2ebdab6077877f4d0a58ea94c2e9522f5ae4e8080ac1759f78cb26c4e951b3e0d424628d6da2a2cfcf7a9eb6cdf6f0d71ac9f32099abe9cf2d5a5995ac69796d1577adc602e3329dc06f82760a8a4dd3fad184cb21a9aba9819ff3bfb7959df", 0xf7}, {&(0x7f00000007c0)="bcdfe4783424bdb6d456638716e57b9dbe71f78cc8993d02be0b8c6d76386affb106028d8904bef76b3b8db3dffad1ab43120294ea9b2a96e7eb83e4ae323b2c905485e01e01bd89d34437996bb2d75297003cb80d4b87819780b59aa79e22b976d414ad6381370863e59a8580c39752100a00b187b0f1211f6dc8806679c05617773d456c5e", 0x86}], 0x7, &(0x7f0000000900)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0xf94}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0x48}}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000980)="2b19a10ce86155358e2b0af2e61f4ce17f9d9b38812a062358f4f0d743bfbea95bc766c8830105a2fd49e1b66596fc7f9a64657b9570df3e140f7c6fedfab2630023fab5a81d766ba2dcb46b3e979bfdfd503cc8a7e5c9b4aa73f326b97bb93cb796", 0x62}, {&(0x7f00000002c0)="5bcb1135bccebb585de3af4547", 0xd}, {&(0x7f0000000a00)="aac84db40f57fe9518392f281c2248bd6f989a63921f502d544ddb0b98cb815b49a1a305414edb04032a7b5d2fc16e76f284290b8188af3616f599bca64f4bba4693a00543cd1a4901e25cac2320b0e236a410688a449ec64366219b53e2aa8a4379d3a16742e4f1b1feb7ba829c858001b5120b1030a16ac9a48c7b917c9b286448b1f09162b7a927f301f43dfa25f223f5a149fdb2e7fccb7b3661ee0c2ba64611a1c0f80e0883038117f83e1ced8b59c3d1fdd6978433a9ba445d1586dc035be9f553ae87661b1537c6e6cdd0e9d12b4dc448a40ac36c32a694ac1a76bc51b496b5b8eb0a9757194da27574440c", 0xef}, {&(0x7f0000000b00)="15e23f95e9d508fc3ae8cef08176c0c819a750fadbfe9e85b98970735abd9895342c231dc9ab344b43c9e7b8151e6308f260fa28f1a8a730ae093ec2a7875371014ba91f8d881c4fdd96f8ea5988752d7fa364607bb7bcd2d57e35db7309711aea038c59b295e6bf545438ecbaeee4f4af9dd5007d08c6f56d2429dce66981aeb46155473db69df410b94e6d37af", 0x8e}, {&(0x7f0000000bc0)="95efbe62dc975af9115baf7d59b1378ce98afc148ffcbef33ead4b45ac73bb7557e4a45109b641504b0f518d62aeaaf73b4578d29fd5138c18aac5ccdead79319a7d3c10448ac13181a382e42af68bab3b1986e4e1d6c037a5b61c546d5bfeb9909883c0d7df94d2ae4e275f1ea7ea25e1c3def1b6a4fbcd3f10acc6367459e70ad216d8a893b257014f9773837b62c66388076072fa1e201deeeb08ca9dd6aa", 0xa0}, {&(0x7f0000000c80)="0ac35d984b67c39d613394ceabce1466678843a52dfe4507698c51081b743fd0d9094258067321e1f8b55386633b711fb8d99b6b171cdbfcca1dd1becffa5b8aeecacf15e8707781a92a867e5742bc262dd156a10106efaa38300a25b3f6af314b40e11952407abde32a3340f4211e9ff578d23017a061a76ac4ec523cd0b6a4461572596b175f5e2e7c508424ff9c826b95", 0x92}], 0x6, &(0x7f0000000440)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}]}}}], 0x18}}], 0x2, 0x40000) syz_io_uring_submit(r2, r4, &(0x7f0000000400)=@IORING_OP_LINK_TIMEOUT={0xf, 0x3, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x77359400}, 0x1, 0x1}, 0x3) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 19:29:38 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:29:38 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a7b, &(0x7f0000000480)={0x0, 0x55d3, 0x0, 0x3}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r2, r1) sendmsg$nl_generic(r2, &(0x7f0000001cc0)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001e00)=ANY=[@ANYBLOB="340000002d0002002bbd7000ffdbdf250e0000000500480000000000180019800c005a00000200000000000008002a00", @ANYRES32=r0, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x24040084}, 0x4008084) io_uring_enter(0xffffffffffffffff, 0x5f27, 0x0, 0x1, &(0x7f0000000240)={[0x5]}, 0x8) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000440)=[{{&(0x7f0000000300), 0x6e, &(0x7f0000001ac0)=[{&(0x7f0000000380)=""/137, 0x89}, {&(0x7f0000000500)=""/242, 0xf2}, {&(0x7f0000000600)=""/208, 0xd0}, {&(0x7f0000000700)=""/191, 0xbf}, {&(0x7f00000007c0)=""/216, 0xd8}, {&(0x7f00000008c0)=""/240, 0xf0}, {&(0x7f00000009c0)=""/194, 0xc2}, {&(0x7f0000000ac0)=""/4096, 0x1000}], 0x8, &(0x7f0000001b40)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x58}}], 0x1, 0x40000000, &(0x7f0000001bc0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9, 0x11, r3, 0x0) syz_io_uring_setup(0x2ee3, &(0x7f0000000280)={0x0, 0x9a8c, 0x10, 0x1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000200)) syz_io_uring_setup(0x400bf0, &(0x7f0000000080), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), 0x0) clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100) 19:29:38 executing program 4: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 54) 19:29:38 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x43}) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 950.766277] kauditd_printk_skb: 2 callbacks suppressed [ 950.766288] audit: type=1326 audit(1759951778.427:182): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7218 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f567b3a1b19 code=0x7ffc0000 [ 950.767576] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 950.771244] audit: type=1326 audit(1759951778.432:183): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7218 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f567b3a1b19 code=0x7ffc0000 [ 950.776934] FAULT_INJECTION: forcing a failure. [ 950.776934] name failslab, interval 1, probability 0, space 0, times 0 [ 950.778403] CPU: 1 PID: 7229 Comm: syz-executor.4 Not tainted 5.10.245 #1 [ 950.779259] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 950.780274] Call Trace: [ 950.780601] dump_stack+0x107/0x167 [ 950.781045] should_fail.cold+0x5/0xa [ 950.781510] ? io_wq_create+0x6ef/0xc00 [ 950.781994] should_failslab+0x5/0x20 [ 950.782459] kmem_cache_alloc_node_trace+0x59/0x340 [ 950.783088] io_wq_create+0x6ef/0xc00 [ 950.783558] io_uring_alloc_task_context+0x1f1/0x6a0 [ 950.784173] ? io_import_iovec+0x1120/0x1120 [ 950.784709] ? io_apoll_task_func+0x2d0/0x2d0 [ 950.785249] ? __io_req_find_next+0x300/0x300 [ 950.785795] ? do_raw_spin_lock+0x121/0x260 [ 950.786316] ? rwlock_bug.part.0+0x90/0x90 [ 950.786838] __io_uring_add_tctx_node+0x2c6/0x520 [ 950.787418] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 950.788052] ? alloc_fd+0x2e7/0x670 [ 950.788497] io_uring_setup+0x1fbb/0x2980 [ 950.789004] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 950.789613] ? wait_for_completion_io+0x270/0x270 [ 950.790215] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 950.790896] ? syscall_enter_from_user_mode+0x1d/0x50 [ 950.791520] do_syscall_64+0x33/0x40 [ 950.791971] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 950.792593] RIP: 0033:0x7ff9f8ea8b19 [ 950.793043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 950.795284] RSP: 002b:00007ff9f641e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 950.796208] RAX: ffffffffffffffda RBX: 00007ff9f8fbbf60 RCX: 00007ff9f8ea8b19 [ 950.797077] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 950.797946] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 950.798823] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 950.799693] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 [ 950.801946] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len [ 950.802996] audit: type=1326 audit(1759951778.462:184): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7218 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f567b3a1b19 code=0x7ffc0000 [ 950.816456] audit: type=1326 audit(1759951778.462:185): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7218 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f567b3a3197 code=0x7ffc0000 [ 950.823199] audit: type=1326 audit(1759951778.462:186): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7218 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f567b3548ac code=0x7ffc0000 [ 950.834160] audit: type=1326 audit(1759951778.462:187): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7218 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f567b3547e4 code=0x7ffc0000 [ 950.845793] audit: type=1326 audit(1759951778.462:188): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7218 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f567b3547e4 code=0x7ffc0000 19:29:38 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/sem\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r0, 0x20, 0x70bd25, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0xa6, 0x79}}}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r1}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x62}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xff, 0x5}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4005) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7ffc0000}]}) clock_gettime(0x0, &(0x7f00000000c0)) [ 950.859449] audit: type=1326 audit(1759951778.462:189): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7218 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f567b35472b code=0x7ffc0000 [ 950.869725] audit: type=1326 audit(1759951778.463:190): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7218 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f567b3a1b19 code=0x7ffc0000 [ 950.878986] audit: type=1326 audit(1759951778.463:191): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=7218 comm="syz-executor.3" exe="/syz-executor.3" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f567b3a1b19 code=0x7ffc0000 19:29:38 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 19:29:38 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x7ffffff9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:29:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0xf, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:29:38 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x3, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000600100000f000000000000000100000005000000000004000040000020000000ddf4655fddf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000001000008000000d24201001203", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000e7e1fc40a6de4c28a2c3627f6ec42b47010040", 0x1f, 0x4e0}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}], 0x401, &(0x7f0000014100)) syz_io_uring_setup(0x1d, &(0x7f0000000000), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, 0x0}, 0x401) syz_io_uring_submit(r0, r1, &(0x7f0000000300)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_setup(0x1d, &(0x7f0000000000), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, 0x0}, 0x401) syz_io_uring_setup(0x1d, &(0x7f0000000000), &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT={0xf, 0x4, 0x0, 0x0, 0x0, 0x0}, 0x401) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r2, r5, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd_index=0xa, 0x100, 0x0, 0x1, 0x336e33aed0d311a9}, 0x2) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) syz_io_uring_submit(r0, r3, &(0x7f0000000040)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index, 0x0, 0x0, 0x80000001}, 0x1) 19:29:38 executing program 4: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 55) [ 950.959610] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 950.963609] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len 19:29:38 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, 0x0) 19:29:38 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0x48, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:29:38 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 19:29:38 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x13, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="2409cf75200354a4b7937bf78a472dd8ab8e00000008274e000000000000120200efb9152e570da5cfc6d2f4a876ef0000000400"], 0x24}}, 0x0) [ 951.017704] FAULT_INJECTION: forcing a failure. [ 951.017704] name failslab, interval 1, probability 0, space 0, times 0 [ 951.019015] CPU: 1 PID: 7254 Comm: syz-executor.4 Not tainted 5.10.245 #1 [ 951.019795] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 951.020731] Call Trace: [ 951.021038] dump_stack+0x107/0x167 [ 951.021458] should_fail.cold+0x5/0xa [ 951.021890] ? create_object.isra.0+0x3a/0xa30 [ 951.022403] should_failslab+0x5/0x20 [ 951.022840] kmem_cache_alloc+0x5b/0x310 [ 951.023298] ? io_wq_create+0x114/0xc00 [ 951.023747] create_object.isra.0+0x3a/0xa30 [ 951.024244] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 951.024820] kmem_cache_alloc_node_trace+0x16d/0x340 [ 951.025401] io_wq_create+0x6ef/0xc00 [ 951.025834] io_uring_alloc_task_context+0x1f1/0x6a0 [ 951.026414] ? io_import_iovec+0x1120/0x1120 [ 951.026921] ? io_apoll_task_func+0x2d0/0x2d0 [ 951.027431] ? __io_req_find_next+0x300/0x300 [ 951.027933] ? do_raw_spin_lock+0x121/0x260 [ 951.028417] ? rwlock_bug.part.0+0x90/0x90 [ 951.028900] __io_uring_add_tctx_node+0x2c6/0x520 [ 951.029445] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 951.030041] ? alloc_fd+0x2e7/0x670 [ 951.030458] io_uring_setup+0x1fbb/0x2980 [ 951.030938] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 951.031509] ? wait_for_completion_io+0x270/0x270 [ 951.032067] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 951.032656] ? syscall_enter_from_user_mode+0x1d/0x50 [ 951.033234] do_syscall_64+0x33/0x40 [ 951.033663] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 951.034237] RIP: 0033:0x7ff9f8ea8b19 [ 951.034656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 951.036723] RSP: 002b:00007ff9f641e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 951.037579] RAX: ffffffffffffffda RBX: 00007ff9f8fbbf60 RCX: 00007ff9f8ea8b19 [ 951.038379] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 951.039206] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 951.040013] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 951.040820] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 19:29:38 executing program 3: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r1, 0xffffffffffffffff, 0x0, 0x7ffffff9) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000001a80)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x50, r0, 0x0) faccessat2(r0, &(0x7f0000000200)='./file1\x00', 0x0, 0x3000) r2 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x3a79, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0, r2}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0), &(0x7f0000000080)) syz_io_uring_setup(0x47b7, &(0x7f0000000280)={0x0, 0x9b21, 0x8, 0x3, 0x1d9, 0x0, r3}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000180)) r4 = syz_io_uring_setup(0x13b7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x83}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) syz_io_uring_submit(r7, r6, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x80000001) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r8 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$sock_SIOCBRADDBR(r9, 0x89a0, &(0x7f0000000340)='wlan1\x00') fallocate(r8, 0x0, 0x0, 0x1000002) [ 951.061207] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 951.062588] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len 19:29:52 executing program 6: syz_emit_ethernet(0x19e, &(0x7f0000000d80)={@multicast, @random="7d45eaa9570d", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0004b4", 0x168, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x5, 0x1e, "1981b485fdf7b071e30a2f9f34c69569efebd093e595da3b34f8220b117bc0ff2dd0c1111415a1dbf6404d09f1e2a7b9b9f3d649bf1124c5178f5443a94cf70d651a8f9c0311592f7728f8eaafd7cd6454f27b622418b8c666a58975aeb11a95549a7b28933aef0aa025c2e7dd1edaa1210325d6929e213179ed582f9c8c6dcb72e666a7152f2260ae6c676efc14bb17f6dd211b6ea51948cf1acb4ca73bffc2f0a1ff532adafda6816b5fa5b330c7709d164449d70ec5418d524bdbfe605783ba1d997b2acecd9079e1132507c842fa65d1ad88909c419edf46dd09e79a328bdd5b72ab027df69520fda9fdcd58030d"}, {0x0, 0xc, "bf61795a41477d5647ecea992a965848cef742b4839b938215c5132c4d78a09f6ccc3259831447869575315c75123388c0b4b107ad7e6b69fa2143ed22c57771210702932eb95794eee9bad7662c39d10a9b45b750631d528c27b06e52d262db4ffa2f2d"}]}}}}}}, 0x0) 19:29:52 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x7ffffff9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:29:52 executing program 3: connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x8, @loopback, 0x10001}, 0x1c) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000000040)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xfc}, 0x1c, &(0x7f0000001640)=[{&(0x7f0000000080)="23e14e97444840bb2974f51c881ea4e7cc4a1727421cc1e3819adbfbecafc411a615b3f434e7f2f315f2f95832d7e23e9dae365c150c4e6fa52e483620d5ed2491369892e2cab7d18cab4f609931619a4fd5af94ff2443987ca62a870c829a19d4bcd55caca0951ef33387a7fe3f99a3a88de6a76e", 0x75}, {&(0x7f0000000100)="9ed7b20b52a94fb37c61d90e43f6bf45417f3361dab5acbb2ba5255e55158d3f60b886816586a3f61d7a50b18d5aeab087e04229abff6671e44f16134480c5d8cd4b24141edf57c1110247f1f47da88561d6cf541b4e1122292a40b9dd3d1fcf92618c67de920bbc3ab34f62828476192e6bac7c8c503291c9c75b93b52e980b6df52bb87a53129ab313417c486b187b5311c347e7bf7d2b5ec725", 0x9b}, {&(0x7f00000001c0)="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", 0xfb}, {&(0x7f00000002c0)="0bb5ab67566af138eab395c41dc4d0938621", 0x12}, {&(0x7f0000000300)="b827747f4a125307ae592d30392998ff98d3f92fa9a356c9152419d11d8da961c5b7539d5f9a2d39ace0a328e5567e41f51ce6142372aec1e4c4c235f06c21db571cf742e6a1027566dd72a2ddf8f1d4c598c2a14741f5882264883e44fcb8213acc7b798037f7c5652a174e2777ba4fe7eb0fca5bdcc035c05d08c254c75f543838c82749f672142cf5150510f138802f62f7e434d4acfecc917722beeba08769b21439d131fca664ee2f9f24d38cb059ad877624e81ff1abb4558b93a3c9cdcea341522ffc4b4e", 0xc8}, {&(0x7f0000000400)="61c59151776b2966ec6f738c3ce077bd9de091f6ee0df326724e067d3914b84f76b31522c478815bd2cc5fc24c4ee0448fb33b0d3e26be0c87fcd5beee5d7eadd1a5f1f7fa541f06078a074d065611dcb1a6525704ab146049613b6d1d24a8da486a28fa9f8c7d32a6b0fa4d417b29290f4061aa8f043d04a5924ed076e78604be3650e91b46f2b9fdaab927686fbd24353ba214ca99ff1081fb5817dba9fef6719c767a053edd8a98", 0xa9}, {&(0x7f00000004c0)="0e701a23815d88a9d70d35bf0b563b72edb4ae0db9babb285ec35c7b815d73452844b11029764adcd55721e42733a6431c5224e380c5ed2d13d00b4f0d94e95fcaa9a6c737b4447241a04e1b3fa42310ea17a3514b5d3c8ca1fcc48b9d756e78ac6378b5021d9f962c62", 0x6a}, {&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000001540)="442a3aa869910166f69ee9953b527750165f9aa983d6367d457fc7bdb969543d68804bacf6857dadf70b0ad9f59f422c43962cf07333904308ff75e30f427d9359c2cafdd489901e519d3862cd3a74d60849762a20f58850dc0afb99056a451a4934deeb05d069c6782f87a1fe9817f4b01bcac2179aff857dce3907cf0693f176456324dd3d8e862f9455da5e97e09d0558a6fc2cd39fdff75fed7851fc9ca1a492d039e9ccb1dee1355d9ca1b6bfb6b31ed20b69e284720607dcf4226439ba1321a1b895d6fe44161f5930c6052952fd2528de1f52d49b09cfdb5dd73f560ac87c7d4387452aff861e1e2bf4742106fd2f17755320c9", 0xf7}], 0x9}, 0x0) [ 965.122305] netlink: 'syz-executor.1': attribute type 13 has an invalid length. sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003180)=[{{&(0x7f0000001740)={0xa, 0x4e20, 0xffffffff, @loopback, 0xfffffffb}, 0x1c, &(0x7f0000001880)=[{&(0x7f0000001780)="718eedad07b1e6f171ba92c8ab2173226b17b7d3ed29d77f02ffe00a1735eb9f3e438bee91fcd164f485bf80e011ee4ca985c90550541612d689a188a1ab0a762ee2bd905d15c4309a04839902b21e4b33ae5fd837bc6632d0f34dd4e4cfe85be75842d0bf9970a85340bd00f8621934deed10016db5e6032a3a202fb8a2c87cb5495f2c7ec0e3c5e5866b0a5cecb9c63c674ccb1b75f59cd92599e54a3c8d5750ebf2ecd43419e750c629d2685fec2a84060c94c97e0ee78d8210ad511ebe54cedfa6", 0xc3}], 0x1, &(0x7f00000018c0)=[@hopopts_2292={{0x48, 0x29, 0x36, {0x32, 0x5, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x80, 0xc7, [0x5, 0x54]}}, @hao={0xc9, 0x10, @mcast1}]}}}], 0x48}}, {{&(0x7f0000001940)={0xa, 0x4e20, 0x7, @private0, 0x5}, 0x1c, &(0x7f0000001a00)=[{&(0x7f0000001980)="3f1a9af37b4946f74728dd0c9bc32665add847eee4f02d5a497f20c8e06fde74aee7f80d57665e006a87514390fef8d72ee07b07349c930ab0a1c14a7b8ebe7c678a087e40949fb2815a0da7bcb06eb3713b00de8279dc049c039d41b70712285571facbf0dac151869a6f1456c6611b86d10109f7d8fc4321", 0x79}], 0x1, &(0x7f0000001a40)=[@dontfrag={{0x14, 0x29, 0x3e, 0x9}}, @dontfrag={{0x14, 0x29, 0x3e, 0x4}}], 0x30}}, {{&(0x7f0000001a80)={0xa, 0x4e21, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000002e80)=[{&(0x7f0000001ac0)="c32e55e903e69deffedcfeeac6ae503799f3f98a99fe0b0ee132c5cb1096dce57499b366c044da8c884cc00c4c5a3e747288b0fc1ea04c57f21f0a852a54b7bd22c1e38e527b8295f69631be8ab6c4f00df7db885f5e336f5db16b76202969126ac7d50d99508b134f6166cb14b5a4c357a71d369e33a58818", 0x79}, {&(0x7f0000001b40)="d7d8ce0c021c22ce6b851ef7f8e432957740601e0ac96e0e75366d2843a7df539f7d763ccd01cc0034738611f565109794260c0a03062e9f2e62be8dae2128453ae62152a4e4f3bb6ff0c719360a1109608830b78f1805dd752c6ce6babbe7db07b113f74481820d26bbf87142566e7a3b6cea8bcc090d07801b4bfaf8d2126973116e05b21b022c7fe4237b8224d5ef7e732f47d5ab8697bac3800e97521cbcebbe116a6c78e00a8c07", 0xaa}, {&(0x7f0000001c00)="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", 0x1000}, {&(0x7f0000002c00)="494f104d89d1eb8f3773fbcbe0cd389f4c60f735bad0b0ebceab95e525338b245dd2a1738de23afd70e49786069bdaf1cb374db71cc0628bec590a7a565c5929ff08efa94f885217e713826f3a8403b492b389e6f494956f1e57257efc676d9038960a41bb189e75cdf38fc03fc1af3687c92d78d41be0e809cd06347300eb", 0x7f}, {&(0x7f0000002c80)="c1e94bc29dab09f6ff76618b7a0f9ea383dd9cbb8b8c9e2c9d64db653bbc6baafe819bf374fc3922c2f1e06802143232e07fda73aa3cf83daf2f3fe356c472b79d3188c9692804e4c34a4cdb6eee1276c3f80a18fd7c95f59a2adccba6f4b3e78ef9e4621a22056910ead2d4a9f142647bd3662e45244c36ff85528b1e28caf9a47f0b1dfd485cfae0220b8cb4ac73ecf1071e547e428aedfd5c60c6a2f51245d435f9a69b21ba6c43e766150be9773dd998c11a", 0xb4}, {&(0x7f0000002d40)="a65a1b6e830e8efa3e8dc5a2211dbdeab26ce21bc4752c66db165f88c65a11ce430f448c54bef85541a0693de60a1e856e2aa7febe8d099d872b3b2a95c4506f1a9e424464f8f7f76dc4db1444998fbd324e0cde0ec9d7be8603cb2fa151394ebfda8d98a1e94d8e131f457d23d3e75bb45a06354729fc69266108ec3d80c580f1f9d1aaa2cfe9f3454a3397732973779d5877c2141e026909a2f4a1b90e", 0x9e}, {&(0x7f0000002e00)="df3715f8cc2a371a0c2cea954bf22e3c18bf5229dedb4c579e3f04ccf143bd5dd170d3d9db341192c064adef300e327adabc4bb0bdac37e14cd08fed20c8d0dda0a32a9c51751f0e65c5799943dd565690f3523291b18ffa9bf72eed286aa396868e5f0d26e561dd672ae461fa99ba", 0x6f}], 0x7, &(0x7f0000002f00)=[@hopopts={{0x40, 0x29, 0x36, {0x32, 0x4, '\x00', [@hao={0xc9, 0x10, @remote}, @calipso={0x7, 0x10, {0x2, 0x2, 0x4, 0x6, [0xbc]}}]}}}, @dstopts={{0x30, 0x29, 0x37, {0x3a, 0x2, '\x00', [@jumbo, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @dstopts={{0xa0, 0x29, 0x37, {0x16, 0x10, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @calipso={0x7, 0x28, {0x1, 0x8, 0x7, 0x8, [0x69e4, 0x8000, 0x5, 0xa523]}}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x10, {0x3, 0x2, 0x1f, 0xfffb, [0x200]}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x8}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @mcast2}, @calipso={0x7, 0x10, {0x1, 0x2, 0xf8, 0x7fff, [0x20]}}]}}}, @hopopts={{0x138, 0x29, 0x36, {0x2c, 0x23, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x1, 0xee, "0e66f1119ad7572b294ce1aa1aa0a2752f64d413d599f81624ac9427ec7f988b64ebe20770de7715d8d3f0816cbef92645991ef47f5a490f2ed3b481596308ff6849ddb1cd59298647d0b91ff7364b182559847e69f30a334a49bd5922f9f0dbb7ab6d7e46f3afb6e07f82266fb6b5ba064f2d827000d50f8b450d01ba65e6745b27b5d7bcd3206131db8f220f29ecad5102bb09c702b934ba3855aac869dd649fa4f60db719ae93887c5c15bb69d094aabea08237fbe431186069273116fbac75eabeae92b3e6da22685852f79d8a51cfc477fcd363e80718658f89b0db418534ccb9f6228f0879b3d6a97e7ee2"}, @calipso={0x7, 0x20, {0x1, 0x6, 0x1, 0x2, [0x8, 0x2, 0x7f]}}, @pad1]}}}, @dstopts={{0x38, 0x29, 0x37, {0x6c, 0x3, '\x00', [@pad1, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @enc_lim={0x4, 0x1, 0x20}, @enc_lim={0x4, 0x1, 0x3}, @ra={0x5, 0x2, 0x7fff}]}}}], 0x280}}], 0x3, 0x20080891) bind$inet6(0xffffffffffffffff, &(0x7f0000003240)={0xa, 0x4e24, 0xffffffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x40}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000003280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xaee3}}, './file0\x00'}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000033c0)={&(0x7f00000032c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000003380)={&(0x7f0000003340)={0x18, r1, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x80) [ 965.146688] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len [ 965.162034] FAULT_INJECTION: forcing a failure. [ 965.162034] name failslab, interval 1, probability 0, space 0, times 0 [ 965.164590] CPU: 0 PID: 7290 Comm: syz-executor.4 Not tainted 5.10.245 #1 [ 965.166119] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 965.168057] Call Trace: [ 965.168659] dump_stack+0x107/0x167 [ 965.169494] should_fail.cold+0x5/0xa [ 965.170352] ? __io_uring_add_tctx_node+0x15c/0x520 [ 965.171493] should_failslab+0x5/0x20 [ 965.172352] kmem_cache_alloc_trace+0x55/0x320 [ 965.173388] __io_uring_add_tctx_node+0x15c/0x520 [ 965.174476] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 965.175663] ? alloc_fd+0x2e7/0x670 [ 965.176488] io_uring_setup+0x1fbb/0x2980 [ 965.177453] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 965.178596] ? wait_for_completion_io+0x270/0x270 [ 965.179720] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 965.180901] ? syscall_enter_from_user_mode+0x1d/0x50 [ 965.182062] do_syscall_64+0x33/0x40 [ 965.182897] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 965.184057] RIP: 0033:0x7ff9f8ea8b19 [ 965.184902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 