naligned transfer [ 1896.993740] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1896.995130] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 09:23:08 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080)={0x0, 0xf584, 0x2, 0x2, 0x3d1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) syz_io_uring_setup(0x155b, &(0x7f00000005c0)={0x0, 0x27bd, 0x2, 0x1, 0x3b5}, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x208a, &(0x7f00000004c0)={0x0, 0xb5a, 0x10, 0x0, 0x49}, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) syz_open_dev$vcsa(&(0x7f0000000040), 0x3e0, 0xa00) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, 0xffffffffffffffff, 0x0) [ 1896.996567] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1896.998143] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.001798] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.003713] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.005655] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.007881] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.010745] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.012854] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.015853] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.018759] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.020370] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.021845] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.023338] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.024732] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.026140] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.027539] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 09:23:08 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}}, 0x0) [ 1897.031569] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.033085] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.035012] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.036701] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.038557] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.040210] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.041929] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.043659] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.045555] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.047278] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.048776] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.050899] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.052445] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.053829] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.055303] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.056739] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.058125] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.059526] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.070034] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.071680] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.073566] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.075147] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.078031] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.079673] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.081326] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.082895] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.084374] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.086562] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.088191] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.089617] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.091047] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.092820] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.094348] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.095768] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.097694] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.099633] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.101615] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.103924] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.105542] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.107141] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.108793] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.110773] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.112477] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.113971] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.115687] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.117139] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.118550] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.120198] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.121638] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.123071] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.124921] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.126831] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.128972] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.131850] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.134634] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.136491] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.140053] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.141704] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.143190] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.144621] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.146359] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.147841] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.149343] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.150717] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.152117] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.153565] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.162960] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.164455] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.166074] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.167496] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.168925] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.170405] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.171798] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.173280] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.174818] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.176319] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.177748] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.179185] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.180624] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.182061] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.183532] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.184949] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.186657] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.188423] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.190025] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.191715] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.193653] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.195280] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.196901] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.199869] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.201967] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.203409] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.205006] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.210027] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.211690] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 09:23:08 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x80000, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}}, 0x0) [ 1897.213121] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.215076] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.216746] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.219070] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.220541] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.222319] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.223764] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.225339] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.226781] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.228211] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.229675] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.231635] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.235390] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.236804] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.238273] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.239665] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.241108] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.242617] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.244062] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.247045] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.248966] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.252968] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.256113] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.260873] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.266830] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.271664] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.277336] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.278750] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.280104] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.281726] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.283046] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.284904] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.295948] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.297721] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.299094] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.300801] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.302171] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.303727] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