965.189060] RSP: 002b:00007ff9f641e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 965.190772] RAX: ffffffffffffffda RBX: 00007ff9f8fbbf60 RCX: 00007ff9f8ea8b19 [ 965.192390] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 965.194004] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 965.195620] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 965.197227] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 sendmmsg$inet6(r0, &(0x7f0000006540)=[{{&(0x7f0000003400)={0xa, 0x4e24, 0x9, @local, 0x9}, 0x1c, &(0x7f0000003740)=[{&(0x7f0000003440)="15f44e7f14e8589849336ff0e01234f1e8130a66e1fc0d4aa34941c68404be911a3729ddaf7802db8760ac9cfed1d23f", 0x30}, {&(0x7f0000003480)="1dc2d805754f2a02f858cf98e3532c00740312cf732169330b209971d01ba4065a092cf580f4f4bea0f979cc8fccedb6917e76a1f66728148a0fb5dfd4617ce75abd757190721477f34cd956fd2b214da2010ca418b6e8b3849a6bc5170d1d235c241a7aee066d387e9850d6df1c4aaf52ddcc82116ff50e60fdb77c3572c78d0068f5697ffb6d571267a325ff69c7f415b3ea5c39e5a4148ad5ec78719a17aaa512cfca8520e53b50ce4b71bbd7d164", 0xb0}, {&(0x7f0000003540)="1389ede14ebf9b79fb03dd3a622a1b7aa6fb9135580309356f20e931550c3f8ba149ec5979f89f4a19271dc345513b1db05b527eeda8458ada9dcf4cb2ae5cefb326f836d2bd239ac02861afe2e77e32b0fdc0b9790d062603e83a25889bdb716ab95c2a4c6b50abc6366ea4fcc4eb00e5335c2982989baa4a4c11a1d8d314ff4e85886ea8944a78f8ae3ca985347e80eb6eb1c5", 0x94}, {&(0x7f0000003600)="e08b1a22", 0x4}, {&(0x7f0000003640)="42103ae944b15d94529dd3aba6eb03a25326b5b219808a7a29f3d8f4d6b1fb5d64edcf0a96d775cc0a648dbb2bdf0d2e4becbe883bd939234bad8b13d3473a2a37c6eeb5cb883ae3b88bf8573ea6d8ef1ff44918c21d5dd6", 0x58}, {&(0x7f00000036c0)="20659267b14b67dd2198f2e9633a2fcf30063dcc2a59818cf3c07aee85cf12f29c4b44846314412b0425d0e87bcfa59637acb5078e9b1f46c017a6754579d99918ac6a5196b1cd33624c5a8fdff70870d14a6b2dc87bf2", 0x57}], 0x6, &(0x7f00000037c0)=[@hopopts_2292={{0x38, 0x29, 0x36, {0x0, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x4}, @pad1, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}]}}}, @tclass={{0x14, 0x29, 0x43, 0x8000}}, @rthdr_2292={{0x78, 0x29, 0x39, {0x89, 0xc, 0x1, 0x1, 0x0, [@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @local, @ipv4={'\x00', '\xff\xff', @multicast2}, @local]}}}, @rthdr={{0xb8, 0x29, 0x39, {0x0, 0x14, 0x2, 0xc1, 0x0, [@remote, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x2d}, @mcast1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, @empty]}}}], 0x180}}, {{&(0x7f0000003940)={0xa, 0x4e23, 0x1, @private1, 0x3f}, 0x1c, &(0x7f0000003b00)=[{&(0x7f0000003980)="8ca4ece225b04f6348d82b81ec90bba2f79fa95761ca437b86bd0f8923788c49dafbc30cff0075a1f842fc63643d89ef8ccbc656e38ed17082b3100feb7ab690a9f7db93fbe9cfdbeb3d4c476564d845ec587ec127717ce34f1ef4a500fea1caba79f7582c652b314a31f24a3330560f", 0x70}, {&(0x7f0000003a00)="52534788aa5e2a69c448a3aeb27b5d8f7c1bc0e3f8ea9e4572a17ae766b953c375800b2281bee231e212f0382ceec6229b29bb7971dac08f75f99f700e602d5da0ebae55745fed856d6b8013ca63aa83484128a18757c759316ac2c84d05675d7e1c2c486b68c987bf5a2ab56ee4ff9b00e2b560b1fa602a20efcb", 0x7b}, {&(0x7f0000003a80)="069a56f6ff9ee427555ee7d69572b01f03d7dff632a7eac2e73e8531042e16ef0c905b93ea560268296446a4d85c13e408da929c1227d7cd2490ba300e7c2e9c00b07625808bf0caec1af1", 0x4b}], 0x3, &(0x7f0000003b40)=[@rthdr={{0xb8, 0x29, 0x39, {0x32, 0x14, 0x1, 0x1, 0x0, [@remote, @loopback, @remote, @ipv4={'\x00', '\xff\xff', @remote}, @mcast1, @mcast1, @private0, @mcast1, @local, @loopback]}}}, @hopopts={{0x70, 0x29, 0x36, {0x0, 0xa, '\x00', [@ra={0x5, 0x2, 0x1}, @calipso={0x7, 0x48, {0x3, 0x10, 0x40, 0x7fff, [0x5, 0x0, 0x100, 0x7, 0x2, 0x101, 0x6, 0x7]}}, @padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0x2}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hopopts={{0x1f0, 0x29, 0x36, {0x5c, 0x3a, '\x00', [@calipso={0x7, 0x20, {0x2, 0x6, 0xee, 0x2, [0x39c2, 0x2, 0x9]}}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @generic={0xf0, 0xef, "e418909fcabdc219018ef7f19148f29c2d80414cc9aebf66d483cbf0526b978b63c37068032bf14cfa863f49697378e1eb442b8e65a6e2bcdd3ab8a5b791d66e82e3bf9b8792720c360465b10e8a18213d6face75fcf413373e451db9b741b3b1389c878da141f386bca521bb5efd54f96a2260aa8fed02b321daa6539c570efb18cadbcc21191ebbb4464fbed4f39b424d42122262cbdb6b3a0f49ce513801619cfe791e46c0b719aa61444f746962beaa3f9bba63a173443bc460978673092b23fbf653a47df017bf0ddff8dd87773546c3c80b40775ef9b5ed42ca6f966892939d4d2f323c0726365163a2c149d"}, @jumbo={0xc2, 0x4, 0x1}, @hao={0xc9, 0x10, @mcast1}, @jumbo={0xc2, 0x4, 0xfc}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x6, 0x7a, "ccca96b6bd35a7bbbb4f1275308a78123678ef14645c125bbc00d703898ef24f46be9cddfc5b1434e591ca21ef8430735db5c30effa49329e6c6ebe02c701a0694b63e65d894826641ba897e1692873156348b624c87a3fdc84140478cdd91762bf55b23d70d9fa2322a2019240cc46a21a0942e98c08d4ce933"}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}]}}}, @dstopts={{0x68, 0x29, 0x37, {0x88, 0x9, '\x00', [@jumbo={0xc2, 0x4, 0x9}, @jumbo={0xc2, 0x4, 0x2}, @padn={0x1, 0x2, [0x0, 0x0]}, @pad1, @calipso={0x7, 0x38, {0x2, 0xc, 0x81, 0xd9e, [0x100000000, 0x1000, 0x3, 0x8000, 0x7, 0x7]}}]}}}, @dstopts={{0x1040, 0x29, 0x37, {0x5c, 0x204, '\x00', [@jumbo={0xc2, 0x4, 0x7fff}, @pad1, @pad1, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x24}, @jumbo={0xc2, 0x4, 0x2}, @pad1, @generic={0xff, 0x1000, "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"}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x62fc}}], 0x13f0}}, {{&(0x7f0000004f40)={0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, '\x00', 0x23}, 0x1}, 0x1c, &(0x7f0000006380)=[{&(0x7f0000004f80)="ef257fa9297cecd3e8a4cd2e966b3ddecc10bb62fdb3bcfc60bd2df8f6a1f3c9eae1f6695aeb643a1d4d92cee4c069fe43383514c1db565623d0837586658cf53f6b8822fe84fbb42f9f2f763c679de5f5f992a4b648312a452433efbc599e88ba140c5857a9e34b9800d872ffd77a72d9afff09338109b241d4b99f61c6c0dd487667d277f732477c4ef0d9d0aaba68ab5876a511dfaf773d74c818c9946b8d9cc3ed3cfd025fe7be6d32a18aba80d8bb34ac9c6cd7d0ce8cb5bda307810fa3735ca17d97fb2467fa85f661706a465f689081133d", 0xd5}, {&(0x7f0000005080)="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", 0x1000}, {&(0x7f0000006080)="943ead0e9fe595b59654aee58b54b5b1c83b914eca6f2d4406f402a735ff37bf8ac953dc3fb966bd4b43e4d6ea0da60bd47f68277c8ab159929b7e742fcda5156a80bd2f6e2b872c1fe48d69ce8982f0478fe251afbad8", 0x57}, {&(0x7f0000006100)="db033cfb45957547e926108eae418f7db8ca74f40060b29028282386f2495af70c48c5b4f22ce6141f88b21094db04b0db411e7423e3ff5c01d8494059b8ea7a4ad514eac9ea574c202ea7608f5db976c1dbd282c1fef3c47a51668ab52fda936d975e67f865e210fcb2dfe389b66cbb319d", 0x72}, {&(0x7f0000006180)="5e275d2e17d6a27047601f2a338d4ba0b6b8d98815ad664388261812346214f17cfe442a24b70f6a66fa4851f55a3f38f9a484fabacd56ad27a17a1f14d01d9cc0bef5536ce186d9b0c2ea7a0c8f1ff3e76f800cdebd0bccc4230ac4df0629fdbdb23a633a16", 0x66}, {&(0x7f0000006200)="f1fe40f8298f391591239e6335cb88efd4c14afe4fa275dfd78554b57698ad24e1d8b51c25ee75bb857fde2ecaea27853bf2e2e62b12ea83a27e68b44fbadf30dac3ed5a96b1035d339b01031506109497c1d68f32a202060c15b00dcf156ec4e3c9c3db7ec60bf021329fde08b760dd087ec63a9b84c8a2eac1b97b9d687a59f8b8fcaa9c18e4ff818ea55bb82a6f91b4fa17bdeb50906a7cbe68a67c0ec967cfee6f0fdc6f8cfd5db6da968d74a2dcfd48bfc83830ac1b065af305316fc00b5fd0faaa0acfc2fb70fc7bfe3be6c07b783d028c4a50202b", 0xd8}, {&(0x7f0000006300)="19fb7ed1a8fac6e321b270c9d8f0a737274b42c4780dc3563c82efd1a8d1bf1eb5e9209f2af241f853a2d9e7336fd268c2e62fd821e6c9cfb243a71ca945b7515f20ddae13b013e27f588bf9091e8594f39a0c4e44788fbd4071db9f3ef717cda89ef8", 0x63}], 0x7, &(0x7f0000006400)=[@hopopts={{0x90, 0x29, 0x36, {0x6, 0xe, '\x00', [@calipso={0x7, 0x28, {0x3, 0x8, 0x3f, 0x3f, [0x20, 0x7, 0x8001, 0x3]}}, @calipso={0x7, 0x38, {0x3, 0xc, 0x4, 0xbe, [0xff, 0x100, 0x263a, 0x6, 0x4, 0x2]}}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x6}, @padn={0x1, 0x1, [0x0]}]}}}, @rthdr_2292={{0x88, 0x29, 0x39, {0x0, 0xe, 0x2, 0x20, 0x0, [@mcast1, @dev={0xfe, 0x80, '\x00', 0x35}, @dev={0xfe, 0x80, '\x00', 0xe}, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, @private0, @loopback]}}}], 0x118}}], 0x3, 0x10) lseek(r0, 0xe0, 0x4) r2 = syz_open_dev$evdev(&(0x7f0000006640), 0x0, 0x400000) sendmsg$nl_generic(r0, &(0x7f0000006700)={&(0x7f0000006600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000066c0)={&(0x7f0000006680)={0x20, 0x17, 0x200, 0x70bd29, 0x25dfdbff, {0xe}, [@nested={0xc, 0xe, 0x0, 0x1, [@typed={0x8, 0x1b, 0x0, 0x0, @fd=r2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x7a3b73015c8bd6a}, 0x48004) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f00000067c0)={'sit0\x00', &(0x7f0000006740)={'syztnl1\x00', 0x0, 0x2f, 0x8, 0x3f, 0x401, 0x20, @loopback, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xf000, 0x8000, 0x7746, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000006880)={'ip6gre0\x00', &(0x7f0000006800)={'ip6_vti0\x00', r3, 0x2f, 0x3f, 0x6, 0xff52, 0x20, @ipv4={'\x00', '\xff\xff', @empty}, @ipv4={'\x00', '\xff\xff', @local}, 0x80, 0x1, 0x1f, 0x8}}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000006900)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f00000069c0)={&(0x7f00000068c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000006980)={&(0x7f0000006940)={0x28, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3, 0x55}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0xa0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000006a00)={{0x1, 0x1, 0x18, r2, {0x8000}}, './file0\x00'}) ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f0000006a80)={0x3, 0x14, &(0x7f0000006a40)="87ce1ac7052bf3b3249fff341f19b353a007d047"}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000006b00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000006c00)={&(0x7f0000006ac0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000006bc0)={&(0x7f0000006b40)={0x7c, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xc31, 0x43}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x36}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x24008090) connect$inet6(r5, &(0x7f0000006c40)={0xa, 0x4e21, 0x9, @mcast2, 0x7}, 0x1c) 19:29:52 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, 0x0) 19:29:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0x4c, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:29:52 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 19:29:52 executing program 4: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 56) 19:29:52 executing program 0: prctl$PR_GET_IO_FLUSHER(0x3a) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000014c0)='./file0\x00', 0x40004, 0x3, &(0x7f0000000f40)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53ef010001000000dff4655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800800}, {&(0x7f0000000100)="ed4100000093b200dff4655fe0f4655fe0f4655f000008000000040004", 0x1d, 0x2100}], 0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0]) fallocate(r0, 0x0, 0x5, 0x0) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x8a) 19:29:52 executing program 6: prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) 19:29:52 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x43}) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 19:29:52 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r1, r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x7ffffff9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:30:09 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, 0x0) 19:30:09 executing program 0: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, r0, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x43}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = dup2(r3, r2) lseek(r4, 0x7, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000180)=0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r5, r4, 0x0, 0x7ffffff9) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000000c0)={0x1, 0x1000}, 0x4) r6 = fork() ptrace(0x10, r6) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f00000004c0)={0x15dc, 0x22, 0x300, 0x70bd25, 0x25dfdbfb, {0x11}, [@nested={0x11fe, 0x48, 0x0, 0x1, [@typed={0x8, 0x7f, 0x0, 0x0, @pid=r6}, @generic="dab0cd93c91837436d66e8d37dafb4d48b77d87483d6ff9ff6d5a06ddabd7f9acbd078b05b697e8aacb71f0b9ceb7b8a5565ba78093580ca1ef74dc50d3bef87a08a961b6d3678ae644fe571dc0637f937b5d5e6de6eba65bb91872464415167c9bd92d19aa2564aca437a1399e04d4e2b60fd4f98a31b1efd179aad753d82ea8de4e8fc4fe85c815fc2d617f73352fc8392ac3b23b9918cb000cd1a6973ca4999f6aba9ac16b71aba1a6722ddc552a33ca1ee58bd2305591780468446f550b7ed8a828745082b6b9ba1be3df9e78bd40ce283d0781055d1c011a70544caa9cf0442a189442ee35fa7d009578552", @generic="fdac399ae832d535aa2b9d2287bde79cc322a243e0aae7bfd820a69c6f3c6e28d987017aca2e", @typed={0x9, 0x46, 0x0, 0x0, @str='*)%\'\x00'}, @generic="86dee0162b3ac310d58890e55fd01ddcdf42", @generic="1b43590795ce990aba73c970c1ccebcab9dc97e2f78c364f8e2e0b8633e2e07088a711b1bcf0478722a44f79dfc1a805c8403849c7be0d2c13b477f23a5592a80ac1cdf8bee1c8385b780d396065851d1dba475a6757dabed2b0db9357b26986abb3bd770b05ead6bf4706e2c6b68c8d7033dfd27f052e0b6fe4904d72f42db06d21a27f10521720ab3aa9abfe10a7abefcfec4d5775b7271e92c1af74f27e953a820acee2279e227bb4ac5aacc6a692938d8b49b89463af0c4da8d1a7ce3a71395c9b6d6f40b8eeb5b8877445f5d9f45268778be3ecaa2f151391f4698d5ac4832d7d64cc476582279352e8437d11d11d0673a628dd9fcaf16af4a083ee5ea4463501fd43200cd069eecf69500a2898d63933d3f66f7e679d838b00b32f32d49d378b4bb683040fc411040b262ab881dd6364914b88c1c0377d0ecd038c79c710642bb4d31d24c7a41ceaf8bc594cdf6e17fdbd805e6b5e53c8ae85e8c4b56a8efac17e539f0dafa5b01e95f91343f0ab0ff50fdfd4c27da859ea5d2c91fa07a109132c20aa652b5a0888ac6b700cc75ee35e25699d37ff1cfb22052c5dd37dc2e7033e49db076463424b523b24f34cafa4f6d4187b1e4acc28cb647467e10db47052ddecf4365108ca71ad2abf4f81f57f51ec245dcb3a76fbc1b3dfe09798324b4f025ff0ce2dff8e24e6c5299e01c9c8f72634d18a060c6bc23547ea4d1b29a359f6e44edb4c048b522676b8988a4269bdbfe5e0e32e73adcf795010e3483f73a970411e490569184ebac49d9a5d159dd09f6d8bcc3bd9f29b01c8d5d73d62c10a0748b229ce054903ecae1ab7b38a2039b445b97cf5e481fb2d4e8c326823c81e938b1a6926d11c397051d48f6f4726dcb80b8aee9bdeb1375278d983cc98bcc1b100265be421f7d3c91fd496c347d953dbeb2ed778e0d2fac301fe1916892cdc1d0631d592782935826bb27bf13809416a962499d9143ed5a304a5ab9e006d1c01d90352dd91d30a911b00f451419343d2e31a00a6369817e4a25770bca398fe613e3c7d76741fa6bfc4868b87671e98a7771717ecbfc13d98d944bfd983d397da4dd3f305bab8c56efced7de1a8b4ed118b48fde899ac5dfaf5b129d2e6ded62cff9dce99e7fb21146f2a0535b0b6ff8d5cec4e5e19fa0cb7471e621e8b93029de7d20df3cf2cdade7edaa7f544d56832e5e87d1a38fae986db0dbefee98b1e7dd4518ae6e4b4ea4c38762409a2579c14020a8107aa5d1cec9f84a82da7d371933b1099b3ade3bc5d7c305b612ffc4e0d39c1e793612fc5d656989ba727738e27f810f57c94cacab61c4ede882e87e95c7c7290285b26af1e47201d0aebf9889509a4d43f8933d4cfb6489656adf57dfbd69c80fa377b3037231607965b54c0647d48465baebe458355af1fcea001bd68ff763b9a719725d21d97044d6e6a5de2827e7b7a2f0b1379bdcc916f7e7aa8af566c1dc02e861d3ad5defb3151fb92d906c19905b20b5a88ba44321f5137cafb8acad84595a8af01f406c2378100b95e7d2a194dec3de0d2e1e61f2ce682b9376e71d91a5e916222c9ccf5d0989dcc4c81c03481a68b21603e74970067a64b045db880fd93b32e3b5d1bbf647c4bc7de334c10ea1ff917e08a39e2becb7872df1e084b73a648e48532546ebd23390496bf628fecdc651c73f00d4c26c86127d3e07505dafd90f818424fb601504c1a7576e5996245949601f2d7906430c7b2941ff83fb2f0c1854ca93a142e136fa67d223281a2f20a45500bbad94f70ae30ab9254c0262da88247816ec5a9fb7c1fc39ad509b3c4a61a908599883c57b0d5f4061c5890b804af181f686a91dc9a7b82b2a849af933918383aca303cc595ce75f40667d09ecaeffde02a00d6b75099093708404d653b687488808d2a561aa730769417d90e2ad6b917a0c0a3ff7d5c070a627794d224005f1046ad9e8586ae57947ea8ce2e0486161168467ddf3dd34aa12c5267f9b5c79d6562516f1a7cd823ca81aa29e42cb05fffec576d51cd155ab22bfb1a9f81276260da49b2938b6ce97f3d7dc8e7c6ebf880af0c35b2e7dffc246a5ce98ee7dc308f67585858ec611c80f7ec43bf618136869b043737a15aeea5b9aced95ad1e027d049b442b617cdf3e09c5e3d2b7e19be9a76100c2fed529bb88d055f1f75e9e9560f6f430e5d89b362afe64da73c462b1a2a37435e045de98db5be2c38cd46560b5bf18865995521e33a3812ac4703b4e42608b9186f94cbd3a61158ee44d45acfff9a0d874b8997f73a2b2e48a0e860b8ccdfc94b4fc2aaff20e46e422a49385a80f3e1da82db3742822a51af05ed53d0c78ff9a175fb4192e845ad9898c405a448898b4a9385d157a71e810a8b6bba4289ad270d3db554de3cf9767c4fe92451f183ef00b0584cb8b455aac02a3f02f56aae24f5fd7edaab3be245308262a6c17af73dcfdeb3cb5a568ef9cbc23394c4ecbd5a31fca956890e10c3cd7420b6f685acfb0aa8079f6f12c523679325156ecc1be7d2ff83b42cef6a148ee2bd1a935ce2a62ead1b69ec162cee5e910a1ee4b6147414a5b4f80cf8c43f97175b7394206d33ce87465d7d88d4ca349d97d9f75e4d2872cd7b8849fd5968b70147cf52792d13ac2328ca17e608ebe112bcfb372a9f41df738526e88276659ff1b931f94c825ac69a803470782c74b933bc3fcf03aecd8992ae05bbdd7b6df332898a06d493e95698c53bb80fe2325c9866c6a5b1a3fe84eb2706556c7d623781c3e3b3152f1ec180451ea65bcdec13e7e153205c318bc4c130fe74220187eac61b437ddf42f68feb76c6b5282ed28da1f3893b3948eb1af488d69080c61a4645a889c9dbee6517c43941613bac639ed3641f8c7d6ab9dc60433a5f10bccd35ddc922b9f9e5549e9197778bf96dd6834e7ab81b56b801141e6f621faabf1b6c1199f0947a4ba33a267db466d134ca47aa8fb533d7a3e7496d61a1e83c523f9c14b57813bb90f34030c16c24982a74e6d0bfd24572754cf10ebed1472d351861db0c12faa66d9d9f6926f7d6ced01da1d61cd35c209fe05f24840dea3e946541ff99b78bb08c0466eeb4813ff3f027a4f6e76db00f9dac48eb54a8d1c968d07730e326c63fcf2b4a1e732e30708ac6132fe28cb092ee7a5e942b443f8aba10066d104be4244e1c1e900873809e83b08dc829ec0afdc8f47c8b3d09af0ad5c76b51a797c1b4b4938ea0d5d07daf01c0a5b1ffeb037702eba2dd29177e6aa228b37807c611105c6b7a24ad0beea4cb8ce774d0be9d681eeb421d6c32b37e3eae68f5e53c33029477dfd7e9c9c8aea48aed9fb65eed41c48dafd38d06c287a5024e7861864ad0c2ae8f510cc0b4bd6fb9c2c13a14343f9363e2d3f4ee4b8ebcb96793fb533f2818a3ea1c789af7740b83a97be9e0d91f1a7243445123e0aafe6734fd59a0f3c9545e67a571f186cef8d902e9d99115d8e90ed1d2670e8e995cb728fcc649d6dd2339cf61b56c8eeab549e3342c2a5155819e9ecf455bb0a6e61ac7cc61ebd932fda504eed89bbc6c0f7343b29cef4f82e1d7aebc95b450fc0c76e3175220c0aed72f8d31b6e519814d225fc2185d4975a3498ea5a72b3cfb01395279a5b3003285d47be7ebcf634c46c60094db3822429c213cab23112df03ca642f2b85e9dd06eaed6c8d4215ae250cc505c7f10658bfdaf6c58ae7a4a8eb8fac09629703adbb6ec41d924ee327efb33e5a297fdf3a58a9f0ed28b5be1717a95878bf3f41e298432058a5b80e7b9654ff7d25c06b9e7293cb2598e8845a68f67a5437c7e5b14c254a8b108c80525754601b4a28d78a7a0adcbc9476a3de8fe84edb851ed4ca6cc393fa33e9b96b90e3387e8cf0bbc5c2a14488e430c89b3f32714ef4726d0cef320f7b5c71c1a80c487f0d4afce0c69235cc998fcc2ca50c14162ed7a289fdb9758b6634dc5b84123a17dda7512305e4b100ae1da98be7261b46342f8de8d18a0fd57f1d3e7abb7c1246944f65655eeace468972c1b5a2d5c5d2320e0cf5c605eaab1352ea3bfb1a0ca6e7ceec34c66d4db2a03c2733c30a9bc1df7e440d52a1f7c5032392c294c5f6eacc0712ce73db759b97af09358e4a7aebbed78a90e5000f4b3bbde7a00acfe620a684a815c3d14d64f71bd1eff2667ce35ed1e8f194e5ef904ac134736fa317d075ba259c02f92622825b7cb5faa27b3be733aed5e4b46300ec899fc179d92c15627dc962ce01aaf0d34818a1a536275d7733bfe23d4f00430b1193a709537ac930ec01035fb31367558e9a7c718f809754a85a38760b79af24b9a8381c329c43b3c7e8ff188ea692b2d61dc5f14f84c9e34144bef53981a81c05e597373cc44e88f6d5a341ea73fbcad5d848e91d288e0cb20df994393b1d33132e8776990a01fc00020424e37fd6756e97fafbc3883d1c09daf622386621ce0f8ec047963098e36453db67863ae21f76d66272a85a1d84273816f7d023341a54a53ef9fbab84387159aebaa713dafd6cd0c7a3d434164c2b6d861cadbeb9f139317f15fe2b81aa4fd840b06fdcb51b3165dd5efe4f20320dbdd25871be44b4d13fa4a4ade0d6646613e92e8ea55129a147b7d92332a5d4a1beabfb112202958b579437f936a582379e5e55d01b26dbf496ee1000cdcf00f8d2b25084fe9e77e10eecd3c5ef9be27d80e4b380e736449b5d86c8048178c8d29cb36bdc22a0c69b908856d5880356d4fc0a81977d098c4cce81d76aad1343fb63e19273faef583c968155319c36d80992d38cc906d5ac003fd4948ab038d99e8a00bd996fe60a51ca1c0c36da65e56d2cdfdbd439143f779b75e663dc64c7714d2466765cb9005df192df85eeef6cea8d9600c617aca7dc094713becedd9244671fb3a553262ce8a8cbe1b07b1be4396033f3695f5ff6186df48ab0c00b00ef5c2ae2a834e0d8aef3f9a255e91b2845dc30aecd0c56f3be06ceee1f989eadeff6f8e93ed9e10e10415186c044d92a7cb7827c4875191e667b49fbb4dd94776b283343456166e70f67059127d043892694d4ac76a781faf497098f4e00d7cf915364991780d4bfe45dd660f51ae3f691356ab516ccf5e9df3d36bf7e32003616b63a5a81da891b20f3d7d45233de0044ffc295a5db4f7ef2b80810d5c8f1de324108df05792a8e54395b0631ce6300c29da38e632c21bc2817bb6c9100bea62a2c21195d7c551a250fd3b2abb2655b9d148e0fda72268ed9a6daaf0713fba17ae321d03ce34ac0d5647fe11dc0cade95498b03337bc895c4e2a38e69ee9724bf30826c598b2d6e84d9b48bba49a36f54cac4b01c8b5457af1066a1fd726e43605bd301d10227aa99fdffca99a3d110069db1a0fc18d74dded8e526bbd691059802d32f3a0266534fe69048263687e44fabd9a220fa7d974cedc604e148025047f9ed456bba5c523a983cb76f25653de27a81f23e68aa75079b37fa939aee85b43d307bd71962804074752ff524b538d5740c0b76a7b67eb20e04d7a22134d6d2f74f47934452318ddf8bcd0071ab6f5e17f589c73cbec6ebda016088a996369c75097fb104f2bd4cb16e90f4945692a334adb9966708a1e8a6e73d60bff560bf7ea7020ac9ca62255afc0b4c3eec04334d6febd6118f4bffa9f80a91569969699606257219861a5fe0efda69cfd305519f0b56a56ecaa50afac017681e1115bd79303b0dd68cb24841efeb90ecdf58d0f75c99187ea903b3e010be9977361677265156f32245bff6aab995a1d6bbca65ccf53d8e9a", @generic="44704108323676417a8e82d601d32b8b46901cedfd70472d78a7ba52c1ae1b5809875b500ed25434db64bfcc1f77bab65822f73e6cc46a3c36ba78f0f038c9fc896f290d8a9b206108b8516cdc8fc6e5b8a02ba8e6ab5b6ba6a3c5ee143e47c9966fdacdd7413dc2c2b00c0a9bfba223c23bf77a6b9f286b062b204ca6edd2fa8270ecc3f4cb6d49de8e2f9320832995c07a39713ebf395f81134cdd5a48bd1b2d6ad1d43e1c1f463c2d756501a0e3845bb029d8f5565b070c246a5194d6ae31"]}, @nested={0x197, 0x13, 0x0, 0x1, [@generic="efb4dead6bc9cd7aae294c880aae3364655823f1f7ff8b8e593cf2c7997d633e7e6733c22e7f6355cb5f022a85d1bcb809a29a38238439fb7afae8384fc8bc087d5974d02a8aaca18a41052aab0e2a58833cf2e88d8e5b40d0a3007979bc796b471858d321ff211ed8f1e57c60d8a36d56929c7eddcdcf715d6d0f66f47b574487b08cd1965f956e", @generic="abd84bea74dbb3acbc8273aa37f25458eb0f804a6779e0054ddeff321524b743b5ef75b411033e5abcce9169f054659c810239af272e466fb266", @typed={0x3a, 0x32, 0x0, 0x0, @binary="3799971d5ba6149230afc9a790308cd59da7fa6a4380ae7b363bc6f4b123c78bbe86bc38d36f2cf2d0108bd66f4351225fa0ab411531"}, @typed={0x14, 0x7e, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @generic="d04e93d479968abf542f3e35ec90c1a7acdd9daa0cae3e28603e538418ccbe6165279c9e58d617ea9174a2f2", @typed={0x14, 0x39, 0x0, 0x0, @ipv6=@private1}, @generic="38819adca1c52cde787a6eb411c8ff9a92f7657c1f2829176c98353795ff433c70831d6364004c3120b4889ad729624cf48e74d604cc20cedac8960baf645abd81"]}, @nested={0x14c, 0x94, 0x0, 0x1, [@generic="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", @generic="b58f05cbac32a251f10ad15706bfb49565e375cfb73c767d18568860bf0baa79307c7cdc257d420264da3e1fcbacb3403cf21490c937f929b08a4cf8545f9765c85572f2405542c331ab5a39ea"]}, @generic="f5012348575abaeb81fb57a875b4f3d6bd86a1b005460bc70ea094c8fd347afe6b87a48b5cbb58379ee863828059e1c6e50a0d8a3ccbc92e31345f7c293d84e7ae5d79f2d558b2956a842bcd4211c5c8d36666d6afb857105d8674cd44e4575c3fbc829766a7de78278184838750ed2240ed73b719b20d32b01433fd76bcf92052690270be8af4f559c994ca6f9de12d4324a4740c44913edcaf9dac62fdbfc667660353119672db620d98fc1e9afe3e70a812ab6a4805d495f348c825c0f6c8866589d3677dd0834bc5bad07c94ff756d35335c9ea630c32095f7a0aabc6cedfff989"]}, 0x15dc}}, 0x40) 19:30:09 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r1, r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x7ffffff9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:30:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0x60, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:30:09 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x6) syz_emit_ethernet(0xd1, &(0x7f0000000000)={@local, @random="7021a27bffc4", @val={@void}, {@llc_tr={0x11, {@snap={0x0, 0x0, "498d", "e64f71", 0x806, "492bbb3b04b92620c9408b94306c4462e289b2057a663da4fb2a0515a82b785247ec58514963fbeb364a0c7e04c6d546d28d05c9e79618decc23ecc76b46b6ceab918294df7a5547e63a37d7fe2f76e162e46e95ef33b8b781ce100dde0adbeba6c7ff1af08c4f6adb4c808a83b7885a761ef0f89f0a2ddf360cb45030fd3e69c7ce12c4f8e5030f52448430d534ffc6769315a6e2ce8838f588f0ee174724b6f737e219a5e6c20098a6803df962d988ac40271dddd7"}}}}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e22, 0x9, @loopback, 0x7f}, 0x1c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r5, r4) sendfile(r4, r0, &(0x7f0000000180)=0x4f9, 0x1) dup2(r3, r2) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x4, 0x4, 0x81, 0x2, 0x0, 0x4, 0x40000, 0xc, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x90, 0x7ff}, 0x2, 0x100, 0x3, 0x0, 0x1ff, 0x1000, 0x9, 0x0, 0x20, 0x0, 0x4}, 0xffffffffffffffff, 0x0, r3, 0x8) 19:30:09 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x16, 0xd01}, 0x14}}, 0x4008004) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = dup2(r2, r1) lseek(r3, 0x7, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000180)=0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r4, r3, 0x0, 0x7ffffff9) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r5, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000801}, 0x20000080) 19:30:09 executing program 4: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 57) [ 981.908965] netlink: 'syz-executor.1': attribute type 13 has an invalid length. 