.305081] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.306541] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.311313] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.312829] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.314202] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.315633] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.316991] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.318375] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.319702] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.321049] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.322732] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.324098] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.325500] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.327561] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.329797] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.331741] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.334079] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.339213] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.340932] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.345055] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.349023] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.350559] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.351975] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.353373] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.355162] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.356528] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.357941] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.359331] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.360794] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.362318] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.363650] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.365008] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.366426] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.367783] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.369176] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.370533] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.371876] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.373413] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.374754] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.376133] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.377514] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.378882] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.380356] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.381679] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.383026] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.384684] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.386679] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.388565] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.390307] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.391992] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.393699] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.395563] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.397319] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.398767] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.400394] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.402025] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.403397] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.404843] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.406201] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.407580] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.408819] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.412065] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.413546] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.415084] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.416537] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.418051] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.419503] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.420986] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.422473] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.423874] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.425375] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.426691] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.428001] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.429375] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.430676] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.432033] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.433483] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.435214] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.437052] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.438795] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.440607] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.442588] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.444303] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.445532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1897.445985] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.449064] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.450711] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.464600] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.468408] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.469704] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.476905] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1897.494397] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 1897.496501] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 1897.497869] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 1897.499166] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 01 00 00 01 00 [ 1897.501348] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.502910] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.504928] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.507088] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.509189] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.510775] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.513741] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.515338] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.517410] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.518812] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.520145] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.521554] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.522875] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.524198] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.527477] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.528800] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.530335] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.531836] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.533168] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.534529] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.535897] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.537205] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.538910] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.540304] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.542701] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.545628] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.548725] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.550262] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.552989] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.555674] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.557650] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.561605] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.563036] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.564411] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.575163] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.576472] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.577955] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.579650] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.580997] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.582327] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.583893] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.586651] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.588525] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.590113] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.592977] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.594921] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.596861] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.598857] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.600315] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.601641] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.602941] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.604362] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.605700] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.607028] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.608402] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.609627] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.611019] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.612414] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.613679] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.618700] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.620080] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.621708] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.622940] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.624127] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.625616] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.626745] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.628781] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.630036] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.631447] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.632665] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.633889] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.635134] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.636420] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.637718] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.639057] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.640493] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.641710] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.642939] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.644153] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.645392] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.646622] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.647948] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.649338] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.650566] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.652580] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.653830] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.655060] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.656432] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.657677] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.658904] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.660643] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.662449] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.663693] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.665138] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.666723] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.668136] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.669634] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.671094] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.672492] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.679559] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.680755] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.681977] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.683224] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.684447] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.685639] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.686861] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.688135] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.689393] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.690618] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.691831] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.693068] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.694383] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.695605] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.696824] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.698599] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.700188] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.702705] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.704223] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.705858] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.707509] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.708893] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.710556] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.711858] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.713545] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.714686] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.715862] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.717066] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.719680] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.721910] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.723557] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.725144] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.726801] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.728147] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.729583] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.731030] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.732487] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.733873] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.735286] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.736530] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.737706] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.738868] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.740026] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.741318] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.742456] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.743607] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.744751] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.745972] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.747175] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.748329] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.749571] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.750733] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.751863] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.752986] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.754139] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.755498] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.756658] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.757859] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.758983] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.760131] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.761387] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.762532] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.763680] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.764878] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.766037] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.767190] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.768382] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.769510] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.770633] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.771782] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.772929] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.774184] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.775416] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.776560] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.777727] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.778835] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.779945] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.781086] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.782289] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.783795] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.785541] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.787004] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.789041] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.790751] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.792328] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.793816] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.795580] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.797156] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.798685] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.807809] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.809773] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.811773] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.813269] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.814826] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.816584] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.817979] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.822804] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.824040] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.825083] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.826185] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.827737] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.828772] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.829832] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.831284] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.833582] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.835614] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.837063] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.838671] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.840128] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.841655] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.843131] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.844440] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.845686] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.846930] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.848158] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.849428] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.850649] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.851893] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.853124] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.854486] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.855727] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.856985] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.858226] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.859493] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.860724] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.861982] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.863193] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.864514] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.865743] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.866971] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.868170] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.869423] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.870618] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.871837] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.873044] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.874386] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.878573] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.883104] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.884136] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.885561] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.886684] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.887737] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.888745] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.890285] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.891798] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.892814] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.893894] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.894923] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.895977] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.896992] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.898018] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.899078] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.900081] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.901087] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.902109] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.903143] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.904145] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.905146] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.906184] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.907398] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.908378] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.909378] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.910401] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.911399] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.912417] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.913448] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.914416] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.916512] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.917700] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.918923] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.920597] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.921767] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.926849] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.928647] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.929866] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.931404] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.932411] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.933390] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.934384] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.935343] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.936349] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.937417] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.938438] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.940061] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.941496] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.943073] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.944469] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.945996] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.947185] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.948540] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.950100] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.951198] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.952202] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.953194] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.954350] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.955282] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.956820] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.957804] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.958737] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.959745] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.960798] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.961722] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.962678] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.963764] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.964779] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.965776] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.966764] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.967766] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.968773] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.970368] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.971766] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.972950] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.974130] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.975507] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.976682] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.977845] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.979429] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.980595] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.981648] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.982598] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.983509] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.984429] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.985910] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.986878] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.987782] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.988722] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.990217] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.991467] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.992984] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.994203] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.995429] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.996607] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.998086] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1897.999315] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.000508] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.001628] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.002815] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.003942] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.005094] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.006595] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.007747] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.008877] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.010586] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.011686] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.012811] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.013940] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.015524] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.016740] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.017887] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.019008] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.020179] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.021657] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.022777] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.023916] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.028448] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.029556] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.030654] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.031800] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.033798] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.035119] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.037001] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.038672] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.039977] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.041521] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.042836] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.044151] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.045607] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.046916] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.048210] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.053545] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.054842] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.056292] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.057869] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.059162] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.060581] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.061894] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.063207] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.068557] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.069950] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.071533] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.072793] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.074090] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.079684] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.080953] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.082444] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.084070] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.085527] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.086801] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.088073] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.089526] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.092802] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.094127] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.094958] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.095830] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.096699] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