19:30:09 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 981.929524] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len [ 981.930478] FAULT_INJECTION: forcing a failure. [ 981.930478] name failslab, interval 1, probability 0, space 0, times 0 [ 981.933799] CPU: 1 PID: 7322 Comm: syz-executor.4 Not tainted 5.10.245 #1 [ 981.935279] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 981.937070] Call Trace: [ 981.937642] dump_stack+0x107/0x167 [ 981.938428] should_fail.cold+0x5/0xa [ 981.939257] ? create_object.isra.0+0x3a/0xa30 [ 981.940237] should_failslab+0x5/0x20 [ 981.941057] kmem_cache_alloc+0x5b/0x310 [ 981.941938] create_object.isra.0+0x3a/0xa30 [ 981.942880] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 981.943987] kmem_cache_alloc_trace+0x151/0x320 [ 981.944998] __io_uring_add_tctx_node+0x15c/0x520 [ 981.946036] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 981.947168] ? alloc_fd+0x2e7/0x670 [ 981.947965] io_uring_setup+0x1fbb/0x2980 [ 981.948868] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 981.949954] ? wait_for_completion_io+0x270/0x270 [ 981.951013] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 981.952150] ? syscall_enter_from_user_mode+0x1d/0x50 [ 981.953266] do_syscall_64+0x33/0x40 [ 981.954067] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 981.955181] RIP: 0033:0x7ff9f8ea8b19 [ 981.955986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 981.959950] RSP: 002b:00007ff9f641e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 981.961589] RAX: ffffffffffffffda RBX: 00007ff9f8fbbf60 RCX: 00007ff9f8ea8b19 [ 981.963123] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 981.964663] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 981.966201] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 981.967735] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 19:30:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0x68, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:30:09 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r1, r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r2, 0xffffffffffffffff, 0x0, 0x7ffffff9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:30:09 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 19:30:09 executing program 3: clone3(&(0x7f0000000000)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) clone3(&(0x7f00000004c0)={0x20181000, 0x0, 0x0, &(0x7f0000000280), {}, 0x0, 0x0, 0x0, 0x0}, 0x58) finit_module(0xffffffffffffffff, &(0x7f0000000080)='}&\x00', 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) [ 982.073564] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 982.087351] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len 19:30:09 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r3, r2, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:30:09 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0x6c, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) [ 982.221626] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 982.236528] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len 19:30:09 executing program 4: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 58) [ 982.282901] FAULT_INJECTION: forcing a failure. [ 982.282901] name failslab, interval 1, probability 0, space 0, times 0 [ 982.286884] CPU: 1 PID: 7351 Comm: syz-executor.4 Not tainted 5.10.245 #1 [ 982.288383] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 982.290163] Call Trace: 19:30:09 executing program 0: sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000140), 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0xbc, 0x0, 0x10, 0x0, 0x0, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000}, 0x8044891) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x46e2, 0x12a) ftruncate(r0, 0x1000004) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000200)=ANY=[@ANYBLOB="feff00822db87c3d55efd9599e442eb7afdb49b36aca6ba79b96f004bd6d0886a18278e6d9821c9fc6c31f0c", @ANYRES32=r0, @ANYBLOB="00000000000000002e2f662c86a260b1ec035cfee65237e05634de93ac3f8819dedb65c8fa8891ef2e1462c2cfba9e02ef30e546553ce5"]) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x91) r2 = creat(&(0x7f0000000000)='./file2\x00', 0x0) close(r2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = signalfd(r2, &(0x7f0000000300)={[0x4]}, 0x8) copy_file_range(0xffffffffffffffff, &(0x7f00000002c0)=0x2, r3, &(0x7f0000000340)=0x3, 0x100, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f00000000c0)={0x6200, 0x1f, 0x1}) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000180)) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8000, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) ftruncate(0xffffffffffffffff, 0xd5) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r4, 0x0, r1, 0x0, 0x200f5ef, 0x0) [ 982.290732] dump_stack+0x107/0x167 [ 982.291821] should_fail.cold+0x5/0xa [ 982.292684] ? xas_alloc+0x336/0x440 [ 982.293488] should_failslab+0x5/0x20 [ 982.294303] kmem_cache_alloc+0x5b/0x310 [ 982.295189] ? stack_trace_consume_entry+0x160/0x160 [ 982.296283] xas_alloc+0x336/0x440 [ 982.297044] xas_create+0x34a/0x10d0 [ 982.297848] ? kernel_text_address+0xf2/0x120 [ 982.298809] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 982.299964] xas_store+0x8c/0x1c40 [ 982.300764] __xa_store+0x164/0x2d0 [ 982.301546] ? xa_delete_node+0x280/0x280 [ 982.302440] ? trace_hardirqs_on+0x5b/0x180 [ 982.303382] xa_store+0x31/0x50 19:30:09 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[]) [ 982.304089] __io_uring_add_tctx_node+0x1cf/0x520 19:30:09 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 982.305270] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 982.306510] ? alloc_fd+0x2e7/0x670 [ 982.307317] io_uring_setup+0x1fbb/0x2980 [ 982.308192] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 982.309253] ? wait_for_completion_io+0x270/0x270 [ 982.310284] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 982.311393] ? syscall_enter_from_user_mode+0x1d/0x50 [ 982.312473] do_syscall_64+0x33/0x40 [ 982.313248] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 982.314330] RIP: 0033:0x7ff9f8ea8b19 [ 982.315107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 982.318941] RSP: 002b:00007ff9f641e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 982.320530] RAX: ffffffffffffffda RBX: 00007ff9f8fbbf60 RCX: 00007ff9f8ea8b19 [ 982.322008] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 982.323501] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 982.324984] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 982.326466] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 19:30:23 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[]) 19:30:23 executing program 4: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 59) 19:30:23 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r3, r2, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:30:23 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x43}) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 19:30:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0x74, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:30:23 executing program 3: semget$private(0x0, 0x4, 0x100) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4317, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semop(0x0, &(0x7f0000000040)=[{0x0, 0x4, 0x82b4d8da1ae7c66c}], 0x1) r0 = semget$private(0x0, 0x6, 0x0) semctl$IPC_RMID(r0, 0x0, 0xb) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x2, 0xf747, 0x8]) clock_gettime(0x0, &(0x7f0000000140)) semtimedop(r0, &(0x7f0000000100), 0x0, &(0x7f0000000180)) r1 = semget$private(0x0, 0x4000, 0x0) semtimedop(r1, &(0x7f0000000000), 0x0, &(0x7f0000000040)) semctl$SEM_STAT_ANY(r1, 0x2, 0x14, &(0x7f00000010c0)=""/79) semctl$IPC_RMID(r1, 0x0, 0x0) r2 = semget$private(0x0, 0x6, 0x0) semop(r2, &(0x7f00000000c0)=[{0x3, 0x0, 0x1800}, {}, {0x2, 0x8, 0x800}, {0x4}], 0x4) r3 = semget$private(0x0, 0x2, 0x0) semtimedop(r3, &(0x7f0000000140)=[{}], 0x1, 0x0) semop(0x0, &(0x7f00000001c0)=[{0x0, 0x3, 0x1000}, {0x3, 0x1ff}, {0x4, 0x8, 0x1800}, {0x1, 0x4, 0x1000}], 0x4) semctl$IPC_RMID(r3, 0x0, 0x0) semctl$SEM_INFO(r2, 0x5, 0x13, &(0x7f0000000080)=""/101) unshare(0x48020200) 19:30:23 executing program 6: sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000001c0)='./file1\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000440)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f00000004c0)=ANY=[]) signalfd(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000080)={0x2, 0x1, 0x3}) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) 19:30:23 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ftruncate(r0, 0x800) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendfile(r1, r0, 0x0, 0x8000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = dup2(r3, r2) lseek(r4, 0x7, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000180)=0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r5, r4, 0x0, 0x7ffffff9) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r7, r6) ioctl$AUTOFS_DEV_IOCTL_FAIL(r4, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r6, {0x2, 0x80000000}}, './file1\x00'}) dup2(r0, r1) ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, 0x0) [ 995.578414] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 995.584151] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len [ 995.607484] FAULT_INJECTION: forcing a failure. [ 995.607484] name failslab, interval 1, probability 0, space 0, times 0 [ 995.610140] CPU: 1 PID: 7381 Comm: syz-executor.4 Not tainted 5.10.245 #1 [ 995.611603] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 995.613364] Call Trace: [ 995.613927] dump_stack+0x107/0x167 [ 995.614698] should_fail.cold+0x5/0xa [ 995.615516] ? create_object.isra.0+0x3a/0xa30 [ 995.616485] should_failslab+0x5/0x20 [ 995.617299] kmem_cache_alloc+0x5b/0x310 [ 995.618169] create_object.isra.0+0x3a/0xa30 [ 995.619100] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 995.620202] kmem_cache_alloc+0x159/0x310 [ 995.621095] xas_alloc+0x336/0x440 [ 995.621861] xas_create+0x34a/0x10d0 [ 995.622663] ? kernel_text_address+0xf2/0x120 [ 995.623626] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 995.624740] xas_store+0x8c/0x1c40 [ 995.625522] __xa_store+0x164/0x2d0 [ 995.626301] ? xa_delete_node+0x280/0x280 [ 995.627214] xa_store+0x31/0x50 [ 995.627930] __io_uring_add_tctx_node+0x1cf/0x520 [ 995.628962] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 995.630073] ? alloc_fd+0x2e7/0x670 [ 995.630878] io_uring_setup+0x1fbb/0x2980 [ 995.631782] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 995.632896] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 995.634017] ? syscall_enter_from_user_mode+0x1d/0x50 [ 995.635122] do_syscall_64+0x33/0x40 [ 995.635923] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 995.637011] RIP: 0033:0x7ff9f8ea8b19 [ 995.637799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 995.641697] RSP: 002b:00007ff9f641e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 995.643319] RAX: ffffffffffffffda RBX: 00007ff9f8fbbf60 RCX: 00007ff9f8ea8b19 [ 995.644841] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 995.646356] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 995.647877] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 995.649392] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 19:30:23 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r3, r2, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:30:23 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x43}) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 19:30:23 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0x7a, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) [ 995.773372] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 995.783583] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len 19:30:23 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x43}) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1009.344819] FAULT_INJECTION: forcing a failure. [ 1009.344819] name failslab, interval 1, probability 0, space 0, times 0 [ 1009.346455] CPU: 1 PID: 7403 Comm: syz-executor.4 Not tainted 5.10.245 #1 [ 1009.347341] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1009.348459] Call Trace: [ 1009.348815] dump_stack+0x107/0x167 [ 1009.349305] should_fail.cold+0x5/0xa [ 1009.349811] ? xas_alloc+0x336/0x440 [ 1009.350306] should_failslab+0x5/0x20 [ 1009.350810] kmem_cache_alloc+0x5b/0x310 [ 1009.351348] xas_alloc+0x336/0x440 [ 1009.352060] xas_create+0x34a/0x10d0 19:30:36 executing program 0: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) dup(r3) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000400)=[r0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000700)=""/222, 0xde}], 0x2}, 0x0) r4 = syz_io_uring_setup(0x54e5, &(0x7f0000000680), &(0x7f0000fee000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) ftruncate(r5, 0x1) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000008, 0x2010, r4, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) openat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x10000, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 19:30:36 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0x82, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:30:36 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[]) 19:30:36 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="ff0200000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="080edca050000040"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="020008b645552d9c000300d4ab98a20d713a2a2196a9a9ae01a59aa3219bd5abbb840acff5b0b68194b5de9426fa16aeb8bfc534eafa3497691932df3e5e35a956016492452f1f45cded6c4ae9ea", @ANYRES32=r2, @ANYBLOB="0c009900553b00002b0000000600f7000e0500000400ec00"], 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 19:30:36 executing program 4: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 60) 19:30:36 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, 0x0, 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:30:36 executing program 6: syz_mount_image$msdos(&(0x7f0000001380), &(0x7f00000013c0)='./file1\x00', 0x0, 0x0, &(0x7f0000001540), 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="616c43e877c6757430303030303030303030302c00"]) 19:30:36 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x43}) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x10, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1009.352670] ? queued_spin_lock_slowpath+0xcc/0x8c0 [ 1009.353358] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1009.354023] xas_store+0x8c/0x1c40 [ 1009.354483] __xa_store+0x164/0x2d0 [ 1009.354946] ? xa_delete_node+0x280/0x280 [ 1009.355492] ? trace_hardirqs_on+0x5b/0x180 [ 1009.356054] xa_store+0x31/0x50 [ 1009.356478] __io_uring_add_tctx_node+0x1cf/0x520 [ 1009.357092] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1009.357755] ? alloc_fd+0x2e7/0x670 [ 1009.358223] io_uring_setup+0x1fbb/0x2980 [ 1009.358756] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1009.359413] ? wait_for_completion_io+0x270/0x270 [ 1009.360061] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1009.360734] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1009.360794] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 1009.361391] do_syscall_64+0x33/0x40 [ 1009.363678] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1009.364330] RIP: 0033:0x7ff9f8ea8b19 [ 1009.364805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1009.367189] RSP: 002b:00007ff9f641e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1009.368165] RAX: ffffffffffffffda RBX: 00007ff9f8fbbf60 RCX: 00007ff9f8ea8b19 [ 1009.369074] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 1009.369975] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 1009.370894] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 1009.371805] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 [ 1009.374064] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len [ 1009.376231] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1009.381194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1009.382974] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1009.384937] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1009.391684] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 19:30:37 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x43}) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x10, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 19:30:37 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) openat(r0, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x100000, 0x4) setsockopt$inet_mreqn(r2, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x4, @perf_config_ext={0x2}, 0x2000, 0x1, 0xff, 0x0, 0x0, 0x20000004}, 0x0, 0x0, 0xffffffffffffffff, 0x8) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) dup2(r4, r3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x7, 0x40, 0x8, 0x4, 0x0, 0x200, 0x0, 0xb, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000200), 0x6}, 0x8880, 0x8, 0x3, 0x6, 0xffffffffffffff01, 0x1, 0x5, 0x0, 0x17d7, 0x0, 0x184}, 0x0, 0x0, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000480)) 19:30:37 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000001500)=ANY=[]) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) lseek(r2, 0x7, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000180)=0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r3, r2, 0x0, 0x7ffffff9) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000080)={0x2, 0x80, 0x7f, 0x1f, 0x3f, 0x7, 0x0, 0x7, 0x80, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1ff, 0x2, @perf_bp={&(0x7f0000000040), 0x4}, 0x108, 0x0, 0x3, 0x1, 0x28, 0x3, 0x8d6, 0x0, 0x4, 0x0, 0xfffffffffffffffa}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000008c0)}, 0x0) pipe2(0x0, 0x0) 19:30:37 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="f9854b747a65722c008afa39802a85a96c078f91b4f4e36118a3b59f5e0dbdb2f229f3c39f379008ea8307b9"]) lsetxattr$trusted_overlay_nlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)={0x1cc, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x49de97df}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER={0x94, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffe}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x4, @remote, 0x40}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x80000001}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NET={0x64, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xe4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x800}, 0x0) lseek(r2, 0x7, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000180)=0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r3, r2, 0x0, 0x7ffffff9) 19:30:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0xf0, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:30:37 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x43}) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x10, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1009.528541] cgroup: Unknown subsys name 'ù…Ktzer' 19:30:37 executing program 4: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 61) [ 1009.559399] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 1009.569535] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len 19:30:37 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x43}) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 19:30:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0x300, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:30:37 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, 0x0, 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) [ 1009.650528] FAULT_INJECTION: forcing a failure. [ 1009.650528] name failslab, interval 1, probability 0, space 0, times 0 [ 1009.651864] CPU: 1 PID: 7442 Comm: syz-executor.4 Not tainted 5.10.245 #1 [ 1009.652643] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1009.653587] Call Trace: [ 1009.653629] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 1009.653912] dump_stack+0x107/0x167 [ 1009.656114] should_fail.cold+0x5/0xa [ 1009.656548] ? create_object.isra.0+0x3a/0xa30 [ 1009.657066] should_failslab+0x5/0x20 [ 1009.657504] kmem_cache_alloc+0x5b/0x310 [ 1009.657972] ? mark_held_locks+0x9e/0xe0 [ 1009.658436] create_object.isra.0+0x3a/0xa30 [ 1009.658933] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1009.659519] kmem_cache_alloc+0x159/0x310 [ 1009.659997] xas_alloc+0x336/0x440 [ 1009.660405] xas_create+0x34a/0x10d0 [ 1009.660840] ? kernel_text_address+0xf2/0x120 [ 1009.661349] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1009.661946] xas_store+0x8c/0x1c40 [ 1009.662358] __xa_store+0x164/0x2d0 [ 1009.662777] ? xa_delete_node+0x280/0x280 [ 1009.663257] ? trace_hardirqs_on+0x5b/0x180 [ 1009.663760] xa_store+0x31/0x50 [ 1009.664137] __io_uring_add_tctx_node+0x1cf/0x520 [ 1009.664684] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1009.665278] ? alloc_fd+0x2e7/0x670 [ 1009.665700] io_uring_setup+0x1fbb/0x2980 [ 1009.666174] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1009.666749] ? wait_for_completion_io+0x270/0x270 [ 1009.667313] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1009.667917] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1009.668534] do_syscall_64+0x33/0x40 [ 1009.668971] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1009.669580] RIP: 0033:0x7ff9f8ea8b19 [ 1009.670017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1009.672181] RSP: 002b:00007ff9f641e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1009.673078] RAX: ffffffffffffffda RBX: 00007ff9f8fbbf60 RCX: 00007ff9f8ea8b19 [ 1009.673911] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 1009.674744] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 1009.675596] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 1009.676438] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 [ 1009.678585] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len [ 1009.867562] cgroup: Unknown subsys name 'ù…Ktzer' 19:30:50 executing program 4: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 62) 19:30:50 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x802c2, 0x0) ftruncate(r0, 0x800) r1 = signalfd(r0, &(0x7f0000000040)={[0x9]}, 0x8) r2 = openat(r1, &(0x7f00000000c0)='./file1\x00', 0x241c0, 0x11) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r4 = dup2(r3, r2) lseek(r4, 0x7, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000180)=0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r5, r4, 0x0, 0x7ffffff9) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff5000/0x1000)=nil, 0x1000, 0x4, 0x40010, r4, 0x0) syz_io_uring_submit(r6, 0x0, 0x0, 0x0) mbind(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x0, 0x0, 0x0, 0x2) 19:30:50 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x43}) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 19:30:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0x441, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:30:50 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB]) 19:30:50 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000001700), 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="020000f8", @ANYRES16, @ANYRESDEC], 0x18}}, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x40010, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x78aa, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0x0, 0xfffffffe}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000340)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff], 0x1, 0x0, 0x0, {0x0, r5}}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x2000, @fd_index=0x8, 0x2628, 0x0, 0x0, 0xa, 0x1, {0x2, r5}}, 0x80000) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000002, 0x810, r2, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x200002, 0x0) syz_io_uring_submit(r6, r4, &(0x7f0000000380)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd_index=0x4, 0xe5, {0x0, r0}, 0x8df, 0xa, 0x0, {0x0, r5, r7}}, 0x4) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x10, r2, 0x8000000) syz_io_uring_submit(r8, 0x0, &(0x7f00000000c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0xea, 0x3, &(0x7f0000000140)="1c0c7960b8c887ef416773fe6a1db579e4b5b41cdf1015b7170432acea52eabb8a894e27674f65bd18b99e5eaa860bb35af46f3b17a443f1e58de3fb47411cd8e66979e594ddc0bf83a21d0d7cb1c56d4d5ec109285fa236d1d25906b4de2f298a4e4c63fdabe707f6a8694cbc84fe7e6954f43ba9eb04cf82ddaa3696f3302c", 0x3, 0x0, 0x1, {0x2, r5}}, 0xe5f) 19:30:50 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000001500)=ANY=[]) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) lseek(r2, 0x7, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000180)=0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r3, r2, 0x0, 0x7ffffff9) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000080)={0x2, 0x80, 0x7f, 0x1f, 0x3f, 0x7, 0x0, 0x7, 0x80, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1ff, 0x2, @perf_bp={&(0x7f0000000040), 0x4}, 0x108, 0x0, 0x3, 0x1, 0x28, 0x3, 0x8d6, 0x0, 0x4, 0x0, 0xfffffffffffffffa}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000008c0)}, 0x0) pipe2(0x0, 0x0) 19:30:50 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, 0x0, 