.097769] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.098592] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.099493] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.100552] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.101400] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.102415] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.103220] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.104162] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.104988] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.105873] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.106718] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.107585] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.108434] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.109753] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.110846] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.112624] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.113686] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.114744] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.115789] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.116840] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.117910] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.119039] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.120112] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.121174] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.122295] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.123357] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.124395] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.125500] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.126552] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.130053] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.131103] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.132222] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.133424] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.134518] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.135939] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.137049] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.138185] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.139433] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.140543] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.141706] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.142827] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.143933] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.145045] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.146176] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.147346] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.148436] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.149587] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.150681] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.151779] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.152891] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.154143] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.155170] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.156211] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.157320] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.158586] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.159602] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.160681] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.161780] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.162826] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.163839] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.164869] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.166069] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.167095] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.167928] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.168914] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.169744] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.170567] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.171390] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.172131] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.173048] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.174128] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.175160] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.176250] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.177415] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.178441] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.179461] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.180531] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.181667] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.182671] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.183688] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.184749] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.185807] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.186835] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.187848] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.188917] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.190184] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.191202] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.192265] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.193254] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.194340] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.195355] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.196382] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.197410] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.198478] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.199550] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.200580] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.201627] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.202699] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.203737] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.204752] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.205817] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.206867] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.207688] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.208663] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.209451] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.210181] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.211129] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.211906] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.212725] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.216519] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.217537] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.218606] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.219584] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.237511] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 1898.238818] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 1898.239662] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 1898.240472] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 01 00 00 01 00 [ 1898.241589] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.242350] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.243067] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.243838] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.244603] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.245482] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.246196] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.246950] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.247778] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.248531] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.249329] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.250053] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.250813] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.251627] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.252379] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.253092] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.253926] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.254672] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.255504] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.256221] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.256995] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.257780] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.258550] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.259360] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.260265] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.260982] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.261737] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.262484] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.263184] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.263913] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.264646] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.265405] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.266186] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.266933] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.267727] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.268463] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.269208] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.270025] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.270790] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.271547] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.272355] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.273064] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.273851] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.274591] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.275364] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.276064] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.276810] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.277568] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.278359] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.279071] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.279842] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.280589] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.281369] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.282102] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.282854] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.283623] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.284407] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.285129] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.285902] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.286653] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.287407] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.288130] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.288869] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.289642] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.290508] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.291467] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.306884] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 1898.308107] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 1898.308898] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 1898.309672] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 02 00 00 02 00 [ 1898.310678] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.311520] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.324880] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=1s [ 1898.326175] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 1898.326954] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 1898.327702] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00 [ 1898.328682] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.344817] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 1898.346296] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 1898.347044] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 1898.347805] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00 [ 1898.365531] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 1898.366860] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 1898.367635] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 1898.368381] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 02 00 00 02 00 [ 1898.384062] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 1898.385274] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 1898.386038] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 1898.386808] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00 [ 1898.404276] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 1898.405476] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 1898.406256] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 1898.406994] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 02 00 00 02 00 [ 1898.423482] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 1898.424642] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 1898.425434] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 1898.426172] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 00 00 00 02 00 [ 1898.440399] sr 1:0:0:0: [sr0] tag#0 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_SENSE cmd_age=0s [ 1898.441512] sr 1:0:0:0: [sr0] tag#0 Sense Key : Not Ready [current] [ 1898.442296] sr 1:0:0:0: [sr0] tag#0 Add. Sense: Medium not present [ 1898.443035] sr 1:0:0:0: [sr0] tag#0 CDB: Read(10) 28 00 00 00 00 02 00 00 02 00 [ 1898.710488] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.711322] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.712100] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.712877] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.713659] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.714422] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.715128] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.715876] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.716636] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.717459] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.718187] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.718948] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.719706] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.720471] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.721182] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.721941] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.722693] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.723458] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.724174] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.724969] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.725736] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.726522] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.727316] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.728047] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.728791] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.729547] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.730295] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.731022] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.731770] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.732518] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.733212] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.733972] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.734736] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.735567] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.736331] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.737057] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.737805] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.738563] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.739329] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.740053] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.740850] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.742688] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.743439] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.744138] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.744889] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.745768] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.746539] sr 1:0:0:0: [sr0] tag#0 unaligned transfer [ 1898.747287] sr 1:0:0:0: [sr0] tag#0 unaligned transfer 09:23:25 executing program 4: semtimedop(0xffffffffffffffff, &(0x7f00000000c0)=[{0x1, 0x1f, 0x800}, {0x0, 0xcaba, 0x400}, {0x0, 0x20, 0x1000}, {0x1, 0x4, 0x1800}], 0x4, &(0x7f0000000100)={0x77359400}) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) semtimedop(0x0, &(0x7f0000000300)=[{0x4, 0x8, 0x1800}, {0x3, 0xf4e}], 0x2, &(0x7f0000000380)={r0, r1+60000000}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/mdio_bus', 0x40800, 0x4) sendmsg$802154_dgram(r2, &(0x7f0000001700)={&(0x7f00000015c0)={0x24, @none={0x0, 0x3}}, 0x14, &(0x7f00000016c0)={&(0x7f0000000000)="9d50e2ed64fd07d9b6410985c6b620e6a001d4e95b6d2f78443cb923225ecd8ba79ad9b44d3714be5bd8137d412ae8bfa05935b731e80d374144cbadf0f524cad310331fa65eab52cddf17562d1f4444f59d19fabb207d6ac4193fb035a2e0e0b34a5c38b8f4055f31b6c1b7f079655a019c14", 0x73}}, 0x24004000) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x4000) sendmsg$802154_dgram(r3, &(0x7f00000002c0)={&(0x7f0000000180), 0x14, &(0x7f0000000280)={&(0x7f00000001c0)="05fd514a70dd99de91cc3de8b13abf865a8db6dd76fcb958e1e4cf6dd772b8731a1284eb57f431b120aa64f8f0add04b7cefeacd04cb8e384b6c79d104d38e8a26dfa802300542589c86732e22e2caa577d5e80a8ab37a44ff612308669a5362d8067e755346868734783466af72d332c116a9a5ae9fc131b217f05ede1da42165eaaf8438d32b729a3f9aab3a50aa2638fdf02b85b0034b9e035b2d4c7e591a1db6", 0xa2}, 0x1, 0x0, 0x0, 0x800}, 0x44881) 09:23:25 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb1"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x185680, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r4, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r5, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:23:25 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[], 0x50}}, 0x0) 09:23:25 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080)={0x0, 0xf584, 0x2, 0x2, 0x3d1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) syz_io_uring_setup(0x155b, &(0x7f00000005c0)={0x0, 0x27bd, 0x2, 0x1, 0x3b5}, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x208a, &(0x7f00000004c0)={0x0, 0xb5a, 0x10, 0x0, 0x49}, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) syz_open_dev$vcsa(&(0x7f0000000040), 0x3e0, 0xa00) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, 0xffffffffffffffff, 0x0) 09:23:25 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x2, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}}, 0x0) 09:23:25 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0xf0ffff, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}}, 0x0) 09:23:25 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB], 0x50}}, 0x0) 09:23:25 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195be945b99b06fab0609"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x185680, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r4, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) [ 1914.324083] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1914.336011] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 09:23:25 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080)={0x0, 0xf584, 0x2, 0x2, 0x3d1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) syz_io_uring_setup(0x155b, &(0x7f00000005c0)={0x0, 0x27bd, 0x2, 0x1, 0x3b5}, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x208a, &(0x7f00000004c0)={0x0, 0xb5a, 0x10, 0x0, 