0xa001, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) [ 1022.424213] FAULT_INJECTION: forcing a failure. [ 1022.424213] name failslab, interval 1, probability 0, space 0, times 0 [ 1022.425636] CPU: 0 PID: 7456 Comm: syz-executor.4 Not tainted 5.10.245 #1 [ 1022.426469] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1022.427477] Call Trace: [ 1022.427812] dump_stack+0x107/0x167 [ 1022.428258] should_fail.cold+0x5/0xa [ 1022.428724] ? xas_alloc+0x336/0x440 [ 1022.429179] should_failslab+0x5/0x20 [ 1022.429642] kmem_cache_alloc+0x5b/0x310 [ 1022.430144] xas_alloc+0x336/0x440 [ 1022.430577] xas_create+0x34a/0x10d0 [ 1022.431034] ? kernel_text_address+0xf2/0x120 [ 1022.431581] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1022.432236] xas_store+0x8c/0x1c40 [ 1022.432676] __xa_store+0x164/0x2d0 [ 1022.433121] ? xa_delete_node+0x280/0x280 [ 1022.433630] ? trace_hardirqs_on+0x5b/0x180 [ 1022.434156] xa_store+0x31/0x50 [ 1022.434558] __io_uring_add_tctx_node+0x1cf/0x520 [ 1022.435144] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1022.435784] ? alloc_fd+0x2e7/0x670 [ 1022.436231] io_uring_setup+0x1fbb/0x2980 [ 1022.436739] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1022.437355] ? wait_for_completion_io+0x270/0x270 [ 1022.437956] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1022.438598] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1022.439232] do_syscall_64+0x33/0x40 [ 1022.439689] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1022.440319] RIP: 0033:0x7ff9f8ea8b19 [ 1022.440773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1022.443013] RSP: 002b:00007ff9f641e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1022.443947] RAX: ffffffffffffffda RBX: 00007ff9f8fbbf60 RCX: 00007ff9f8ea8b19 [ 1022.444816] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 1022.445688] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 1022.446555] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 1022.447416] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 [ 1022.448205] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 1022.466605] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len 19:30:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0x500, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:30:50 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x43}) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, 0xffffffffffffffff, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 19:30:50 executing program 0: syz_mount_image$ext4(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x21000, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext3\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x2004034, &(0x7f00000000c0)=ANY=[@ANYBLOB="696e6f64655f7265616461686561645f626c6b733d307830bf3cfa583030303030303030383034313030382c00"]) 19:30:50 executing program 3: ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000300)) pipe(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xbe}, 0x0, 0x0, 0x1002, 0x0, 0x7, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x0, @remote={0xac, 0x14, 0x15}}, {0x2, 0x0, @loopback}, {0x2, 0x4e20, @broadcast}}) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f00000003c0)) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, 0x0) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x49) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x4f, 0x0, "3c1c2fd629c4af55a8680f7a892e0865c7fbba0cdfa184016bc00618cdb5732d900802764f98b1af0cd43f34e89ab87a13a460acbb4433cb8a7aaa5797c2f5b5cc15058fbbef4c13daa3094bf3e22ec6"}, 0xd8) syz_io_uring_setup(0x3e01, &(0x7f0000000400)={0x0, 0x100018d7, 0x10, 0x1, 0x376, 0x0, r1}, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fed000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000340)) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040), 0x4) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fstatfs(0xffffffffffffffff, &(0x7f0000002e00)=""/4102) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x5100002}, 0xc, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='\a\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002bbd7000fcdbdf250b0000000800050004000000080004000200000024000280080004000900000006000e004e210000080007000000000008000500620800000800040001010000"], 0x50}, 0x1, 0x0, 0x0, 0x804}, 0x20000000) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x0) dup2(0xffffffffffffffff, r0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x18) ioctl$FITRIM(r3, 0xc0185879, &(0x7f00000000c0)={0x0, 0xfffefffffffffffd}) [ 1022.628155] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 1022.639374] EXT4-fs (sda): Unrecognized mount option "inode_readahead_blks=0x0¿<úX000000008041008" or missing value [ 1022.651857] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len [ 1022.652900] EXT4-fs (sda): Unrecognized mount option "inode_readahead_blks=0x0¿<úX000000008041008" or missing value 19:30:50 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000001500)=ANY=[]) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) lseek(r2, 0x7, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000180)=0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r3, r2, 0x0, 0x7ffffff9) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000080)={0x2, 0x80, 0x7f, 0x1f, 0x3f, 0x7, 0x0, 0x7, 0x80, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1ff, 0x2, @perf_bp={&(0x7f0000000040), 0x4}, 0x108, 0x0, 0x3, 0x1, 0x28, 0x3, 0x8d6, 0x0, 0x4, 0x0, 0xfffffffffffffffa}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000008c0)}, 0x0) pipe2(0x0, 0x0) 19:30:50 executing program 4: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 63) 19:30:50 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB]) [ 1022.701877] FAULT_INJECTION: forcing a failure. [ 1022.701877] name failslab, interval 1, probability 0, space 0, times 0 [ 1022.703337] CPU: 0 PID: 7487 Comm: syz-executor.4 Not tainted 5.10.245 #1 [ 1022.704174] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1022.705176] Call Trace: [ 1022.705502] dump_stack+0x107/0x167 [ 1022.705947] should_fail.cold+0x5/0xa [ 1022.706415] ? create_object.isra.0+0x3a/0xa30 [ 1022.706968] should_failslab+0x5/0x20 [ 1022.707436] kmem_cache_alloc+0x5b/0x310 [ 1022.707990] ? mark_held_locks+0x9e/0xe0 [ 1022.708485] create_object.isra.0+0x3a/0xa30 [ 1022.709016] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1022.709631] kmem_cache_alloc+0x159/0x310 [ 1022.710139] xas_alloc+0x336/0x440 [ 1022.710570] xas_create+0x34a/0x10d0 [ 1022.711024] ? kernel_text_address+0xf2/0x120 [ 1022.711564] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1022.712209] xas_store+0x8c/0x1c40 [ 1022.712648] __xa_store+0x164/0x2d0 [ 1022.713089] ? xa_delete_node+0x280/0x280 [ 1022.713594] ? trace_hardirqs_on+0x5b/0x180 [ 1022.714119] xa_store+0x31/0x50 [ 1022.714520] __io_uring_add_tctx_node+0x1cf/0x520 [ 1022.715103] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1022.715741] ? alloc_fd+0x2e7/0x670 [ 1022.716193] io_uring_setup+0x1fbb/0x2980 [ 1022.716701] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1022.717313] ? wait_for_completion_io+0x270/0x270 [ 1022.717912] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1022.718555] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1022.719184] do_syscall_64+0x33/0x40 [ 1022.719648] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1022.720273] RIP: 0033:0x7ff9f8ea8b19 [ 1022.720726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1022.722976] RSP: 002b:00007ff9f641e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1022.723908] RAX: ffffffffffffffda RBX: 00007ff9f8fbbf60 RCX: 00007ff9f8ea8b19 [ 1022.724789] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 1022.725657] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 1022.726525] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 1022.727389] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 19:30:50 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x43}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 19:30:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0x600, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:30:50 executing program 0: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0xff, 0x0, 0x7fffffef}]}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000340)={0x200500}, 0x18) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000000)) [ 1022.767160] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 1022.768738] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len 19:30:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0x700, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) [ 1022.861016] netlink: 'syz-executor.1': attribute type 13 has an invalid length. 19:30:50 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x61) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) [ 1022.875441] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len 19:30:50 executing program 0: perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0x4}, 0x10080, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0xc) io_uring_enter(0xffffffffffffffff, 0x6acc, 0xb254, 0x0, &(0x7f0000000140)={[0x3]}, 0x8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000640)=""/225, 0xe1) r0 = creat(0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000400)={0x5, 0x80, 0x1, 0x0, 0x4, 0x1f, 0x0, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={&(0x7f00000003c0), 0x4}, 0x1808, 0x3ed, 0x2, 0x3, 0x6000, 0x1, 0x7, 0x0, 0xfff, 0x0, 0x3}, r0, 0xd, 0xffffffffffffffff, 0x0) ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) getpid() r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000001500)=0x8, 0x4) sendto(r1, &(0x7f0000000040)="5ea18a99", 0x4, 0x0, &(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80) recvmmsg(r1, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}}], 0x35f, 0x10062, 0x0) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000000500)=ANY=[]) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000180)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x80004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x7fff, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000380)=ANY=[@ANYBLOB="8a0000"], 0x8) sendmmsg$inet6(r2, &(0x7f0000000080)=[{{0x0, 0x90, &(0x7f00000004c0)=[{&(0x7f00000001c0)="4bc702854e3954b59347985ccc868289d3fe483d2c0900a2a1d12e33a66529e1f276fef452632dfa3c004ce3be84a5f66c29cd4ec39ae5206562fbc9ea3c0dbbebc22e628e147b0e9631f19b0ce0a48e0e675b2da3442226b898f1ddf8eabf133ab4a9cb0999c2ee1d3bd36d089b0d8e97ea00d4c5f6ad14dce058d595aacba2d587ff5eacd81b71a73f53ed276d1f3b3384bb2bfba4e0f37302e690df9e7024378ac754ac0576f996f3ee53d1034c7720767ddf2625817532f7ae89103367b73a36152b84c38bc227ba9e9ff48bcfe027585cf14bff37a888", 0xff41}], 0x1}}], 0x1, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f0000000000)=@hopopts={0x1d}, 0x8) 19:30:50 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x43}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 19:30:50 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip6_mr_vif\x00') getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000040)={'filter\x00', 0x0, [0x1000, 0x2c2, 0x3, 0xff, 0x7]}, &(0x7f00000000c0)=0x54) openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x200040, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='freezer.self_freezing\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000180)={{0x3a, @remote, 0x4e24, 0x0, 'nq\x00', 0x4, 0x4, 0x6c}, {@multicast2, 0x0, 0x6, 0x0, 0x3, 0xfff}}, 0x44) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000180)=0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r2, 0xffffffffffffffff, 0x0, 0x7ffffff9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r4, r3) sendfile(r2, r3, 0x0, 0x6) setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000200)={@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101}, 0x8) socket$inet(0x2, 0x5, 0x80) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000240), 0xa0000, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, 0x0) r6 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0), 0x2, 0x0) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f0000000400)={{r6}, 0x4, &(0x7f00000003c0)=[0x2, 0x1, 0x0, 0x9], 0x9, 0x0, [0x7, 0x0, 0x5]}) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000480)={0x0, 'batadv0\x00', 0x4}, 0x18) io_uring_setup(0x3662, &(0x7f0000000780)={0x0, 0x8048, 0x2, 0x1, 0x1f6, 0x0, r5}) 19:30:50 executing program 4: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 64) 19:30:50 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0x900, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) [ 1022.977223] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 1022.979595] FAULT_INJECTION: forcing a failure. [ 1022.979595] name failslab, interval 1, probability 0, space 0, times 0 [ 1022.982113] CPU: 1 PID: 7516 Comm: syz-executor.4 Not tainted 5.10.245 #1 [ 1022.983571] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1022.985335] Call Trace: [ 1022.985890] dump_stack+0x107/0x167 [ 1022.986794] should_fail.cold+0x5/0xa [ 1022.987825] ? xas_alloc+0x336/0x440 [ 1022.988721] should_failslab+0x5/0x20 [ 1022.989524] kmem_cache_alloc+0x5b/0x310 [ 1022.990382] xas_alloc+0x336/0x440 [ 1022.991132] xas_create+0x34a/0x10d0 [ 1022.991935] ? kernel_text_address+0xf2/0x120 [ 1022.992878] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1022.993986] xas_store+0x8c/0x1c40 [ 1022.994748] __xa_store+0x164/0x2d0 [ 1022.995512] ? xa_delete_node+0x280/0x280 [ 1022.996413] ? trace_hardirqs_on+0x5b/0x180 [ 1022.997322] xa_store+0x31/0x50 [ 1022.998023] __io_uring_add_tctx_node+0x1cf/0x520 [ 1022.999037] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1023.000153] ? alloc_fd+0x2e7/0x670 [ 1023.000925] io_uring_setup+0x1fbb/0x2980 [ 1023.001811] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1023.002873] ? wait_for_completion_io+0x270/0x270 [ 1023.003918] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1023.005030] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1023.006115] do_syscall_64+0x33/0x40 [ 1023.006899] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1023.007985] RIP: 0033:0x7ff9f8ea8b19 [ 1023.008764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1023.012631] RSP: 002b:00007ff9f641e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1023.014241] RAX: ffffffffffffffda RBX: 00007ff9f8fbbf60 RCX: 00007ff9f8ea8b19 [ 1023.015747] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 1023.017256] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 1023.018752] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 1023.020249] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 [ 1023.022030] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len 19:30:50 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x43}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 19:31:05 executing program 4: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 65) 19:31:05 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000001500)=ANY=[]) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) lseek(r2, 0x7, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000180)=0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r3, r2, 0x0, 0x7ffffff9) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000080)={0x2, 0x80, 0x7f, 0x1f, 0x3f, 0x7, 0x0, 0x7, 0x80, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1ff, 0x2, @perf_bp={&(0x7f0000000040), 0x4}, 0x108, 0x0, 0x3, 0x1, 0x28, 0x3, 0x8d6, 0x0, 0x4, 0x0, 0xfffffffffffffffa}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000008c0)}, 0x0) pipe2(0x0, 0x0) 19:31:05 executing program 3: unshare(0x8000000) r0 = semget$private(0x0, 0x4000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000000c0)) r1 = semget(0x1, 0x4, 0x20c) r2 = semget$private(0x0, 0x4, 0x100) semctl$GETALL(r2, 0x0, 0xd, &(0x7f0000000100)=""/44) semtimedop(r2, &(0x7f00000003c0)=[{0x3, 0x1, 0x1000}], 0x1, &(0x7f0000000400)={0x77359400}) r3 = creat(&(0x7f0000000440)='./file0\x00', 0x0) fcntl$lock(r3, 0x6, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x43}) readv(r3, &(0x7f0000000040)=[{&(0x7f0000000140)=""/222, 0xde}, {&(0x7f0000000240)=""/237, 0xed}], 0x2) semctl$IPC_RMID(r1, 0x0, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f00000000c0)=""/110) semop(0x0, &(0x7f0000000000)=[{0x4, 0x886, 0x3800}, {0x3, 0x101, 0x1000}, {0x3, 0x80, 0x800}], 0x3) semctl$GETNCNT(0x0, 0x0, 0xe, &(0x7f0000000080)=""/5) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000340)=""/99) semctl$IPC_RMID(0x0, 0x0, 0x0) 19:31:05 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:31:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0xa00, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:31:05 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x43}) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 19:31:05 executing program 0: prctl$PR_MCE_KILL(0x21, 0x1, 0x2) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) prctl$PR_MCE_KILL(0x21, 0x1, 0x3) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) prctl$PR_MCE_KILL(0x21, 0x1, 0x3) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) 19:31:05 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB]) [ 1037.993269] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 1037.995486] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len [ 1038.026821] FAULT_INJECTION: forcing a failure. [ 1038.026821] name failslab, interval 1, probability 0, space 0, times 0 [ 1038.029572] CPU: 0 PID: 7544 Comm: syz-executor.4 Not tainted 5.10.245 #1 [ 1038.031111] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1038.032989] Call Trace: [ 1038.033582] dump_stack+0x107/0x167 [ 1038.034408] should_fail.cold+0x5/0xa [ 1038.035264] ? create_object.isra.0+0x3a/0xa30 [ 1038.036299] should_failslab+0x5/0x20 [ 1038.037154] kmem_cache_alloc+0x5b/0x310 [ 1038.038062] ? mark_held_locks+0x9e/0xe0 [ 1038.038977] create_object.isra.0+0x3a/0xa30 [ 1038.039970] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1038.041127] kmem_cache_alloc+0x159/0x310 [ 1038.042066] xas_alloc+0x336/0x440 [ 1038.042866] xas_create+0x34a/0x10d0 [ 1038.043714] ? kernel_text_address+0xf2/0x120 [ 1038.044732] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1038.045909] xas_store+0x8c/0x1c40 [ 1038.046726] __xa_store+0x164/0x2d0 [ 1038.047545] ? xa_delete_node+0x280/0x280 [ 1038.048502] ? trace_hardirqs_on+0x5b/0x180 [ 1038.049478] xa_store+0x31/0x50 [ 1038.050222] __io_uring_add_tctx_node+0x1cf/0x520 [ 1038.051301] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1038.052481] ? alloc_fd+0x2e7/0x670 [ 1038.053309] io_uring_setup+0x1fbb/0x2980 [ 1038.054246] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1038.055375] ? wait_for_completion_io+0x270/0x270 [ 1038.056490] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1038.057671] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1038.058839] do_syscall_64+0x33/0x40 [ 1038.059675] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1038.060851] RIP: 0033:0x7ff9f8ea8b19 [ 1038.061684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1038.065820] RSP: 002b:00007ff9f641e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1038.067536] RAX: ffffffffffffffda RBX: 00007ff9f8fbbf60 RCX: 00007ff9f8ea8b19 [ 1038.069154] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 1038.070756] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 1038.072367] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 1038.073983] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 19:31:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0xf00, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:31:05 executing program 0: r0 = fsopen(&(0x7f0000000000)='ntfs\x00', 0x0) fsmount(r0, 0x0, 0x72) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) write$binfmt_elf64(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f453a46fe0000000000000000000000000000000000000000000000000000009efdffffffffffff000000000000000000000000000038000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000084077ff611ba9d4ba423da04e1cd453d619c6735484d1ffc7713c350a4dff3579c0fc4d60ac862918d38542ef906c80adbb2bb9fdd3195f1b7a3341162aa0638f570f35e56ff92a59523a0e2fa035ca406dfbd1ee6e97cb5efeba0c5c8177ade97df33b760e540c2e4243d9ae591a7940fb01f4f9d9105a5613e6bc0a5cf41f74fc22ff9a051aced4c9311a62b70832ad11c564fc22cf3ee53bd45a405c000f1df7b0bfb5788154a2212b7118450828f1325f1d2090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000505c00"/813], 0x32d) [ 1038.095637] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 1038.100330] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len 19:31:05 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x43}) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 19:31:05 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0x4000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) [ 1038.185751] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 1038.193742] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len 19:31:22 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000001500)=ANY=[]) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) lseek(r2, 0x7, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000180)=0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r3, r2, 0x0, 0x7ffffff9) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000080)={0x2, 0x80, 0x7f, 0x1f, 0x3f, 0x7, 0x0, 0x7, 0x80, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1ff, 0x2, @perf_bp={&(0x7f0000000040), 0x4}, 0x108, 0x0, 0x3, 0x1, 0x28, 0x3, 0x8d6, 0x0, 0x4, 0x0, 0xfffffffffffffffa}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000008c0)}, 0x0) 19:31:22 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:31:22 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000"/128]) [ 1055.207674] netlink: 'syz-executor.1': attribute type 13 has an invalid length. 