0x49}, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) syz_open_dev$vcsa(&(0x7f0000000040), 0x3e0, 0xa00) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, 0xffffffffffffffff, 0x0) 09:23:25 executing program 4: keyctl$read(0xb, 0x0, &(0x7f00000000c0)=""/43, 0x2b) r0 = add_key$fscrypt_v1(&(0x7f00000003c0), &(0x7f0000000480)={'fscrypt:', @desc1}, &(0x7f0000000740)={0x0, "d8999336666c1b62fa87a330c1a8e17ff2a827868c597c2bfcb4054e3e180d70fa8547cc869b7316eee4c0bcd0ad5a96fc5bd7c4e2929fcc2cea0c2d4ed3d2e2"}, 0x48, 0xfffffffffffffffb) keyctl$invalidate(0x15, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, &(0x7f0000000000)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x3, 0x0, &(0x7f0000000040)=0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000280)={'icmp6\x00'}, &(0x7f0000000380)=0x1e) timer_gettime(r1, 0x0) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x405d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, @perf_config_ext={0x7, 0x3f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x2, &(0x7f0000000100)={0x0, 0x2f, 0x0, @thr={&(0x7f0000000080)="6cdd635ece8e7bc3b3e66b94ebd11467e295d405246626d769ff8f28b5d41803027362e22b2623a42079f719d1dcb644510060dcdcf79eb8e9291f933694", &(0x7f00000004c0)="69ebad671baa233d5795f0f4db3ef2d60156e2dfae8d0f5bfbd0d0710bad630866f2dd59f659e0da70577203194b4ddaa2282e26fa5782c9f1d5f061e171ae4785bb2a681bee8be5ef5d97c1623213e839c05d2a5481e2bc2dba2451756db5e19ac1d4ec7a545ff13715572d389e01bff12488e249167c47d9031d5f03635298721e38fc4b9ca6c9b40b4ce4eb11437a2d502ed9449fa3462911b002f6b35898195d4c986ad27a9cfd549de0d4a10c290c4784970c3a142b8c5a98e4e93e6ff512ce5753"}}, &(0x7f0000000140)) keyctl$link(0x8, r0, r0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:23:26 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x8, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}}, 0x0) 09:23:26 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x1000000, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}}, 0x0) 09:23:26 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080)={0x0, 0xf584, 0x2, 0x2, 0x3d1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) syz_io_uring_setup(0x155b, &(0x7f00000005c0)={0x0, 0x27bd, 0x2, 0x1, 0x3b5}, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x208a, &(0x7f00000004c0)={0x0, 0xb5a, 0x10, 0x0, 0x49}, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) syz_open_dev$vcsa(&(0x7f0000000040), 0x3e0, 0xa00) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, 0xffffffffffffffff, 0x0) 09:23:26 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x2000000, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}}, 0x0) 09:23:26 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0xf, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}}, 0x0) 09:23:26 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080)={0x0, 0xf584, 0x2, 0x2, 0x3d1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) syz_io_uring_setup(0x155b, &(0x7f00000005c0)={0x0, 0x27bd, 0x2, 0x1, 0x3b5}, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x208a, &(0x7f00000004c0)={0x0, 0xb5a, 0x10, 0x0, 0x49}, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) syz_open_dev$vcsa(&(0x7f0000000040), 0x3e0, 0xa00) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, 0xffffffffffffffff, 0x0) 09:23:26 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080)={0x0, 0xf584, 0x2, 0x2, 0x3d1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) syz_io_uring_setup(0x155b, &(0x7f00000005c0)={0x0, 0x27bd, 0x2, 0x1, 0x3b5}, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x208a, &(0x7f00000004c0)={0x0, 0xb5a, 0x10, 0x0, 0x49}, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) syz_open_dev$vcsa(&(0x7f0000000040), 0x3e0, 0xa00) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, 0xffffffffffffffff, 0x0) [ 1915.035419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1915.149835] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:23:40 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0xf000000, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}}, 0x0) [ 1929.158416] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 09:23:40 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080)={0x0, 0xf584, 0x2, 0x2, 0x3d1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) syz_io_uring_setup(0x155b, &(0x7f00000005c0)={0x0, 0x27bd, 0x2, 0x1, 0x3b5}, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x208a, &(0x7f00000004c0)={0x0, 0xb5a, 0x10, 0x0, 0x49}, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) syz_open_dev$vcsa(&(0x7f0000000040), 0x3e0, 0xa00) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, 0xffffffffffffffff, 0x0) 09:23:40 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0xf0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}}, 0x0) 09:23:40 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195be945b99b06fab0609"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x185680, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r4, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:23:40 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB], 0x50}}, 0x0) 09:23:40 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x4, &(0x7f0000000280)=[{&(0x7f0000000040)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53efff00000000000000655f000000000000000001000000000000000b0000000001", 0x5a, 0x400}, {0x0, 0x0, 0xffffffffdffffff8}, {&(0x7f0000010400)="020000000300000004", 0x9, 0x800}, {&(0x7f00000000c0)="ed410055e561800d620dad94b30310347a57b470ac05764f6d52e0f4655fe0f4655f", 0x22, 0x2100}], 0x0, &(0x7f0000000100)) syz_mount_image$tmpfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x2800, 0x2, &(0x7f0000000400)=[{&(0x7f0000000200)="492edf82930d0e62ffc964115401b6a1edeb6b8f0d35c7e7007d17ca444a0207cfbbaddd3251d3ab43e13ea2b9f51713f34954d479b7920b159ddb972d86f6749a1e1a96ba541e9211023fb34a1743c8eaf3955f4aadd310db49e2be6116205265188776ced2b5bea907b8631b3e5d22e24667f4c5045e5cc96125d3bf69", 0x7e, 0xfff}, {&(0x7f0000000300)="542fb957f2c18ca3fc1b9599b6c7913bdb1f1edacbf9014a431113153c8ac1c973161a36a2e24631e90ca5a15a3f3bca50575c3a970af73322fc1b59246dd1454652f7aef7bb5e837b5a5d95648913ccfe0c2022b37eefa057b41cd888934a874eba2cc260523001208575d83b030213de68d4ac73dc5db30573bdcddad2560e89b7f86a551e6b5182952175ecb52317f1745f5b449cfc0df15b36849d7eec94a3d0401f1dc8959472e468993ea96f3985e50268982f70d28d0fada136b848246a7ece11f6aab2714d69cbcf3a411f4c0f3fe24dbca335e54894782be0ccc47fd8e469d3089d09185057a87123fc4201d8a073ac30380348e7", 0xf9, 0x7}], 0x256000, &(0x7f0000000440)={[], [{@dont_measure}]}) 09:23:40 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x185680, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r4, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r5, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:23:40 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB], 0x50}}, 0x0) [ 1929.169640] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1929.178089] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 09:23:40 executing program 4: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000000), 0x40000, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/../file0\x00', 0x8600, 0x14) 09:23:40 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x369, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}}, 0x0) 09:23:40 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x185680, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r4, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r5, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:23:40 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x9effffff, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}}, 0x0) 09:23:40 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080)={0x0, 0xf584, 0x2, 0x2, 0x3d1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) syz_io_uring_setup(0x155b, &(0x7f00000005c0)={0x0, 0x27bd, 0x2, 0x1, 0x3b5}, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x208a, &(0x7f00000004c0)={0x0, 0xb5a, 0x10, 0x0, 0x49}, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) syz_open_dev$vcsa(&(0x7f0000000040), 0x3e0, 0xa00) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, 0xffffffffffffffff, 0x0) 09:23:40 executing program 4: r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)) r2 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000002540)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000040)={0x0, 0x0, 0x21}, &(0x7f00000000c0)='./file0\x00', 0x18}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000240)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000200)='./file0\x00'}, 0x4) io_uring_enter(r2, 0x200699d, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x44b5, &(0x7f0000000340)={0x0, 0xd03b, 0x1, 0x3, 0x243, 0x0, r0}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000080)) syz_io_uring_setup(0x357, &(0x7f00000003c0)={0x0, 0x184a, 0x10, 0x3, 0x2ef, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000001c0)) r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc, 0x7fff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)=ANY=[@ANYBLOB="e5ffffff00000000058795b6", @ANYRES32=r6, @ANYBLOB='\x00\a']) r7 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x10000, &(0x7f0000000280)=[0xffffffffffffffff, r6, r6, 0xffffffffffffffff, 0xffffffffffffffff, r10, r6, r6], 0x8, 0x0, 0x1, {0x0, r11}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) r12 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r7, 0x8000000) syz_io_uring_submit(r12, r9, &(0x7f0000000340)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40012103, 0x1}, 0x80000001) syz_io_uring_submit(r5, r9, &(0x7f0000000a00)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000940)=0x80, &(0x7f0000000980)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x0, 0xc0800}, 0x401) r13 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) openat(r13, &(0x7f0000000140)='./file0\x00', 0x181000, 0x145) syz_io_uring_submit(r5, 