19:31:22 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0x4104, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:31:22 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) [ 1055.227480] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len [ 1055.261282] FAULT_INJECTION: forcing a failure. [ 1055.261282] name failslab, interval 1, probability 0, space 0, times 0 [ 1055.264375] CPU: 0 PID: 7583 Comm: syz-executor.4 Not tainted 5.10.245 #1 [ 1055.266143] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1055.268305] Call Trace: [ 1055.268996] dump_stack+0x107/0x167 [ 1055.269947] should_fail.cold+0x5/0xa [ 1055.270945] ? xas_alloc+0x336/0x440 [ 1055.271913] should_failslab+0x5/0x20 [ 1055.272931] kmem_cache_alloc+0x5b/0x310 [ 1055.273988] xas_alloc+0x336/0x440 [ 1055.274915] xas_create+0x34a/0x10d0 [ 1055.275895] ? kernel_text_address+0xf2/0x120 [ 1055.277071] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1055.278433] xas_store+0x8c/0x1c40 [ 1055.279382] __xa_store+0x164/0x2d0 [ 1055.280352] ? xa_delete_node+0x280/0x280 [ 1055.281446] ? trace_hardirqs_on+0x5b/0x180 [ 1055.282582] xa_store+0x31/0x50 [ 1055.283448] __io_uring_add_tctx_node+0x1cf/0x520 [ 1055.284725] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1055.286107] ? alloc_fd+0x2e7/0x670 [ 1055.287081] io_uring_setup+0x1fbb/0x2980 [ 1055.288195] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1055.289533] ? wait_for_completion_io+0x270/0x270 [ 1055.290837] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 19:31:22 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x43}) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 19:31:22 executing program 0: perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x42, 0x9, 0x0, 0x0, 0x0, 0x5e, 0x80001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0xdf0, 0x40000100000000}, 0x0, 0x4000, 0x2, 0x3, 0x3a5, 0x3, 0xdffe, 0x0, 0x1, 0x0, 0x80000000000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x3, @loopback}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x882c2, 0x162) r2 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x44084) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0x40000006c, 0x38cb836d, 0x100000000000}) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x4, 0xffffffff, 0x1f, 0x4}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x4}, 0x7) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r2, 0x0, &(0x7f0000000400)="ef9852ef38e15986d9bb135e45cd3a330204256d6a082a97a14cfb7922c7fd6655112fa15d7d063909f3bc6fddf2e4cee5f35d42f49889c99ff3606e3e3e4a092e9f03c80b33408924740e183e78cba075346d784fe87bf1714c7745412861f85e6b4e06328c4fda5028a5f616f6d8d31721e644c338497a0b39290fd1c0e31b92de4682e3baf4908148e06ca321995c2a13b0e088246aa17d9d8171de565ea2d0a1349e670268d2278405513025b1b87b88903485b7d285189388d0ac16598893d49d337cd386e6a67e609821451bc40a79d02af67f0071d1e0c36593fe65883b5aed5ef7", 0xe5, 0x4, 0x1}, 0x1) openat(0xffffffffffffffff, &(0x7f0000000280)='./file0\x00', 0x10002, 0x20) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x5, 0x4000, @fd, 0x9e0, &(0x7f0000000240)=[{&(0x7f0000000500)="62dcdf5874cf3ac6bbd994d687355b9293f001e610d5d26fb5233c6e7ae0f7f3866b8dc5763edf80f1d27913c9b2308d0b9b2d1f0249ac155e8b32da80e8f1690cb76b336ce61b333512ecd5f16eddcc90fec6677c04b15254c0e7cf559af9a68616fbe375e994538b523e8817b5cb5e79376377957b1e30aa6a21233734476a9afcf78d2d04df7a0b291a970608c6d57a382526e5ff000000b60efe1d6a5d32ae1938e3e6000000000000000000008b33137bfb415504375b941ce5d09fd064cce0b94e723e8dbdc51914f6590544937437655bfaeff01517d09956dacf5b45511360913803ec40", 0xe8}], 0x1, 0x0, 0x0, {0x2}}, 0xfe) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x40001) 19:31:22 executing program 4: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 66) [ 1055.292239] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1055.293857] do_syscall_64+0x33/0x40 [ 1055.294851] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1055.296235] RIP: 0033:0x7ff9f8ea8b19 [ 1055.297228] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1055.302139] RSP: 002b:00007ff9f641e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1055.304085] RAX: ffffffffffffffda RBX: 00007ff9f8fbbf60 RCX: 00007ff9f8ea8b19 [ 1055.305846] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 1055.307495] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 1055.309152] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 1055.310794] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 19:31:39 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x43}) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, 0x0, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 19:31:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0x4800, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:31:39 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:31:39 executing program 4: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 67) 19:31:39 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000001500)=ANY=[]) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) lseek(r2, 0x7, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000180)=0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r3, r2, 0x0, 0x7ffffff9) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000080)={0x2, 0x80, 0x7f, 0x1f, 0x3f, 0x7, 0x0, 0x7, 0x80, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1ff, 0x2, @perf_bp={&(0x7f0000000040), 0x4}, 0x108, 0x0, 0x3, 0x1, 0x28, 0x3, 0x8d6, 0x0, 0x4, 0x0, 0xfffffffffffffffa}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000008c0)}, 0x0) 19:31:39 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB]) 19:31:39 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:31:39 executing program 0: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, &(0x7f0000000000)) ioctl$SG_IO(r0, 0x2285, &(0x7f00000011c0)={0x53, 0xfffffffffffffffe, 0x0, 0x0, @buffer={0x0, 0x100c, &(0x7f0000001240)=""/4108}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1071.565332] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 1071.571862] FAULT_INJECTION: forcing a failure. [ 1071.571862] name failslab, interval 1, probability 0, space 0, times 0 [ 1071.574418] CPU: 1 PID: 7599 Comm: syz-executor.4 Not tainted 5.10.245 #1 [ 1071.575941] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1071.577789] Call Trace: [ 1071.578392] dump_stack+0x107/0x167 [ 1071.579213] should_fail.cold+0x5/0xa [ 1071.580066] ? create_object.isra.0+0x3a/0xa30 [ 1071.581096] should_failslab+0x5/0x20 [ 1071.581947] kmem_cache_alloc+0x5b/0x310 [ 1071.582857] ? mark_held_locks+0x9e/0xe0 [ 1071.583770] create_object.isra.0+0x3a/0xa30 [ 1071.584760] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1071.585900] kmem_cache_alloc+0x159/0x310 [ 1071.586834] xas_alloc+0x336/0x440 [ 1071.587634] xas_create+0x34a/0x10d0 [ 1071.588495] ? kernel_text_address+0xf2/0x120 [ 1071.589502] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1071.590674] xas_store+0x8c/0x1c40 [ 1071.591487] __xa_store+0x164/0x2d0 [ 1071.592319] ? xa_delete_node+0x280/0x280 [ 1071.593253] ? trace_hardirqs_on+0x5b/0x180 [ 1071.594222] xa_store+0x31/0x50 [ 1071.594964] __io_uring_add_tctx_node+0x1cf/0x520 [ 1071.596033] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1071.597202] ? alloc_fd+0x2e7/0x670 [ 1071.598031] io_uring_setup+0x1fbb/0x2980 [ 1071.598963] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1071.600084] ? wait_for_completion_io+0x270/0x270 [ 1071.601192] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1071.602356] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1071.603503] do_syscall_64+0x33/0x40 [ 1071.604341] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1071.605474] RIP: 0033:0x7ff9f8ea8b19 [ 1071.606300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1071.610353] RSP: 002b:00007ff9f641e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1071.612037] RAX: ffffffffffffffda RBX: 00007ff9f8fbbf60 RCX: 00007ff9f8ea8b19 [ 1071.613624] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 1071.615202] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 1071.616787] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 1071.618363] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 [ 1071.626152] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len 19:31:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0x4c00, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:31:39 executing program 0: sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0xbc, 0x0, 0x10, 0x70bd29, 0x0, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000}, 0x8044891) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ftruncate(r0, 0x1000004) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000200)=ANY=[@ANYBLOB="feff00822db87c3d55efd9599e442eb7afdb49b36aca6ba79b96f004bda18278e6d9821c9fc6c31f0c000000e07b63f53cd2cf63c2d46771bf84", @ANYRES32=r0, @ANYBLOB="00000000000000002e2f662c86a260b1ec035cfee65237e05634de93ac3f8819dedb65c8fa8891ef2e1462c2cfba9e02ef30e546553ce5"]) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100)=[r0, 0xffffffffffffffff], 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x91) r2 = creat(&(0x7f0000000000)='./file2\x00', 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="200100000000000000000000000000027f00000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c7ba67cb7d38793daf5bb8e"], 0x134}}, 0x0) close(r2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c005ba5ecc6e7fb6e7d0dad9b35d62f5c81e62fb99001a79d59a3e0554bed7040b9d43755a90faac153fe854c9d8bcf5ac89ee993effb1ea02fcc06a3673a0f57bb4e2f8bffe38700aa488b456680f92c4e89991e59995c980245fd2fafd529bfda786a3077e779f3a2b467c679035d3d3d65fe02cf854554dd571fee"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, &(0x7f00000000c0)={0x0, 0x1f, 0x1}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000300)={0x3, &(0x7f00000002c0)=[{0x7c00, 0x6, 0xff, 0x1}, {0x1, 0x2, 0xfa, 0x9}, {0x7, 0x40, 0x4, 0x62}]}) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8000, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lseek(r1, 0x0, 0x2) ftruncate(r2, 0x5) ftruncate(0xffffffffffffffff, 0xd5) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128) copy_file_range(r3, 0x0, r1, 0x0, 0x200f5ef, 0x0) 19:31:39 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x43}) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, 0x0, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1071.737843] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 1071.748455] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len 19:31:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0x6000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:31:39 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:31:39 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x43}) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, 0x0, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1071.867592] netlink: 'syz-executor.1': attribute type 13 has an invalid length. 19:31:39 executing program 4: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 68) [ 1071.880893] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len 19:31:39 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000001500)=ANY=[]) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) lseek(r2, 0x7, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000180)=0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r3, r2, 0x0, 0x7ffffff9) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000080)={0x2, 0x80, 0x7f, 0x1f, 0x3f, 0x7, 0x0, 0x7, 0x80, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1ff, 0x2, @perf_bp={&(0x7f0000000040), 0x4}, 0x108, 0x0, 0x3, 0x1, 0x28, 0x3, 0x8d6, 0x0, 0x4, 0x0, 0xfffffffffffffffa}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)) 19:31:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0x6800, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:31:39 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000001500)=ANY=[]) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) lseek(r2, 0x7, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000180)=0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r3, r2, 0x0, 0x7ffffff9) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000080)={0x2, 0x80, 0x7f, 0x1f, 0x3f, 0x7, 0x0, 0x7, 0x80, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1ff, 0x2, @perf_bp={&(0x7f0000000040), 0x4}, 0x108, 0x0, 0x3, 0x1, 0x28, 0x3, 0x8d6, 0x0, 0x4, 0x0, 0xfffffffffffffffa}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000008c0)}, 0x0) [ 1071.965468] FAULT_INJECTION: forcing a failure. [ 1071.965468] name failslab, interval 1, probability 0, space 0, times 0 [ 1071.968140] CPU: 1 PID: 7630 Comm: syz-executor.4 Not tainted 5.10.245 #1 [ 1071.969660] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1071.971489] Call Trace: [ 1071.972084] dump_stack+0x107/0x167 [ 1071.972908] should_fail.cold+0x5/0xa [ 1071.973754] ? xas_alloc+0x336/0x440 [ 1071.974581] should_failslab+0x5/0x20 [ 1071.975423] kmem_cache_alloc+0x5b/0x310 [ 1071.976343] xas_alloc+0x336/0x440 [ 1071.977138] xas_create+0x34a/0x10d0 [ 1071.977973] ? kernel_text_address+0xf2/0x120 [ 1071.978988] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1071.980149] xas_store+0x8c/0x1c40 [ 1071.980967] __xa_store+0x164/0x2d0 [ 1071.981779] ? xa_delete_node+0x280/0x280 [ 1071.982708] ? trace_hardirqs_on+0x5b/0x180 [ 1071.983674] xa_store+0x31/0x50 [ 1071.984422] __io_uring_add_tctx_node+0x1cf/0x520 [ 1071.985491] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1071.986647] ? alloc_fd+0x2e7/0x670 [ 1071.987468] io_uring_setup+0x1fbb/0x2980 [ 1071.988411] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1071.989529] ? wait_for_completion_io+0x270/0x270 [ 1071.990623] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1071.991783] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1071.992940] do_syscall_64+0x33/0x40 [ 1071.993767] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1071.994898] RIP: 0033:0x7ff9f8ea8b19 [ 1071.995723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1071.999753] RSP: 002b:00007ff9f641e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1072.001439] RAX: ffffffffffffffda RBX: 00007ff9f8fbbf60 RCX: 00007ff9f8ea8b19 [ 1072.003008] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 1072.004585] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 1072.006162] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 1072.007742] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 19:31:39 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) [ 1072.022603] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 1072.024032] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len 19:31:39 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x43}) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 19:31:39 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB]) 19:31:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0x6c00, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) [ 1072.129722] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 1072.136638] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len 19:31:39 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, 0x0) 19:31:39 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0x7400, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) [ 1072.218794] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 1072.232423] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len [ 1085.315312] FAULT_INJECTION: forcing a failure. [ 1085.315312] name failslab, interval 1, probability 0, space 0, times 0 [ 1085.316901] CPU: 1 PID: 7659 Comm: syz-executor.4 Not tainted 5.10.245 #1 [ 1085.317811] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1085.318895] Call Trace: [ 1085.319254] dump_stack+0x107/0x167 [ 1085.319746] should_fail.cold+0x5/0xa [ 1085.320254] ? create_object.isra.0+0x3a/0xa30 [ 1085.320865] should_failslab+0x5/0x20 [ 1085.321374] kmem_cache_alloc+0x5b/0x310 [ 1085.321912] ? mark_held_locks+0x9e/0xe0 [ 1085.322454] create_object.isra.0+0x3a/0xa30 [ 1085.323039] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1085.323719] kmem_cache_alloc+0x159/0x310 [ 1085.324278] xas_alloc+0x336/0x440 [ 1085.324728] xas_create+0x34a/0x10d0 [ 1085.325132] ? kernel_text_address+0xf2/0x120 [ 1085.325608] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1085.326165] xas_store+0x8c/0x1c40 [ 1085.326552] __xa_store+0x164/0x2d0 [ 1085.326941] ? xa_delete_node+0x280/0x280 [ 1085.327386] ? trace_hardirqs_on+0x5b/0x180 [ 1085.327854] xa_store+0x31/0x50 [ 1085.328207] __io_uring_add_tctx_node+0x1cf/0x520 [ 1085.328728] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1085.329283] ? alloc_fd+0x2e7/0x670 [ 1085.329681] io_uring_setup+0x1fbb/0x2980 [ 1085.330131] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1085.330668] ? wait_for_completion_io+0x270/0x270 [ 1085.331194] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1085.331755] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1085.332305] do_syscall_64+0x33/0x40 [ 1085.332709] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1085.333252] RIP: 0033:0x7ff9f8ea8b19 [ 1085.333650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1085.335597] RSP: 002b:00007ff9f641e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1085.336405] RAX: ffffffffffffffda RBX: 00007ff9f8fbbf60 RCX: 00007ff9f8ea8b19 [ 1085.337170] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 1085.337931] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 1085.338687] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 1085.339443] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 [ 1085.350111] netlink: 'syz-executor.1': attribute type 13 has an invalid length. 19:31:52 executing program 4: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 69) 19:31:52 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:31:52 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB]) 19:31:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0x7a00, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:31:52 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x43}) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 19:31:52 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000001500)=ANY=[]) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) lseek(r2, 0x7, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000180)=0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r3, r2, 0x0, 0x7ffffff9) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000080)={0x2, 0x80, 0x7f, 0x1f, 0x3f, 0x7, 0x0, 0x7, 0x80, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1ff, 0x2, @perf_bp={&(0x7f0000000040), 0x4}, 0x108, 0x0, 0x3, 0x1, 0x28, 0x3, 0x8d6, 0x0, 0x4, 0x0, 0xfffffffffffffffa}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) 19:31:52 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, 0x0) 19:31:52 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000001500)=ANY=[]) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) lseek(r2, 0x7, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000180)=0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r3, r2, 0x0, 0x7ffffff9) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000080)={0x2, 0x80, 0x7f, 0x1f, 0x3f, 0x7, 0x0, 0x7, 0x80, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1ff, 0x2, @perf_bp={&(0x7f0000000040), 0x4}, 0x108, 0x0, 0x3, 0x1, 0x28, 0x3, 0x8d6, 0x0, 0x4, 0x0, 0xfffffffffffffffa}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000008c0)}, 0x0) [ 1085.353768] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len 19:31:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0x8100, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) [ 1085.414414] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 1085.417895] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len 19:31:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0x8200, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:31:53 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x43}) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1085.472025] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 1085.477671] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len 19:31:53 executing program 4: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 70) 19:31:53 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0xf000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:31:53 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000001500)=ANY=[]) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) lseek(r2, 0x7, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000180)=0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r3, r2, 0x0, 0x7ffffff9) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000080)={0x2, 0x80, 0x7f, 0x1f, 0x3f, 0x7, 0x0, 0x7, 0x80, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1ff, 0x2, @perf_bp={&(0x7f0000000040), 0x4}, 0x108, 0x0, 0x3, 0x1, 0x28, 0x3, 0x8d6, 0x0, 0x4, 0x0, 0xfffffffffffffffa}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 1085.538406] FAULT_INJECTION: forcing a failure. [ 1085.538406] name failslab, interval 1, probability 0, space 0, times 0 [ 1085.539710] CPU: 1 PID: 7687 Comm: syz-executor.4 Not tainted 5.10.245 #1 [ 1085.540441] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1085.541343] Call Trace: [ 1085.541637] dump_stack+0x107/0x167 [ 1085.542027] should_fail.cold+0x5/0xa [ 1085.542435] ? create_object.isra.0+0x3a/0xa30 [ 1085.542927] should_failslab+0x5/0x20 [ 1085.543333] kmem_cache_alloc+0x5b/0x310 [ 1085.543768] ? mark_held_locks+0x9e/0xe0 [ 1085.544204] create_object.isra.0+0x3a/0xa30 [ 1085.544682] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1085.545225] kmem_cache_alloc+0x159/0x310 [ 1085.545670] xas_alloc+0x336/0x440 [ 1085.546051] xas_create+0x34a/0x10d0 [ 1085.546453] ? kernel_text_address+0xf2/0x120 [ 1085.546931] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1085.547489] xas_store+0x8c/0x1c40 [ 1085.547879] __xa_store+0x164/0x2d0 [ 1085.548269] ? xa_delete_node+0x280/0x280 [ 1085.548723] ? trace_hardirqs_on+0x5b/0x180 [ 1085.549192] xa_store+0x31/0x50 [ 1085.549545] __io_uring_add_tctx_node+0x1cf/0x520 [ 1085.550059] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1085.550615] ? alloc_fd+0x2e7/0x670 [ 1085.551010] io_uring_setup+0x1fbb/0x2980 [ 1085.551456] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1085.551996] ? wait_for_completion_io+0x270/0x270 [ 1085.552530] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1085.553094] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1085.553646] do_syscall_64+0x33/0x40 [ 1085.554042] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1085.554586] RIP: 0033:0x7ff9f8ea8b19 [ 1085.554983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1085.556950] RSP: 002b:00007ff9f641e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1085.557761] RAX: ffffffffffffffda RBX: 00007ff9f8fbbf60 RCX: 00007ff9f8ea8b19 [ 1085.558521] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 1085.559281] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 1085.560041] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 1085.560812] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 19:31:53 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x43}) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1085.586177] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 1085.587415] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len 19:32:06 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, 0x0) 19:32:06 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000001500)=ANY=[]) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) lseek(r2, 0x7, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000180)=0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r3, r2, 0x0, 0x7ffffff9) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000080)={0x2, 0x80, 0x7f, 0x1f, 0x3f, 0x7, 0x0, 0x7, 0x80, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1ff, 0x2, @perf_bp={&(0x7f0000000040), 0x4}, 0x108, 0x0, 0x3, 0x1, 0x28, 0x3, 0x8d6, 0x0, 0x4, 0x0, 0xfffffffffffffffa}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index, 0x0, &(0x7f00000008c0)}, 0x0) 19:32:06 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:32:06 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x43}) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) 19:32:06 executing program 4: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 71) 19:32:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0x80000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:32:06 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000001500)=ANY=[]) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) lseek(r2, 0x7, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000180)=0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r3, r2, 0x0, 0x7ffffff9) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000080)={0x2, 0x80, 0x7f, 0x1f, 0x3f, 0x7, 0x0, 0x7, 0x80, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1ff, 0x2, @perf_bp={&(0x7f0000000040), 0x4}, 0x108, 0x0, 0x3, 0x1, 0x28, 0x3, 0x8d6, 0x0, 0x4, 0x0, 0xfffffffffffffffa}) 19:32:06 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff010000000000000400"/64]) [ 1099.233482] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 1099.234962] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len [ 1099.256512] FAULT_INJECTION: forcing a failure. [ 1099.256512] name failslab, interval 1, probability 0, space 0, times 0 [ 1099.259752] CPU: 0 PID: 7714 Comm: syz-executor.4 Not tainted 5.10.245 #1 [ 1099.261645] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1099.263663] Call Trace: [ 1099.264296] dump_stack+0x107/0x167 [ 1099.265175] should_fail.cold+0x5/0xa [ 1099.266087] ? create_object.isra.0+0x3a/0xa30 [ 1099.267199] should_failslab+0x5/0x20 [ 1099.268120] kmem_cache_alloc+0x5b/0x310 [ 1099.269128] ? mark_held_locks+0x9e/0xe0 [ 1099.270139] create_object.isra.0+0x3a/0xa30 [ 1099.271204] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1099.272440] kmem_cache_alloc+0x159/0x310 [ 1099.273588] xas_alloc+0x336/0x440 [ 1099.274457] xas_create+0x34a/0x10d0 [ 1099.275365] ? kernel_text_address+0xf2/0x120 [ 1099.276460] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1099.277770] xas_store+0x8c/0x1c40 [ 1099.278642] __xa_store+0x164/0x2d0 [ 1099.279524] ? xa_delete_node+0x280/0x280 [ 1099.280549] ? trace_hardirqs_on+0x5b/0x180 [ 1099.281606] xa_store+0x31/0x50 [ 1099.282407] __io_uring_add_tctx_node+0x1cf/0x520 [ 1099.283579] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1099.284861] ? alloc_fd+0x2e7/0x670 [ 1099.285761] io_uring_setup+0x1fbb/0x2980 [ 1099.286784] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1099.288021] ? wait_for_completion_io+0x270/0x270 [ 1099.289221] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1099.290490] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1099.291754] do_syscall_64+0x33/0x40 [ 1099.292770] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1099.294283] RIP: 0033:0x7ff9f8ea8b19 [ 1099.295190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1099.299734] RSP: 002b:00007ff9f641e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1099.301595] RAX: ffffffffffffffda RBX: 00007ff9f8fbbf60 RCX: 00007ff9f8ea8b19 [ 1099.303351] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 1099.305093] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 1099.306834] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 1099.308571] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 19:32:06 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0xe0ffff, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:32:07 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x43}) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1099.383978] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 1099.393950] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len 19:32:07 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) [ 1111.592296] FAULT_INJECTION: forcing a failure. [ 1111.592296] name failslab, interval 1, probability 0, space 0, times 0 [ 1111.593743] CPU: 1 PID: 7735 Comm: syz-executor.4 Not tainted 5.10.245 #1 [ 1111.594472] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1111.595420] Call Trace: [ 1111.595722] dump_stack+0x107/0x167 [ 1111.596147] should_fail.cold+0x5/0xa [ 1111.596586] ? xas_alloc+0x336/0x440 [ 1111.597022] should_failslab+0x5/0x20 [ 1111.597451] kmem_cache_alloc+0x5b/0x310 [ 1111.597915] xas_alloc+0x336/0x440 [ 1111.598323] xas_create+0x34a/0x10d0 [ 1111.598732] ? kernel_text_address+0xf2/0x120 [ 1111.599247] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1111.599815] xas_store+0x8c/0x1c40 [ 1111.600233] __xa_store+0x164/0x2d0 [ 1111.600652] ? xa_delete_node+0x280/0x280 [ 1111.601111] ? trace_hardirqs_on+0x5b/0x180 [ 1111.601576] xa_store+0x31/0x50 19:32:19 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000001500)=ANY=[]) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) lseek(r2, 0x7, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000180)=0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r3, r2, 0x0, 0x7ffffff9) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000080)={0x2, 0x80, 0x7f, 0x1f, 0x3f, 0x7, 0x0, 0x7, 0x80, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1ff, 0x2, @perf_bp={&(0x7f0000000040), 0x4}, 0x108, 0x0, 0x3, 0x1, 0x28, 0x3, 0x8d6, 0x0, 0x4, 0x0, 0xfffffffffffffffa}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) syz_io_uring_setup(0x0, 0x0, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)) 19:32:19 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r1, r0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:32:19 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[]) 19:32:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0xf0ffff, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:32:19 executing program 4: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 72) 19:32:19 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x43}) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 19:32:19 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000001500)=ANY=[]) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) lseek(r2, 0x7, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000180)=0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r3, r2, 0x0, 0x7ffffff9) [ 1111.602218] __io_uring_add_tctx_node+0x1cf/0x520 [ 1111.602859] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1111.603456] ? alloc_fd+0x2e7/0x670 [ 1111.603853] io_uring_setup+0x1fbb/0x2980 [ 1111.604299] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1111.604849] ? wait_for_completion_io+0x270/0x270 [ 1111.605381] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1111.605940] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1111.606492] do_syscall_64+0x33/0x40 [ 1111.606889] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1111.607434] RIP: 0033:0x7ff9f8ea8b19 [ 1111.607831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1111.608383] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 1111.609791] RSP: 002b:00007ff9f641e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1111.609802] RAX: ffffffffffffffda RBX: 00007ff9f8fbbf60 RCX: 00007ff9f8ea8b19 [ 1111.609808] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 1111.609813] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 1111.609819] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 1111.609824] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 19:32:19 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x43}) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 19:32:19 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB]) 19:32:19 executing program 4: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 73) [ 1111.689987] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len 19:32:19 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r1, r0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) [ 1111.726882] FAULT_INJECTION: forcing a failure. [ 1111.726882] name failslab, interval 1, probability 0, space 0, times 0 [ 1111.728208] CPU: 1 PID: 7755 Comm: syz-executor.4 Not tainted 5.10.245 #1 [ 1111.728942] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1111.729832] Call Trace: [ 1111.730119] dump_stack+0x107/0x167 [ 1111.730510] should_fail.cold+0x5/0xa [ 1111.730919] ? create_object.isra.0+0x3a/0xa30 [ 1111.731407] should_failslab+0x5/0x20 [ 1111.731813] kmem_cache_alloc+0x5b/0x310 [ 1111.732247] ? mark_held_locks+0x9e/0xe0 [ 1111.732683] create_object.isra.0+0x3a/0xa30 [ 1111.733157] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1111.733738] kmem_cache_alloc+0x159/0x310 [ 1111.734192] xas_alloc+0x336/0x440 [ 1111.734599] xas_create+0x34a/0x10d0 [ 1111.735007] ? kernel_text_address+0xf2/0x120 [ 1111.735523] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1111.736085] xas_store+0x8c/0x1c40 [ 1111.736502] __xa_store+0x164/0x2d0 [ 1111.736923] ? xa_delete_node+0x280/0x280 [ 1111.737400] ? trace_hardirqs_on+0x5b/0x180 [ 1111.737894] xa_store+0x31/0x50 [ 1111.738271] __io_uring_add_tctx_node+0x1cf/0x520 [ 1111.738816] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1111.739410] ? alloc_fd+0x2e7/0x670 [ 1111.739812] io_uring_setup+0x1fbb/0x2980 [ 1111.740290] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1111.740843] ? wait_for_completion_io+0x270/0x270 [ 1111.741410] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1111.742003] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1111.742589] do_syscall_64+0x33/0x40 [ 1111.742992] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1111.743574] RIP: 0033:0x7ff9f8ea8b19 [ 1111.743979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1111.746075] RSP: 002b:00007ff9f641e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1111.746936] RAX: ffffffffffffffda RBX: 00007ff9f8fbbf60 RCX: 00007ff9f8ea8b19 [ 1111.747750] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 1111.748562] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 1111.749376] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 1111.750184] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 19:32:19 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000001500)=ANY=[]) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) lseek(r2, 0x7, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000180)=0x2) sendfile(0xffffffffffffffff, r2, 0x0, 0x7ffffff9) 19:32:19 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x43}) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 19:32:19 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0x1000000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) [ 1111.842680] netlink: 'syz-executor.1': attribute type 13 has an invalid length. 19:32:19 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB]) [ 1111.856889] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len 19:32:19 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) dup2(r1, r0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:32:19 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000001500)=ANY=[]) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) lseek(r2, 0x7, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000180)=0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r3, r2, 0x0, 0x7ffffff9) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000080)={0x2, 0x80, 0x7f, 0x1f, 0x3f, 0x7, 0x0, 0x7, 0x80, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1ff, 0x2, @perf_bp={&(0x7f0000000040), 0x4}, 0x108, 0x0, 0x3, 0x1, 0x28, 0x3, 0x8d6, 0x0, 0x4, 0x0, 0xfffffffffffffffa}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) 19:32:19 executing program 4: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 74) [ 1111.943384] FAULT_INJECTION: forcing a failure. [ 1111.943384] name failslab, interval 1, probability 0, space 0, times 0 [ 1111.944734] CPU: 1 PID: 7770 Comm: syz-executor.4 Not tainted 5.10.245 #1 [ 1111.945526] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1111.946475] Call Trace: [ 1111.946787] dump_stack+0x107/0x167 [ 1111.947205] should_fail.cold+0x5/0xa [ 1111.947642] ? xas_alloc+0x336/0x440 [ 1111.948069] should_failslab+0x5/0x20 [ 1111.948504] kmem_cache_alloc+0x5b/0x310 [ 1111.948980] xas_alloc+0x336/0x440 [ 1111.949389] xas_create+0x34a/0x10d0 [ 1111.949821] ? kernel_text_address+0xf2/0x120 [ 1111.950334] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1111.950935] xas_store+0x8c/0x1c40 [ 1111.951351] __xa_store+0x164/0x2d0 [ 1111.951769] ? xa_delete_node+0x280/0x280 [ 1111.952246] ? trace_hardirqs_on+0x5b/0x180 [ 1111.952727] xa_store+0x31/0x50 [ 1111.953096] __io_uring_add_tctx_node+0x1cf/0x520 [ 1111.953612] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1111.954172] ? alloc_fd+0x2e7/0x670 [ 1111.954568] io_uring_setup+0x1fbb/0x2980 [ 1111.955017] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1111.955559] ? wait_for_completion_io+0x270/0x270 [ 1111.956118] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1111.956682] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1111.957279] do_syscall_64+0x33/0x40 [ 1111.957701] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1111.958282] RIP: 0033:0x7ff9f8ea8b19 [ 1111.958688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1111.960775] RSP: 002b:00007ff9f641e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1111.961599] RAX: ffffffffffffffda RBX: 00007ff9f8fbbf60 RCX: 00007ff9f8ea8b19 [ 1111.962365] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 1111.963126] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 1111.963932] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 1111.964742] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 19:32:33 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000001500)=ANY=[]) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) lseek(r2, 0x7, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000180)=0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r3, r2, 0x0, 0x7ffffff9) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000080)={0x2, 0x80, 0x7f, 0x1f, 0x3f, 0x7, 0x0, 0x7, 0x80, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1ff, 0x2, @perf_bp={&(0x7f0000000040), 0x4}, 0x108, 0x0, 0x3, 0x1, 0x28, 0x3, 0x8d6, 0x0, 0x4, 0x0, 0xfffffffffffffffa}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 19:32:33 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[]) 19:32:33 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) sendfile(0xffffffffffffffff, r2, 0x0, 0x7ffffff9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:32:33 executing program 4: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 75) 19:32:33 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB]) 19:32:33 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000001500)=ANY=[]) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) lseek(r2, 0x7, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000180)=0x2) sendfile(0xffffffffffffffff, r2, 0x0, 0x7ffffff9) 19:32:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0x2000000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) [ 1126.163511] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 1126.176048] FAULT_INJECTION: forcing a failure. [ 1126.176048] name failslab, interval 1, probability 0, space 0, times 0 [ 1126.178546] CPU: 1 PID: 7789 Comm: syz-executor.4 Not tainted 5.10.245 #1 [ 1126.179969] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1126.181699] Call Trace: [ 1126.182253] dump_stack+0x107/0x167 [ 1126.183012] should_fail.cold+0x5/0xa [ 1126.183820] ? create_object.isra.0+0x3a/0xa30 [ 1126.184768] should_failslab+0x5/0x20 [ 1126.185576] kmem_cache_alloc+0x5b/0x310 [ 1126.186420] ? mark_held_locks+0x9e/0xe0 [ 1126.187264] create_object.isra.0+0x3a/0xa30 [ 1126.188172] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1126.189252] kmem_cache_alloc+0x159/0x310 [ 1126.190121] xas_alloc+0x336/0x440 [ 1126.190865] xas_create+0x34a/0x10d0 [ 1126.191653] ? kernel_text_address+0xf2/0x120 [ 1126.192616] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1126.193741] xas_store+0x8c/0x1c40 [ 1126.194498] __xa_store+0x164/0x2d0 [ 1126.195254] ? xa_delete_node+0x280/0x280 19:32:33 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) sendfile(0xffffffffffffffff, r2, 0x0, 0x7ffffff9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) [ 1126.196122] ? trace_hardirqs_on+0x5b/0x180 [ 1126.197231] xa_store+0x31/0x50 [ 1126.197936] __io_uring_add_tctx_node+0x1cf/0x520 [ 1126.198951] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1126.200050] ? alloc_fd+0x2e7/0x670 [ 1126.200832] io_uring_setup+0x1fbb/0x2980 [ 1126.201725] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1126.202791] ? wait_for_completion_io+0x270/0x270 [ 1126.203831] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1126.204940] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1126.206032] do_syscall_64+0x33/0x40 [ 1126.206813] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1126.207890] RIP: 0033:0x7ff9f8ea8b19 [ 1126.208673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1126.212529] RSP: 002b:00007ff9f641e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1126.214136] RAX: ffffffffffffffda RBX: 00007ff9f8fbbf60 RCX: 00007ff9f8ea8b19 [ 1126.215643] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 1126.217158] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 1126.218648] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 1126.220141] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 [ 1126.222019] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len 19:32:33 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000001500)=ANY=[]) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) lseek(r2, 0x7, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000180)=0x2) sendfile(0xffffffffffffffff, r2, 0x0, 0x7ffffff9) 19:32:33 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x43}) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 19:32:33 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0x3000000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) [ 1126.327739] FAULT_INJECTION: forcing a failure. [ 1126.327739] name failslab, interval 1, probability 0, space 0, times 0 [ 1126.330340] CPU: 1 PID: 7802 Comm: syz-executor.7 Not tainted 5.10.245 #1 [ 1126.331763] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1126.333492] Call Trace: [ 1126.334040] dump_stack+0x107/0x167 [ 1126.334799] should_fail.cold+0x5/0xa [ 1126.335599] should_failslab+0x5/0x20 19:32:33 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) sendfile(0xffffffffffffffff, r2, 0x0, 0x7ffffff9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) [ 1126.336384] kmem_cache_alloc_bulk+0x4b/0x320 [ 1126.337428] io_submit_sqes+0x6fe7/0x8610 [ 1126.338332] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1126.339369] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1126.340386] ? find_held_lock+0x2c/0x110 [ 1126.341262] ? io_submit_sqes+0x8610/0x8610 [ 1126.342168] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1126.343170] ? wait_for_completion_io+0x270/0x270 [ 1126.344166] ? rcu_read_lock_any_held+0x75/0xa0 [ 1126.345132] ? vfs_write+0x354/0xb10 [ 1126.345913] ? fput_many+0x2f/0x1a0 [ 1126.346672] ? ksys_write+0x1a9/0x260 [ 1126.347461] ? __ia32_sys_read+0xb0/0xb0 [ 1126.348311] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1126.349418] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1126.350489] do_syscall_64+0x33/0x40 [ 1126.351271] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1126.352324] RIP: 0033:0x7fbdfa28bb19 [ 1126.353116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1126.356968] RSP: 002b:00007fbdf7801188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1126.358582] RAX: ffffffffffffffda RBX: 00007fbdfa39ef60 RCX: 00007fbdfa28bb19 [ 1126.360081] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1126.361599] RBP: 00007fbdf78011d0 R08: 0000000000000000 R09: 0000000000000000 [ 1126.363094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1126.364599] R13: 00007ffe8aedbb1f R14: 00007fbdf7801300 R15: 0000000000022000 [ 1126.396505] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 1126.413253] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len 19:32:34 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000001500)=ANY=[]) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) lseek(r2, 0x7, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r3, r2, 0x0, 0x7ffffff9) 19:32:34 executing program 4: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 76) [ 1126.537343] FAULT_INJECTION: forcing a failure. [ 1126.537343] name failslab, interval 1, probability 0, space 0, times 0 [ 1126.539875] CPU: 1 PID: 7811 Comm: syz-executor.4 Not tainted 5.10.245 #1 [ 1126.541327] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1126.543070] Call Trace: [ 1126.543626] dump_stack+0x107/0x167 [ 1126.544402] should_fail.cold+0x5/0xa [ 1126.545210] ? xas_alloc+0x336/0x440 [ 1126.545994] should_failslab+0x5/0x20 [ 1126.546792] kmem_cache_alloc+0x5b/0x310 [ 1126.547652] xas_alloc+0x336/0x440 [ 1126.548408] xas_create+0x34a/0x10d0 [ 1126.549211] ? kernel_text_address+0xf2/0x120 [ 1126.550153] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1126.551254] xas_store+0x8c/0x1c40 [ 1126.552016] __xa_store+0x164/0x2d0 [ 1126.552781] ? xa_delete_node+0x280/0x280 [ 1126.553666] ? trace_hardirqs_on+0x5b/0x180 [ 1126.554587] xa_store+0x31/0x50 [ 1126.555286] __io_uring_add_tctx_node+0x1cf/0x520 [ 1126.556297] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1126.557404] ? alloc_fd+0x2e7/0x670 [ 1126.558178] io_uring_setup+0x1fbb/0x2980 [ 1126.559056] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1126.560115] ? wait_for_completion_io+0x270/0x270 [ 1126.561165] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1126.562271] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1126.563356] do_syscall_64+0x33/0x40 [ 1126.564143] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1126.565244] RIP: 0033:0x7ff9f8ea8b19 [ 1126.566030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1126.569905] RSP: 002b:00007ff9f641e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1126.571500] RAX: ffffffffffffffda RBX: 00007ff9f8fbbf60 RCX: 00007ff9f8ea8b19 [ 1126.573010] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 1126.574511] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 1126.576011] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 1126.577520] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 19:32:49 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000001500)=ANY=[]) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r3, r2, 0x0, 0x7ffffff9) 19:32:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0x4000000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:32:49 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000001500)=ANY=[]) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) lseek(r2, 0x7, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000180)=0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r3, r2, 0x0, 0x7ffffff9) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000080)={0x2, 0x80, 0x7f, 0x1f, 0x3f, 0x7, 0x0, 0x7, 0x80, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1ff, 0x2, @perf_bp={&(0x7f0000000040), 0x4}, 0x108, 0x0, 0x3, 0x1, 0x28, 0x3, 0x8d6, 0x0, 0x4, 0x0, 0xfffffffffffffffa}) [ 1141.837813] FAULT_INJECTION: forcing a failure. [ 1141.837813] name failslab, interval 1, probability 0, space 0, times 0 [ 1141.839212] CPU: 1 PID: 7827 Comm: syz-executor.4 Not tainted 5.10.245 #1 [ 1141.840000] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1141.840960] Call Trace: [ 1141.841295] dump_stack+0x107/0x167 [ 1141.841718] should_fail.cold+0x5/0xa [ 1141.842160] ? create_object.isra.0+0x3a/0xa30 [ 1141.842691] should_failslab+0x5/0x20 [ 1141.843135] kmem_cache_alloc+0x5b/0x310 [ 1141.843610] ? mark_held_locks+0x9e/0xe0 [ 1141.844084] create_object.isra.0+0x3a/0xa30 [ 1141.844591] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1141.845190] kmem_cache_alloc+0x159/0x310 [ 1141.845684] xas_alloc+0x336/0x440 [ 1141.846104] xas_create+0x34a/0x10d0 [ 1141.846542] ? kernel_text_address+0xf2/0x120 [ 1141.847068] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1141.847674] xas_store+0x8c/0x1c40 [ 1141.848097] __xa_store+0x164/0x2d0 [ 1141.848540] ? xa_delete_node+0x280/0x280 [ 1141.849030] ? trace_hardirqs_on+0x5b/0x180 [ 1141.849550] xa_store+0x31/0x50 [ 1141.849936] __io_uring_add_tctx_node+0x1cf/0x520 [ 1141.850493] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1141.851095] ? alloc_fd+0x2e7/0x670 [ 1141.851527] io_uring_setup+0x1fbb/0x2980 [ 1141.852014] ? __do_sys_io_uring_enter+0x1890/0x1890 19:32:49 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x43}) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) 19:32:49 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7ffffff9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:32:49 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000"]) 19:32:49 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[]) 19:32:49 executing program 4: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 77) [ 1141.852600] ? wait_for_completion_io+0x270/0x270 [ 1141.853411] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1141.854017] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1141.854597] do_syscall_64+0x33/0x40 [ 1141.855019] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1141.855597] RIP: 0033:0x7ff9f8ea8b19 [ 1141.856017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1141.858116] RSP: 002b:00007ff9f641e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1141.858979] RAX: ffffffffffffffda RBX: 00007ff9f8fbbf60 RCX: 00007ff9f8ea8b19 [ 1141.859785] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 1141.859846] FAULT_INJECTION: forcing a failure. [ 1141.859846] name failslab, interval 1, probability 0, space 0, times 0 [ 1141.860588] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 1141.860595] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 1141.860600] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 [ 1141.863169] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 1141.863408] CPU: 0 PID: 7832 Comm: syz-executor.7 Not tainted 5.10.245 #1 [ 1141.871020] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1141.873043] Call Trace: [ 1141.873692] dump_stack+0x107/0x167 [ 1141.874583] should_fail.cold+0x5/0xa [ 1141.875513] ? create_object.isra.0+0x3a/0xa30 [ 1141.876623] should_failslab+0x5/0x20 [ 1141.877554] kmem_cache_alloc+0x5b/0x310 [ 1141.878549] create_object.isra.0+0x3a/0xa30 [ 1141.879618] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1141.880858] kmem_cache_alloc_bulk+0x168/0x320 [ 1141.881992] io_submit_sqes+0x6fe7/0x8610 [ 1141.883040] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1141.884252] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1141.885436] ? find_held_lock+0x2c/0x110 [ 1141.886432] ? io_submit_sqes+0x8610/0x8610 [ 1141.887484] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1141.888661] ? wait_for_completion_io+0x270/0x270 [ 1141.889847] ? rcu_read_lock_any_held+0x75/0xa0 [ 1141.890976] ? vfs_write+0x354/0xb10 [ 1141.891886] ? fput_many+0x2f/0x1a0 [ 1141.892771] ? ksys_write+0x1a9/0x260 [ 1141.893737] ? __ia32_sys_read+0xb0/0xb0 [ 1141.894729] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1141.896006] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1141.897272] do_syscall_64+0x33/0x40 [ 1141.898177] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1141.899427] RIP: 0033:0x7fbdfa28bb19 [ 1141.900331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1141.904825] RSP: 002b:00007fbdf7801188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1141.906679] RAX: ffffffffffffffda RBX: 00007fbdfa39ef60 RCX: 00007fbdfa28bb19 [ 1141.908416] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1141.910153] RBP: 00007fbdf78011d0 R08: 0000000000000000 R09: 0000000000000000 [ 1141.911886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1141.913628] R13: 00007ffe8aedbb1f R14: 00007fbdf7801300 R15: 0000000000022000 [ 1141.916217] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len 19:32:49 executing program 4: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 78) 19:32:49 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB]) 19:32:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0x5000000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:32:49 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7ffffff9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:32:49 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x43}) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) [ 1142.052584] FAULT_INJECTION: forcing a failure. [ 1142.052584] name failslab, interval 1, probability 0, space 0, times 0 [ 1142.055471] CPU: 0 PID: 7840 Comm: syz-executor.4 Not tainted 5.10.245 #1 [ 1142.057147] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1142.059180] Call Trace: [ 1142.059830] dump_stack+0x107/0x167 [ 1142.060723] should_fail.cold+0x5/0xa [ 1142.061669] ? xas_alloc+0x336/0x440 [ 1142.061869] FAULT_INJECTION: forcing a failure. [ 1142.061869] name failslab, interval 1, probability 0, space 0, times 0 [ 1142.062576] should_failslab+0x5/0x20 [ 1142.062599] kmem_cache_alloc+0x5b/0x310 [ 1142.065777] xas_alloc+0x336/0x440 [ 1142.066650] xas_create+0x34a/0x10d0 [ 1142.067571] ? kernel_text_address+0xf2/0x120 [ 1142.068674] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1142.069967] xas_store+0x8c/0x1c40 [ 1142.070855] __xa_store+0x164/0x2d0 [ 1142.071751] ? xa_delete_node+0x280/0x280 [ 1142.072775] ? trace_hardirqs_on+0x5b/0x180 [ 1142.073845] xa_store+0x31/0x50 [ 1142.074657] __io_uring_add_tctx_node+0x1cf/0x520 [ 1142.075836] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1142.077114] ? alloc_fd+0x2e7/0x670 [ 1142.078033] io_uring_setup+0x1fbb/0x2980 [ 1142.079056] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1142.080293] ? wait_for_completion_io+0x270/0x270 [ 1142.081508] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1142.082789] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1142.084054] do_syscall_64+0x33/0x40 [ 1142.084962] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1142.086220] RIP: 0033:0x7ff9f8ea8b19 [ 1142.087126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1142.091637] RSP: 002b:00007ff9f641e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1142.093513] RAX: ffffffffffffffda RBX: 00007ff9f8fbbf60 RCX: 00007ff9f8ea8b19 [ 1142.095262] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 1142.097005] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 1142.098763] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 1142.100509] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 [ 1142.102293] CPU: 1 PID: 7845 Comm: syz-executor.7 Not tainted 5.10.245 #1 [ 1142.103079] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1142.104002] Call Trace: [ 1142.104305] dump_stack+0x107/0x167 [ 1142.104716] should_fail.cold+0x5/0xa [ 1142.105156] ? create_object.isra.0+0x3a/0xa30 [ 1142.105683] should_failslab+0x5/0x20 [ 1142.106116] kmem_cache_alloc+0x5b/0x310 [ 1142.106588] ? mark_held_locks+0x9e/0xe0 [ 1142.107053] create_object.isra.0+0x3a/0xa30 [ 1142.107555] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1142.108125] kmem_cache_alloc_bulk+0x168/0x320 [ 1142.108654] io_submit_sqes+0x6fe7/0x8610 [ 1142.109148] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1142.109741] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1142.110281] ? find_held_lock+0x2c/0x110 [ 1142.110759] ? io_submit_sqes+0x8610/0x8610 [ 1142.111255] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1142.111810] ? wait_for_completion_io+0x270/0x270 [ 1142.112351] ? rcu_read_lock_any_held+0x75/0xa0 [ 1142.112890] ? vfs_write+0x354/0xb10 [ 1142.113322] ? fput_many+0x2f/0x1a0 [ 1142.113740] ? ksys_write+0x1a9/0x260 [ 1142.114167] ? __ia32_sys_read+0xb0/0xb0 [ 1142.114641] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1142.115145] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 1142.115243] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1142.115258] do_syscall_64+0x33/0x40 [ 1142.118041] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1142.118616] RIP: 0033:0x7fbdfa28bb19 [ 1142.119030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1142.121080] RSP: 002b:00007fbdf7801188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1142.121950] RAX: ffffffffffffffda RBX: 00007fbdfa39ef60 RCX: 00007fbdfa28bb19 [ 1142.122747] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1142.123544] RBP: 00007fbdf78011d0 R08: 0000000000000000 R09: 0000000000000000 [ 1142.124335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1142.125127] R13: 00007ffe8aedbb1f R14: 00007fbdf7801300 R15: 0000000000022000 [ 1142.126196] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len 19:32:49 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB]) 19:32:49 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000001500)=ANY=[]) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7ffffff9) 19:32:49 executing program 3: openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7ffffff9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:32:49 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0x6000000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:32:49 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = dup2(0xffffffffffffffff, r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r2, r1, 0x0, 0x7ffffff9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) [ 1142.240277] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 1142.242517] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len 19:33:07 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x43}) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4) 19:33:07 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB]) 19:33:07 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = dup2(0xffffffffffffffff, r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r2, r1, 0x0, 0x7ffffff9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:33:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0x7000000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:33:07 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB]) 19:33:07 executing program 4: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 79) 19:33:07 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000001500)=ANY=[]) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7ffffff9) 19:33:07 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000001500)=ANY=[]) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) lseek(r2, 0x7, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000180)=0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r3, r2, 0x0, 0x7ffffff9) [ 1159.470266] FAULT_INJECTION: forcing a failure. [ 1159.470266] name failslab, interval 1, probability 0, space 0, times 0 [ 1159.473069] CPU: 0 PID: 7870 Comm: syz-executor.4 Not tainted 5.10.245 #1 [ 1159.474758] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1159.476352] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 1159.476764] Call Trace: [ 1159.476795] dump_stack+0x107/0x167 [ 1159.479907] should_fail.cold+0x5/0xa [ 1159.480842] ? create_object.isra.0+0x3a/0xa30 [ 1159.481964] should_failslab+0x5/0x20 [ 1159.482905] kmem_cache_alloc+0x5b/0x310 [ 1159.483905] ? mark_held_locks+0x9e/0xe0 [ 1159.484911] create_object.isra.0+0x3a/0xa30 [ 1159.485998] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1159.487235] kmem_cache_alloc+0x159/0x310 [ 1159.487947] FAULT_INJECTION: forcing a failure. [ 1159.487947] name failslab, interval 1, probability 0, space 0, times 0 [ 1159.488247] xas_alloc+0x336/0x440 [ 1159.488273] xas_create+0x34a/0x10d0 [ 1159.492313] ? kernel_text_address+0xf2/0x120 [ 1159.493431] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1159.494711] xas_store+0x8c/0x1c40 [ 1159.495604] __xa_store+0x164/0x2d0 [ 1159.496493] ? xa_delete_node+0x280/0x280 [ 1159.497538] ? trace_hardirqs_on+0x5b/0x180 [ 1159.498618] xa_store+0x31/0x50 [ 1159.499434] __io_uring_add_tctx_node+0x1cf/0x520 [ 1159.500623] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 1159.501923] ? alloc_fd+0x2e7/0x670 [ 1159.502836] io_uring_setup+0x1fbb/0x2980 [ 1159.503869] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 1159.505107] ? wait_for_completion_io+0x270/0x270 [ 1159.506369] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1159.507674] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1159.508951] do_syscall_64+0x33/0x40 [ 1159.509881] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1159.511142] RIP: 0033:0x7ff9f8ea8b19 [ 1159.512065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1159.516622] RSP: 002b:00007ff9f641e108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 1159.518510] RAX: ffffffffffffffda RBX: 00007ff9f8fbbf60 RCX: 00007ff9f8ea8b19 [ 1159.520268] RDX: 0000000020fff000 RSI: 0000000020000540 RDI: 0000000000002005 [ 1159.522035] RBP: 0000000020000540 R08: 0000000020000600 R09: 0000000020000600 [ 1159.523797] R10: 00000000200005c0 R11: 0000000000000202 R12: 0000000020000600 [ 1159.525568] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 [ 1159.527372] CPU: 1 PID: 7879 Comm: syz-executor.7 Not tainted 5.10.245 #1 [ 1159.528846] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1159.530624] Call Trace: [ 1159.531199] dump_stack+0x107/0x167 [ 1159.531980] should_fail.cold+0x5/0xa [ 1159.532796] ? create_object.isra.0+0x3a/0xa30 [ 1159.533779] should_failslab+0x5/0x20 [ 1159.534596] kmem_cache_alloc+0x5b/0x310 [ 1159.535468] ? mark_held_locks+0x9e/0xe0 [ 1159.536340] create_object.isra.0+0x3a/0xa30 [ 1159.537277] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1159.538385] kmem_cache_alloc_bulk+0x168/0x320 [ 1159.539373] io_submit_sqes+0x6fe7/0x8610 [ 1159.540292] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1159.541359] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1159.542402] ? find_held_lock+0x2c/0x110 [ 1159.543280] ? io_submit_sqes+0x8610/0x8610 [ 1159.544207] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1159.545239] ? wait_for_completion_io+0x270/0x270 [ 1159.546279] ? rcu_read_lock_any_held+0x75/0xa0 [ 1159.547265] ? vfs_write+0x354/0xb10 [ 1159.548059] ? fput_many+0x2f/0x1a0 [ 1159.548834] ? ksys_write+0x1a9/0x260 [ 1159.549654] ? __ia32_sys_read+0xb0/0xb0 [ 1159.550527] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1159.551649] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1159.552751] do_syscall_64+0x33/0x40 [ 1159.553553] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1159.554648] RIP: 0033:0x7fbdfa28bb19 [ 1159.555442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1159.559367] RSP: 002b:00007fbdf7801188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1159.560989] RAX: ffffffffffffffda RBX: 00007fbdfa39ef60 RCX: 00007fbdfa28bb19 [ 1159.562513] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1159.564037] RBP: 00007fbdf78011d0 R08: 0000000000000000 R09: 0000000000000000 [ 1159.565563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1159.567076] R13: 00007ffe8aedbb1f R14: 00007fbdf7801300 R15: 0000000000022000 19:33:07 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000001500)=ANY=[]) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r0, 0xffffffffffffffff, 0x0, 0x7ffffff9) [ 1159.576400] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len 19:33:07 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = dup2(0xffffffffffffffff, r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r2, r1, 0x0, 0x7ffffff9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:33:07 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0x9000000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:33:07 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x43}) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5) 19:33:07 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB]) [ 1159.741855] netlink: 'syz-executor.1': attribute type 13 has an invalid length. 19:33:07 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000001500)=ANY=[]) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = dup2(0xffffffffffffffff, r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r2, r1, 0x0, 0x7ffffff9) [ 1159.763792] FAULT_INJECTION: forcing a failure. [ 1159.763792] name failslab, interval 1, probability 0, space 0, times 0 [ 1159.766700] CPU: 0 PID: 7891 Comm: syz-executor.7 Not tainted 5.10.245 #1 [ 1159.768359] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1159.770392] Call Trace: [ 1159.771036] dump_stack+0x107/0x167 [ 1159.771924] should_fail.cold+0x5/0xa [ 1159.772853] ? create_object.isra.0+0x3a/0xa30 [ 1159.773968] should_failslab+0x5/0x20 [ 1159.774892] kmem_cache_alloc+0x5b/0x310 [ 1159.775879] ? mark_held_locks+0x9e/0xe0 [ 1159.776872] create_object.isra.0+0x3a/0xa30 [ 1159.777948] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1159.779188] kmem_cache_alloc_bulk+0x168/0x320 [ 1159.780314] io_submit_sqes+0x6fe7/0x8610 [ 1159.781362] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1159.782589] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1159.783767] ? find_held_lock+0x2c/0x110 [ 1159.784763] ? io_submit_sqes+0x8610/0x8610 [ 1159.785832] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1159.787012] ? wait_for_completion_io+0x270/0x270 [ 1159.788192] ? rcu_read_lock_any_held+0x75/0xa0 [ 1159.789321] ? vfs_write+0x354/0xb10 [ 1159.790243] ? fput_many+0x2f/0x1a0 [ 1159.791126] ? ksys_write+0x1a9/0x260 [ 1159.792057] ? __ia32_sys_read+0xb0/0xb0 [ 1159.793052] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1159.794313] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1159.795572] do_syscall_64+0x33/0x40 [ 1159.796478] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1159.797747] RIP: 0033:0x7fbdfa28bb19 [ 1159.798659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1159.803182] RSP: 002b:00007fbdf7801188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1159.805037] RAX: ffffffffffffffda RBX: 00007fbdfa39ef60 RCX: 00007fbdfa28bb19 [ 1159.806788] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1159.808525] RBP: 00007fbdf78011d0 R08: 0000000000000000 R09: 0000000000000000 [ 1159.810272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1159.812012] R13: 00007ffe8aedbb1f R14: 00007fbdf7801300 R15: 0000000000022000 [ 1159.815013] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len 19:33:07 executing program 4: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 80) 19:33:07 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r2, r1, 0x0, 0x7ffffff9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) [ 1159.881110] FAULT_INJECTION: forcing a failure. [ 1159.881110] name failslab, interval 1, probability 0, space 0, times 0 [ 1159.884277] CPU: 0 PID: 7897 Comm: syz-executor.4 Not tainted 5.10.245 #1 [ 1159.885948] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1159.887969] Call Trace: [ 1159.888614] dump_stack+0x107/0x167 [ 1159.889517] should_fail.cold+0x5/0xa [ 1159.890444] ? vm_area_dup+0x78/0x290 [ 1159.891369] should_failslab+0x5/0x20 [ 1159.892293] kmem_cache_alloc+0x5b/0x310 [ 1159.893288] vm_area_dup+0x78/0x290 [ 1159.894185] ? lock_release+0x680/0x680 [ 1159.895153] ? mark_lock+0xf5/0x2df0 [ 1159.896073] ? lock_chain_count+0x20/0x20 [ 1159.897087] ? mark_lock+0xf5/0x2df0 [ 1159.898006] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1159.899283] ? lock_chain_count+0x20/0x20 [ 1159.900305] ? mark_lock+0xf5/0x2df0 [ 1159.901210] ? vm_area_alloc+0x110/0x110 [ 1159.902222] ? __lock_acquire+0x1657/0x5b00 [ 1159.903298] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1159.904571] ? vmacache_find+0x55/0x2a0 [ 1159.905552] __split_vma+0xa8/0x4e0 [ 1159.906439] __do_munmap+0x365/0x1260 [ 1159.907367] ? arch_get_unmapped_area+0x450/0x450 [ 1159.908538] ? lock_release+0x680/0x680 [ 1159.909514] mmap_region+0x7cc/0x1500 [ 1159.910466] do_mmap+0x868/0x1370 [ 1159.911321] vm_mmap_pgoff+0x198/0x1f0 [ 1159.912275] ? randomize_page+0xb0/0xb0 [ 1159.913260] ksys_mmap_pgoff+0x41c/0x560 [ 1159.914255] ? find_mergeable_anon_vma+0x250/0x250 [ 1159.915455] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1159.916739] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1159.918014] do_syscall_64+0x33/0x40 [ 1159.918925] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1159.920177] RIP: 0033:0x7ff9f8ea8b62 [ 1159.921081] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1159.925588] RSP: 002b:00007ff9f641e0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1159.927435] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007ff9f8ea8b62 [ 1159.929169] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 0000000020fff000 [ 1159.930910] RBP: 0000000020fff000 R08: 0000000000000004 R09: 0000000000000000 [ 1159.932641] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000600 [ 1159.934397] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 19:33:24 executing program 4: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 81) 19:33:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0xa000000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:33:24 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000"/128]) 19:33:24 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000001500)=ANY=[]) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) lseek(r2, 0x7, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000180)=0x2) sendfile(0xffffffffffffffff, r2, 0x0, 0x7ffffff9) 19:33:24 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000001500)=ANY=[]) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = dup2(0xffffffffffffffff, r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r2, r1, 0x0, 0x7ffffff9) 19:33:24 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r2, r1, 0x0, 0x7ffffff9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:33:24 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB]) 19:33:24 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x43}) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 6) [ 1176.566643] FAULT_INJECTION: forcing a failure. [ 1176.566643] name failslab, interval 1, probability 0, space 0, times 0 [ 1176.569493] CPU: 0 PID: 7918 Comm: syz-executor.4 Not tainted 5.10.245 #1 [ 1176.571337] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1176.571496] FAULT_INJECTION: forcing a failure. [ 1176.571496] name failslab, interval 1, probability 0, space 0, times 0 [ 1176.573554] Call Trace: [ 1176.576702] dump_stack+0x107/0x167 [ 1176.577699] should_fail.cold+0x5/0xa [ 1176.578738] ? create_object.isra.0+0x3a/0xa30 [ 1176.579975] should_failslab+0x5/0x20 [ 1176.580992] kmem_cache_alloc+0x5b/0x310 [ 1176.582105] create_object.isra.0+0x3a/0xa30 [ 1176.583264] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1176.584641] kmem_cache_alloc+0x159/0x310 [ 1176.585777] vm_area_dup+0x78/0x290 [ 1176.586757] ? lock_release+0x680/0x680 [ 1176.587640] ? mark_lock+0xf5/0x2df0 [ 1176.588641] ? lock_chain_count+0x20/0x20 [ 1176.589763] ? mark_lock+0xf5/0x2df0 [ 1176.590763] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1176.592172] ? lock_chain_count+0x20/0x20 [ 1176.593292] ? mark_lock+0xf5/0x2df0 [ 1176.594296] ? vm_area_alloc+0x110/0x110 [ 1176.595389] ? __lock_acquire+0x1657/0x5b00 [ 1176.596560] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 1176.597964] ? vmacache_find+0x55/0x2a0 [ 1176.598861] __split_vma+0xa8/0x4e0 [ 1176.599822] __do_munmap+0x365/0x1260 [ 1176.600842] ? arch_get_unmapped_area+0x450/0x450 [ 1176.602156] ? lock_release+0x680/0x680 [ 1176.603228] mmap_region+0x7cc/0x1500 [ 1176.604275] do_mmap+0x868/0x1370 [ 1176.605218] vm_mmap_pgoff+0x198/0x1f0 [ 1176.606278] ? randomize_page+0xb0/0xb0 [ 1176.607368] ksys_mmap_pgoff+0x41c/0x560 [ 1176.608444] ? find_mergeable_anon_vma+0x250/0x250 [ 1176.609606] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1176.611047] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1176.612441] do_syscall_64+0x33/0x40 [ 1176.613426] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1176.614824] RIP: 0033:0x7ff9f8ea8b62 [ 1176.615815] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1176.620726] RSP: 002b:00007ff9f641e0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1176.622767] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007ff9f8ea8b62 [ 1176.624664] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 0000000020fff000 [ 1176.626573] RBP: 0000000020fff000 R08: 0000000000000004 R09: 0000000000000000 [ 1176.628466] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000600 [ 1176.630389] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 [ 1176.632337] CPU: 1 PID: 7919 Comm: syz-executor.7 Not tainted 5.10.245 #1 [ 1176.633787] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1176.635536] Call Trace: [ 1176.636095] dump_stack+0x107/0x167 [ 1176.636868] should_fail.cold+0x5/0xa [ 1176.637677] ? create_object.isra.0+0x3a/0xa30 [ 1176.638651] should_failslab+0x5/0x20 [ 1176.639466] kmem_cache_alloc+0x5b/0x310 [ 1176.640338] ? mark_held_locks+0x9e/0xe0 [ 1176.641209] create_object.isra.0+0x3a/0xa30 [ 1176.642160] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1176.643249] kmem_cache_alloc_bulk+0x168/0x320 [ 1176.644232] io_submit_sqes+0x6fe7/0x8610 [ 1176.645148] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1176.646218] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1176.647554] ? find_held_lock+0x2c/0x110 [ 1176.648409] ? io_submit_sqes+0x8610/0x8610 [ 1176.649322] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1176.650352] ? wait_for_completion_io+0x270/0x270 [ 1176.651370] ? rcu_read_lock_any_held+0x75/0xa0 [ 1176.652350] ? vfs_write+0x354/0xb10 [ 1176.653137] ? fput_many+0x2f/0x1a0 [ 1176.653914] ? ksys_write+0x1a9/0x260 [ 1176.654713] ? __ia32_sys_read+0xb0/0xb0 [ 1176.655573] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1176.656681] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1176.657783] do_syscall_64+0x33/0x40 [ 1176.658568] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1176.659644] RIP: 0033:0x7fbdfa28bb19 [ 1176.660426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1176.664307] RSP: 002b:00007fbdf7801188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1176.665909] RAX: ffffffffffffffda RBX: 00007fbdfa39ef60 RCX: 00007fbdfa28bb19 [ 1176.667416] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1176.668922] RBP: 00007fbdf78011d0 R08: 0000000000000000 R09: 0000000000000000 [ 1176.670428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1176.671930] R13: 00007ffe8aedbb1f R14: 00007fbdf7801300 R15: 0000000000022000 [ 1176.680372] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 1176.686894] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len 19:33:24 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r2, r1, 0x0, 0x7ffffff9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:33:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0xf000000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:33:24 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000001500)=ANY=[]) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) lseek(r2, 0x7, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000180)=0x2) sendfile(0xffffffffffffffff, r2, 0x0, 0x7ffffff9) 19:33:24 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000001500)=ANY=[]) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = dup2(0xffffffffffffffff, r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r2, r1, 0x0, 0x7ffffff9) [ 1176.787810] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 1176.792823] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len 19:33:24 executing program 4: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 82) 19:33:24 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:33:24 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0x40000000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) [ 1176.881171] FAULT_INJECTION: forcing a failure. [ 1176.881171] name failslab, interval 1, probability 0, space 0, times 0 [ 1176.883594] CPU: 1 PID: 7933 Comm: syz-executor.4 Not tainted 5.10.245 #1 [ 1176.885046] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1176.886809] Call Trace: [ 1176.887374] dump_stack+0x107/0x167 [ 1176.888146] should_fail.cold+0x5/0xa [ 1176.888958] ? anon_vma_clone+0xdc/0x590 [ 1176.889833] should_failslab+0x5/0x20 [ 1176.890635] kmem_cache_alloc+0x5b/0x310 [ 1176.891503] anon_vma_clone+0xdc/0x590 [ 1176.892335] __split_vma+0x17c/0x4e0 [ 1176.893124] __do_munmap+0x365/0x1260 [ 1176.893952] ? arch_get_unmapped_area+0x450/0x450 [ 1176.894974] ? lock_release+0x680/0x680 [ 1176.895818] mmap_region+0x7cc/0x1500 [ 1176.896636] do_mmap+0x868/0x1370 [ 1176.897379] vm_mmap_pgoff+0x198/0x1f0 [ 1176.898220] ? randomize_page+0xb0/0xb0 [ 1176.899078] ksys_mmap_pgoff+0x41c/0x560 [ 1176.899937] ? find_mergeable_anon_vma+0x250/0x250 [ 1176.900982] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1176.902101] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1176.903195] do_syscall_64+0x33/0x40 [ 1176.903988] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1176.905070] RIP: 0033:0x7ff9f8ea8b62 [ 1176.905869] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1176.909770] RSP: 002b:00007ff9f641e0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1176.911376] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007ff9f8ea8b62 [ 1176.912882] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 0000000020fff000 [ 1176.914394] RBP: 0000000020fff000 R08: 0000000000000004 R09: 0000000000000000 [ 1176.915903] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000600 [ 1176.917405] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 [ 1176.968784] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 1176.976248] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len 19:33:37 executing program 4: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 83) 19:33:37 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB]) [ 1189.561521] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 1189.563954] FAULT_INJECTION: forcing a failure. [ 1189.563954] name failslab, interval 1, probability 0, space 0, times 0 [ 1189.566748] CPU: 0 PID: 7943 Comm: syz-executor.4 Not tainted 5.10.245 #1 [ 1189.568352] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1189.570304] Call Trace: [ 1189.570904] dump_stack+0x107/0x167 [ 1189.571748] should_fail.cold+0x5/0xa [ 1189.572609] ? create_object.isra.0+0x3a/0xa30 [ 1189.573653] should_failslab+0x5/0x20 [ 1189.574524] kmem_cache_alloc+0x5b/0x310 [ 1189.575458] create_object.isra.0+0x3a/0xa30 [ 1189.576463] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1189.577621] kmem_cache_alloc+0x159/0x310 [ 1189.578624] anon_vma_clone+0xdc/0x590 [ 1189.579517] __split_vma+0x17c/0x4e0 [ 1189.580365] __do_munmap+0x365/0x1260 [ 1189.581223] ? arch_get_unmapped_area+0x450/0x450 [ 1189.582335] ? lock_release+0x680/0x680 [ 1189.583238] mmap_region+0x7cc/0x1500 [ 1189.584139] do_mmap+0x868/0x1370 [ 1189.584955] vm_mmap_pgoff+0x198/0x1f0 [ 1189.585846] ? randomize_page+0xb0/0xb0 [ 1189.586762] ksys_mmap_pgoff+0x41c/0x560 [ 1189.587681] ? find_mergeable_anon_vma+0x250/0x250 [ 1189.588785] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1189.589989] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1189.591153] do_syscall_64+0x33/0x40 [ 1189.592016] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1189.593255] RIP: 0033:0x7ff9f8ea8b62 [ 1189.594161] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1189.598560] RSP: 002b:00007ff9f641e0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1189.600390] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007ff9f8ea8b62 [ 1189.602114] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 0000000020fff000 [ 1189.603818] RBP: 0000000020fff000 R08: 0000000000000004 R09: 0000000000000000 [ 1189.605525] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000600 [ 1189.607247] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 [ 1189.609294] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len 19:33:37 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c0000000000000200000000000000"]) 19:33:37 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000001500)=ANY=[]) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) lseek(r2, 0x7, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000180)=0x2) sendfile(0xffffffffffffffff, r2, 0x0, 0x7ffffff9) 19:33:37 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x43}) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 7) 19:33:37 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000001500)=ANY=[]) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r2, r1, 0x0, 0x7ffffff9) 19:33:37 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:33:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0x41040000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:33:37 executing program 3: r0 = openat(0xffffffffffffff9c, 0x0, 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) [ 1189.621018] FAULT_INJECTION: forcing a failure. [ 1189.621018] name failslab, interval 1, probability 0, space 0, times 0 [ 1189.623402] CPU: 1 PID: 7958 Comm: syz-executor.7 Not tainted 5.10.245 #1 [ 1189.624853] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1189.626620] Call Trace: [ 1189.627188] dump_stack+0x107/0x167 [ 1189.627982] should_fail.cold+0x5/0xa [ 1189.628787] ? create_object.isra.0+0x3a/0xa30 [ 1189.629768] should_failslab+0x5/0x20 [ 1189.630595] kmem_cache_alloc+0x5b/0x310 [ 1189.631481] ? mark_held_locks+0x9e/0xe0 [ 1189.632418] create_object.isra.0+0x3a/0xa30 [ 1189.633365] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1189.634459] kmem_cache_alloc_bulk+0x168/0x320 [ 1189.635439] io_submit_sqes+0x6fe7/0x8610 [ 1189.636347] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1189.637431] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1189.638467] ? find_held_lock+0x2c/0x110 [ 1189.639335] ? io_submit_sqes+0x8610/0x8610 [ 1189.640243] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1189.641264] ? wait_for_completion_io+0x270/0x270 [ 1189.642313] ? rcu_read_lock_any_held+0x75/0xa0 [ 1189.643292] ? vfs_write+0x354/0xb10 [ 1189.644141] ? fput_many+0x2f/0x1a0 [ 1189.644901] ? ksys_write+0x1a9/0x260 [ 1189.645713] ? __ia32_sys_read+0xb0/0xb0 [ 1189.646599] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1189.647687] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1189.648775] do_syscall_64+0x33/0x40 [ 1189.649650] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1189.650777] RIP: 0033:0x7fbdfa28bb19 [ 1189.651551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1189.655460] RSP: 002b:00007fbdf7801188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1189.657132] RAX: ffffffffffffffda RBX: 00007fbdfa39ef60 RCX: 00007fbdfa28bb19 [ 1189.658777] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1189.660381] RBP: 00007fbdf78011d0 R08: 0000000000000000 R09: 0000000000000000 [ 1189.662021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1189.663679] R13: 00007ffe8aedbb1f R14: 00007fbdf7801300 R15: 0000000000022000 19:33:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0x48000000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:33:37 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000001500)=ANY=[]) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r2, r1, 0x0, 0x7ffffff9) [ 1189.766459] netlink: 'syz-executor.1': attribute type 13 has an invalid length. 19:33:37 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000001500)=ANY=[]) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) lseek(r2, 0x7, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r3, r2, 0x0, 0x7ffffff9) [ 1189.777412] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len 19:33:37 executing program 4: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 84) 19:33:37 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:33:37 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x43}) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 8) 19:33:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0x4c000000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:33:37 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000001500)=ANY=[]) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r1 = dup2(r0, 0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r2, r1, 0x0, 0x7ffffff9) [ 1189.892628] FAULT_INJECTION: forcing a failure. [ 1189.892628] name failslab, interval 1, probability 0, space 0, times 0 [ 1189.895186] CPU: 1 PID: 7971 Comm: syz-executor.4 Not tainted 5.10.245 #1 [ 1189.896699] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1189.898536] Call Trace: [ 1189.899132] dump_stack+0x107/0x167 [ 1189.899954] should_fail.cold+0x5/0xa [ 1189.900787] ? vm_area_alloc+0x1c/0x110 [ 1189.901666] should_failslab+0x5/0x20 [ 1189.902509] kmem_cache_alloc+0x5b/0x310 [ 1189.903414] vm_area_alloc+0x1c/0x110 [ 1189.904254] mmap_region+0x982/0x1500 [ 1189.905107] do_mmap+0x868/0x1370 [ 1189.905911] vm_mmap_pgoff+0x198/0x1f0 [ 1189.906802] ? randomize_page+0xb0/0xb0 [ 1189.907715] ksys_mmap_pgoff+0x41c/0x560 [ 1189.908638] ? find_mergeable_anon_vma+0x250/0x250 [ 1189.909754] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1189.910917] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1189.912065] do_syscall_64+0x33/0x40 [ 1189.912886] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1189.914236] RIP: 0033:0x7ff9f8ea8b62 [ 1189.915184] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1189.919600] RSP: 002b:00007ff9f641e0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1189.921196] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007ff9f8ea8b62 [ 1189.922696] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 0000000020fff000 [ 1189.924186] RBP: 0000000020fff000 R08: 0000000000000004 R09: 0000000000000000 [ 1189.925679] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000600 [ 1189.927173] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 [ 1189.960829] FAULT_INJECTION: forcing a failure. [ 1189.960829] name failslab, interval 1, probability 0, space 0, times 0 [ 1189.963342] CPU: 1 PID: 7976 Comm: syz-executor.7 Not tainted 5.10.245 #1 [ 1189.964779] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1189.966522] Call Trace: [ 1189.967079] dump_stack+0x107/0x167 19:33:37 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB]) [ 1189.967847] should_fail.cold+0x5/0xa [ 1189.968876] ? create_object.isra.0+0x3a/0xa30 [ 1189.969914] should_failslab+0x5/0x20 [ 1189.970717] kmem_cache_alloc+0x5b/0x310 [ 1189.971573] ? mark_held_locks+0x9e/0xe0 [ 1189.972428] create_object.isra.0+0x3a/0xa30 [ 1189.973348] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1189.974434] kmem_cache_alloc_bulk+0x168/0x320 [ 1189.975402] io_submit_sqes+0x6fe7/0x8610 [ 1189.976308] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1189.977352] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1189.978377] ? find_held_lock+0x2c/0x110 [ 1189.979235] ? io_submit_sqes+0x8610/0x8610 [ 1189.980151] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1189.981164] ? wait_for_completion_io+0x270/0x270 [ 1189.982185] ? rcu_read_lock_any_held+0x75/0xa0 [ 1189.983167] ? vfs_write+0x354/0xb10 [ 1189.983948] ? fput_many+0x2f/0x1a0 [ 1189.984714] ? ksys_write+0x1a9/0x260 [ 1189.985515] ? __ia32_sys_read+0xb0/0xb0 [ 1189.986378] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1189.987481] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1189.988565] do_syscall_64+0x33/0x40 [ 1189.989348] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1189.990427] RIP: 0033:0x7fbdfa28bb19 [ 1189.991210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1189.995070] RSP: 002b:00007fbdf7801188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1189.996675] RAX: ffffffffffffffda RBX: 00007fbdfa39ef60 RCX: 00007fbdfa28bb19 [ 1189.998171] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1189.999676] RBP: 00007fbdf78011d0 R08: 0000000000000000 R09: 0000000000000000 [ 1190.001169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1190.002682] R13: 00007ffe8aedbb1f R14: 00007fbdf7801300 R15: 0000000000022000 [ 1190.008422] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 1190.012247] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len 19:33:37 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB]) 19:33:37 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:33:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0x60000000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) [ 1190.104205] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 1190.110875] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len 19:33:37 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:33:37 executing program 4: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 85) 19:33:37 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000001500)=ANY=[]) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r3, r2, 0x0, 0x7ffffff9) 19:33:37 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0x68000000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:33:37 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x43}) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 9) [ 1190.237852] FAULT_INJECTION: forcing a failure. [ 1190.237852] name failslab, interval 1, probability 0, space 0, times 0 [ 1190.240488] CPU: 0 PID: 7994 Comm: syz-executor.4 Not tainted 5.10.245 #1 [ 1190.242099] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1190.244062] Call Trace: [ 1190.244682] dump_stack+0x107/0x167 [ 1190.245549] should_fail.cold+0x5/0xa [ 1190.246449] ? anon_vma_clone+0xdc/0x590 [ 1190.247410] should_failslab+0x5/0x20 [ 1190.248316] kmem_cache_alloc+0x5b/0x310 [ 1190.249282] anon_vma_clone+0xdc/0x590 [ 1190.250209] __split_vma+0x17c/0x4e0 [ 1190.251088] __do_munmap+0x365/0x1260 [ 1190.251973] ? arch_get_unmapped_area+0x450/0x450 [ 1190.253133] ? lock_release+0x680/0x680 [ 1190.254051] mmap_region+0x7cc/0x1500 [ 1190.254962] do_mmap+0x868/0x1370 [ 1190.255778] vm_mmap_pgoff+0x198/0x1f0 [ 1190.256692] ? randomize_page+0xb0/0xb0 [ 1190.257645] ksys_mmap_pgoff+0x41c/0x560 [ 1190.258615] ? find_mergeable_anon_vma+0x250/0x250 [ 1190.259787] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1190.261034] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1190.262271] do_syscall_64+0x33/0x40 [ 1190.263147] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1190.264364] RIP: 0033:0x7ff9f8ea8b62 [ 1190.265242] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1190.269589] RSP: 002b:00007ff9f641e0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1190.271390] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007ff9f8ea8b62 [ 1190.273056] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 0000000020fff000 [ 1190.274722] RBP: 0000000020fff000 R08: 0000000000000004 R09: 0000000000000000 [ 1190.276220] FAULT_INJECTION: forcing a failure. [ 1190.276220] name failslab, interval 1, probability 0, space 0, times 0 [ 1190.276447] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000600 [ 1190.276459] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 [ 1190.282366] CPU: 1 PID: 8000 Comm: syz-executor.7 Not tainted 5.10.245 #1 [ 1190.283908] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1190.285760] Call Trace: [ 1190.286365] dump_stack+0x107/0x167 [ 1190.287181] should_fail.cold+0x5/0xa [ 1190.288029] ? create_object.isra.0+0x3a/0xa30 [ 1190.289058] should_failslab+0x5/0x20 [ 1190.289928] kmem_cache_alloc+0x5b/0x310 [ 1190.290834] ? mark_held_locks+0x9e/0xe0 [ 1190.291747] create_object.isra.0+0x3a/0xa30 [ 1190.292725] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1190.293870] kmem_cache_alloc_bulk+0x168/0x320 [ 1190.294897] io_submit_sqes+0x6fe7/0x8610 [ 1190.295853] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1190.296957] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1190.298054] ? find_held_lock+0x2c/0x110 [ 1190.298965] ? io_submit_sqes+0x8610/0x8610 [ 1190.299941] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1190.301028] ? wait_for_completion_io+0x270/0x270 [ 1190.302111] ? rcu_read_lock_any_held+0x75/0xa0 [ 1190.303141] ? vfs_write+0x354/0xb10 [ 1190.303980] ? fput_many+0x2f/0x1a0 [ 1190.304791] ? ksys_write+0x1a9/0x260 [ 1190.305639] ? __ia32_sys_read+0xb0/0xb0 [ 1190.306555] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1190.307719] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1190.308868] do_syscall_64+0x33/0x40 [ 1190.309691] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1190.310840] RIP: 0033:0x7fbdfa28bb19 [ 1190.311665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1190.315765] RSP: 002b:00007fbdf7801188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1190.317480] RAX: ffffffffffffffda RBX: 00007fbdfa39ef60 RCX: 00007fbdfa28bb19 [ 1190.319076] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1190.320671] RBP: 00007fbdf78011d0 R08: 0000000000000000 R09: 0000000000000000 [ 1190.322271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1190.323870] R13: 00007ffe8aedbb1f R14: 00007fbdf7801300 R15: 0000000000022000 [ 1190.326479] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 1190.333050] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len 19:33:51 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r3, r2, 0x0, 0x7ffffff9) 19:33:51 executing program 7: r0 = syz_io_uring_setup(0x3872, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x43}) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r0, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 10) 19:33:51 executing program 0: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000001500)=ANY=[]) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x61) sendfile(r3, r2, 0x0, 0x7ffffff9) 19:33:51 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB]) 19:33:51 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) 19:33:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0x6c000000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:33:51 executing program 5: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB]) 19:33:51 executing program 4: set_mempolicy(0x4003, &(0x7f0000000200)=0x6, 0x5) syz_io_uring_setup(0x2005, &(0x7f0000000540)={0x0, 0x0, 0x2}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) (fail_nth: 86) [ 1204.067097] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 1204.069677] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len [ 1204.086175] FAULT_INJECTION: forcing a failure. [ 1204.086175] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1204.089402] CPU: 1 PID: 8018 Comm: syz-executor.4 Not tainted 5.10.245 #1 [ 1204.091371] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1204.093806] Call Trace: [ 1204.094587] dump_stack+0x107/0x167 [ 1204.095653] should_fail.cold+0x5/0xa [ 1204.096773] __alloc_pages_nodemask+0x182/0x600 [ 1204.098157] ? do_raw_read_unlock+0x3b/0x70 [ 1204.099415] ? _raw_read_unlock+0x1a/0x30 [ 1204.100624] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 1204.102401] ? walk_system_ram_range+0x171/0x1e0 [ 1204.103789] ? pat_enabled+0x20/0x20 [ 1204.104873] ? _find_next_bit.constprop.0+0x1a3/0x200 [ 1204.106416] alloc_page_interleave+0x22/0x130 [ 1204.107489] ? __next_node_in+0x72/0x80 [ 1204.108631] alloc_pages_current+0x237/0x280 [ 1204.109700] pte_alloc_one+0x16/0x1a0 [ 1204.109790] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 1204.110660] __pte_alloc+0x1d/0x330 [ 1204.110689] remap_pfn_range_internal+0x9a3/0xf60 [ 1204.110721] ? lookup_memtype+0x5b/0x200 [ 1204.114845] ? apply_to_existing_page_range+0x40/0x40 [ 1204.116107] remap_pfn_range+0xcd/0x160 [ 1204.117073] ? remap_pfn_range_notrack+0x70/0x70 [ 1204.118228] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 1204.119482] io_uring_mmap+0x398/0x530 [ 1204.120428] mmap_file+0x5e/0xe0 [ 1204.121240] mmap_region+0xc4d/0x1500 [ 1204.122190] do_mmap+0x868/0x1370 [ 1204.123044] vm_mmap_pgoff+0x198/0x1f0 [ 1204.123989] ? randomize_page+0xb0/0xb0 [ 1204.124972] ksys_mmap_pgoff+0x41c/0x560 [ 1204.125960] ? find_mergeable_anon_vma+0x250/0x250 [ 1204.127159] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1204.128412] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1204.129654] do_syscall_64+0x33/0x40 [ 1204.130564] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1204.131800] RIP: 0033:0x7ff9f8ea8b62 [ 1204.132696] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1204.137092] RSP: 002b:00007ff9f641e0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1204.138919] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007ff9f8ea8b62 [ 1204.140625] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 0000000020fff000 [ 1204.142345] RBP: 0000000020fff000 R08: 0000000000000004 R09: 0000000000000000 [ 1204.144054] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000600 [ 1204.145763] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 [ 1204.147676] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len 19:33:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0x74000000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) 19:33:51 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2c, 0x10, 0x1, 0x7a000000, 0x0, {}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4}, @nested={0xc, 0xd, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @u32}]}]}, 0x2c}}, 0x0) [ 1204.181191] ------------[ cut here ]------------ [ 1204.181977] WARNING: CPU: 0 PID: 8018 at arch/x86/mm/pat/memtype.c:1019 get_pat_info+0x216/0x270 [ 1204.183299] Modules linked in: [ 1204.183765] CPU: 0 PID: 8018 Comm: syz-executor.4 Not tainted 5.10.245 #1 [ 1204.184742] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1204.185937] RIP: 0010:get_pat_info+0x216/0x270 [ 1204.186611] Code: c1 ea 03 80 3c 02 00 75 71 49 89 1e eb 8e e8 d1 8e 2e 00 0f 0b e9 97 fe ff ff 41 bc ea ff ff ff e9 77 ff ff ff e8 ba 8e 2e 00 <0f> 0b 41 bc ea ff ff ff e9 65 ff ff ff 4c 89 ff e8 f5 a5 5a 00 e9 [ 1204.189117] RSP: 0018:ffff8880558af890 EFLAGS: 00010212 [ 1204.189863] RAX: 0000000000018c1d RBX: ffff888008ed5500 RCX: ffffc90004e26000 [ 1204.190859] RDX: 0000000000040000 RSI: ffffffff811243f6 RDI: 0000000000000007 [ 1204.191832] RBP: ffff8880558af948 R08: 0000000000000000 R09: ffff8880558af818 [ 1204.192809] R10: 0000000000000020 R11: 0000000000000001 R12: 0000000000000028 [ 1204.193775] R13: 1ffff1100ab15f12 R14: 0000000000000000 R15: ffff888008ed5550 [ 1204.194765] FS: 00007ff9f641e700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 1204.197540] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1204.200172] CR2: 00005555694d4c58 CR3: 00000000094ec000 CR4: 0000000000350ef0 [ 1204.202914] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1204.203924] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000dd060a [ 1204.204926] Call Trace: [ 1204.205320] ? pgprot_writethrough+0xc0/0xc0 [ 1204.205924] ? finish_task_switch+0x126/0x5d0 [ 1204.206583] ? finish_task_switch+0xef/0x5d0 [ 1204.207225] untrack_pfn+0xdc/0x240 [ 1204.207726] ? track_pfn_insert+0x150/0x150 [ 1204.208354] ? lock_downgrade+0x6d0/0x6d0 [ 1204.208924] ? uprobe_munmap+0x95/0x560 [ 1204.209520] unmap_single_vma+0x1bc/0x300 [ 1204.210141] zap_page_range_single+0x2ce/0x450 [ 1204.210773] ? unmap_single_vma+0x300/0x300 [ 1204.211396] ? remap_pfn_range_internal+0xc56/0xf60 [ 1204.212115] ? lookup_memtype+0x5b/0x200 [ 1204.212685] ? apply_to_existing_page_range+0x40/0x40 [ 1204.213432] remap_pfn_range+0x139/0x160 [ 1204.214006] ? remap_pfn_range_notrack+0x70/0x70 [ 1204.214710] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 1204.215456] io_uring_mmap+0x398/0x530 [ 1204.215998] mmap_file+0x5e/0xe0 [ 1204.216488] mmap_region+0xc4d/0x1500 [ 1204.217025] do_mmap+0x868/0x1370 [ 1204.217535] vm_mmap_pgoff+0x198/0x1f0 [ 1204.218110] ? randomize_page+0xb0/0xb0 [ 1204.218669] ksys_mmap_pgoff+0x41c/0x560 [ 1204.219250] ? find_mergeable_anon_vma+0x250/0x250 [ 1204.219925] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1204.220665] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1204.221395] do_syscall_64+0x33/0x40 [ 1204.221908] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1204.222644] RIP: 0033:0x7ff9f8ea8b62 [ 1204.223174] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 1204.225688] RSP: 002b:00007ff9f641e0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 1204.226763] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007ff9f8ea8b62 [ 1204.227771] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 0000000020fff000 [ 1204.228761] RBP: 0000000020fff000 R08: 0000000000000004 R09: 0000000000000000 [ 1204.229753] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000600 [ 1204.230766] R13: 0000000020fff000 R14: 00000000200005c0 R15: 0000000020fff000 [ 1204.231781] irq event stamp: 1199 [ 1204.232281] hardirqs last enabled at (1209): [] console_unlock+0x92d/0xb40 [ 1204.233467] hardirqs last disabled at (1218): [] console_unlock+0x839/0xb40 [ 1204.234651] softirqs last enabled at (638): [] asm_call_irq_on_stack+0x12/0x20 [ 1204.235870] softirqs last disabled at (587): [] asm_call_irq_on_stack+0x12/0x20 [ 1204.237085] ---[ end trace 016918187e6e7de1 ]--- 19:33:51 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = dup2(r1, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xa001, 0x0) sendfile(r3, r2, 0x0, 0x7ffffff9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0xc020662a, &(0x7f0000000200)=ANY=[@ANYBLOB="138c000000000000020000000000000001000000000000000400000000000000fb00000000000000ff01000000000000040000000000000000000000000000000000000000000000043e0000000000000000000000000000722b00ec0000000000020000000000000100008000000000000000000000000000000000000000000204000000000000000000000000000004000000000000000800000000000000feffffffffffffff000000000000000000000000000000000e34000000000000000000000000000007000000000000000180000000000000040000000000000000000000000000000000000000000000042300"/256]) [ 1204.266787] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 1204.274413] mac80211_hwsim hwsim17 wlan1: refused to change device tx_queue_len VM DIAGNOSIS: 19:33:51 Registers: info registers vcpu 0 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822e4091 RDI=ffffffff879f8240 RBP=ffffffff879f8200 RSP=ffff8880558af2a8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000000 R11=0000000000000001 R12=0000000000000030 R13=0000000000000030 R14=ffffffff879f8200 R15=dffffc0000000000 RIP=ffffffff822e40e8 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007ff9f641e700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00005555694d4c58 CR3=00000000094ec000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000dd060a EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0000000000000000ff000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=ffff88804790fcb0 RCX=1ffff11008f21e01 RDX=dffffc0000000000 RSI=ffff88804790fc80 RDI=ffff88804790f220 RBP=ffff888047908000 RSP=ffff88804790f138 R8 =0000000000000001 R9 =0000000000000001 R10=0000000000032046 R11=1ffff11008f21e2f R12=ffff88804790fcb0 R13=ffff88804790f210 R14=1ffff11008f21e2f R15=ffffffff85a35f36 RIP=ffffffff811084db RFL=00000287 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f09b0554700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fb36f5880b0 CR3=0000000049db6000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000ff0000000000000000ff000000 XMM01=6e657300656c6966646e657300706f64 XMM02=ff00000100000000000000ff00000000 XMM03=00007f559b2ab7c800007f559b2ab7c0 XMM04=ffffffffffffffffffffffff00000000 XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000