0x0, &(0x7f0000000540)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={&(0x7f0000000ac0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000002040)=[{&(0x7f0000000b40)=""/248, 0xf8}, {&(0x7f0000000c40)=""/77, 0x4d}, {&(0x7f0000000cc0)=""/40, 0x28}, {&(0x7f0000000d00)}, {&(0x7f0000000d40)=""/72, 0x48}, {&(0x7f0000003580)=""/4098, 0x1002}, {&(0x7f0000001dc0)=""/68, 0x44}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/217, 0xd9}, {&(0x7f0000001f40)=""/207, 0xcf}], 0xa, &(0x7f0000002100)=""/60, 0x3c}, 0x0, 0x40002000, 0x1, {0x2}}, 0x1d) [ 1929.271732] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1929.281010] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:23:40 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x185680, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r4, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r5, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) [ 1929.356656] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1929.367007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1929.688549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:24:05 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080)={0x0, 0xf584, 0x2, 0x2, 0x3d1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) syz_io_uring_setup(0x155b, &(0x7f00000005c0)={0x0, 0x27bd, 0x2, 0x1, 0x3b5}, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x208a, &(0x7f00000004c0)={0x0, 0xb5a, 0x10, 0x0, 0x49}, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) syz_open_dev$vcsa(&(0x7f0000000040), 0x3e0, 0xa00) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, 0xffffffffffffffff, 0x0) 09:24:05 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB], 0x50}}, 0x0) 09:24:05 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x185680, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r4, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r5, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:24:05 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0xc00e0000, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}}, 0x0) 09:24:05 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0xec0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}}, 0x0) 09:24:05 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50000000150023020000000000000000"], 0x50}}, 0x0) 09:24:05 executing program 4: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) openat(r0, &(0x7f0000000140)='./file0\x00', 0x181000, 0x145) fcntl$getflags(r0, 0x3) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder-control\x00', 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ff7000/0x8000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000000000)="be50cae35055c0b650cb9e1c6c4c1db718339dd5463a8bf9a0eac2b28df1f31f12c7c1b28d46f2cf7227131a1d9b6b1262bc0f29338e0d28c02638c5884236715f1cbe2863545287f60ef7d6dccd1ecf3497e1d9a24c946d6b9af3d067f1af87fc1667df29ab6d543833bf89f07df5a90608cf9a6ba61fb1cd9949a3f679afb11db302efcdcf9d17e959f2f7eef9e8132a15067d1b03332e2d491023797b", 0x9e, r1}, 0x68) timer_delete(0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x405d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:24:05 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195be945b99b06fab0609"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x185680, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r4, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) [ 1954.056896] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1954.077609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1954.091371] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 09:24:05 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0xd1020000, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}}, 0x0) 09:24:05 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0xf00, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}}, 0x0) 09:24:05 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080)={0x0, 0xf584, 0x2, 0x2, 0x3d1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) syz_io_uring_setup(0x155b, &(0x7f00000005c0)={0x0, 0x27bd, 0x2, 0x1, 0x3b5}, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x208a, &(0x7f00000004c0)={0x0, 0xb5a, 0x10, 0x0, 0x49}, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) syz_open_dev$vcsa(&(0x7f0000000040), 0x3e0, 0xa00) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, 0xffffffffffffffff, 0x0) 09:24:05 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x185680, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r4, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r5, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:24:05 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB], 0x50}}, 0x0) 09:24:05 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}}, 0x0) [ 1954.280692] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1954.305358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:24:05 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x6903, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}}, 0x0) 09:24:05 executing program 4: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x1, 0x0, 0xffffffffffffffff, 0x0, r0, 0x2, 0x0, 0x1}, 0x6) r1 = syz_io_uring_setup(0x3875, &(0x7f00000001c0), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000001a40)={&(0x7f0000000300)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast]}, 0x80, &(0x7f00000017c0)}, 0x0, 0x8abb4d2a8b028460}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000007, 0x13, r1, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x2000, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x695, 0xed4e, 0x0, &(0x7f0000000140)={[0x6]}, 0x8) r5 = syz_io_uring_setup(0x19b5, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)) io_uring_enter(r5, 0x1f23, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x19b5, &(0x7f0000003480), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000240)) r7 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x10000, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r10, 0xffffffffffffffff, 0xffffffffffffffff], 0x8, 0x0, 0x1, {0x0, r11}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r7, 0x0) r12 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r7, 0x8000000) syz_io_uring_submit(r12, r9, &(0x7f0000000340)=@IORING_OP_READ_FIXED={0x4, 0x1, 0x4000, @fd=r5, 0x2, 0x400, 0x0, 0x8, 0x1, {0x1, r11}}, 0x80000001) syz_io_uring_submit(r6, r9, &(0x7f0000000080)=@IORING_OP_POLL_REMOVE={0x7, 0x5}, 0x6c239dcc) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000004, 0x10, 0xffffffffffffffff, 0x0) 09:24:05 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080)={0x0, 0xf584, 0x2, 0x2, 0x3d1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) syz_io_uring_setup(0x155b, &(0x7f00000005c0)={0x0, 0x27bd, 0x2, 0x1, 0x3b5}, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x208a, &(0x7f00000004c0)={0x0, 0xb5a, 0x10, 0x0, 0x49}, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) syz_open_dev$vcsa(&(0x7f0000000040), 0x3e0, 0xa00) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, 0xffffffffffffffff, 0x0) [ 1954.903000] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:24:22 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0xfffff000, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}}, 0x0) 09:24:22 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0xc00e, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}}, 0x0) 09:24:22 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB], 0x50}}, 0x0) 09:24:22 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195be945b99b06fab0609"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x185680, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r4, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:24:22 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080)={0x0, 0xf584, 0x2, 0x2, 0x3d1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) syz_io_uring_setup(0x155b, &(0x7f00000005c0)={0x0, 0x27bd, 0x2, 0x1, 0x3b5}, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x208a, &(0x7f00000004c0)={0x0, 0xb5a, 0x10, 0x0, 0x49}, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) syz_open_dev$vcsa(&(0x7f0000000040), 0x3e0, 0xa00) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, 0xffffffffffffffff, 0x0) 09:24:22 executing program 4: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000100), 0x8, 0x48000) sendmsg$AUDIT_TTY_SET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x3f9, 0x800, 0x70bd2d, 0x25dfdbfb, {0x1, 0x1}, ["", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x41}, 0xc4) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xff, 0x1f, 0xb8, 0x6, 0x0, 0x5, 0x341, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7ff, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0xd882, 0x100000001, 0x7, 0x2, 0x3a, 0x20, 0x2, 0x0, 0x7, 0x0, 0x8}, 0xffffffffffffffff, 0xe, r0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/unix\x00') pread64(r1, &(0x7f0000000240)=""/225, 0xe1, 0x0) syz_io_uring_setup(0x5125, &(0x7f0000000340)={0x0, 0x84ed, 0x0, 0x3, 0x29b, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000400)) r3 = syz_io_uring_setup(0x3cc4, &(0x7f00000004c0)={0x0, 0x362e, 0x8, 0x3, 0x319}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)=0x0) r5 = getpid() write$cgroup_pid(r1, &(0x7f0000000700)=r5, 0x12) io_uring_setup(0x31ea, &(0x7f0000000740)={0x0, 0x7b2d, 0x20, 0x1, 0xc2, 0x0, r3}) syz_io_uring_submit(r2, r4, &(0x7f00000006c0)=@IORING_OP_WRITE={0x17, 0x0, 0x4004, @fd=r0, 0x1, &(0x7f00000005c0)="3fadc55dd261085a08146e0067e18474e653ed41a15f5c5b965938c5d67ba534067c76ef216e5c12b5e46cbb7c016cdcbce1fbb909a9477832acdc4b8ef3747f00ca9c7a4ca5bc9f6c7eb57de6dca2d9ac9e1c9f1c94c7b883c366d235a728ca8a6142aa6c015718facd6177c5336b97036c726abfb2cf6e966f5de2f78cce4d1cadef82baf1d0b74ec7ecef8ef0f0fcdfaf940e6a37eee998e2c652a2b919abb34ffa7e970f0cac8cc0f246d018fc5cc080904cfd485d8449261ae76f84b96527dedd3a638e65f37ffe818bfb09a0a2e7820b5368c78ca302e0c7231d6887093ade382781daacd73f0db10b5005cb02d244", 0xf2, 0x17, 0x1}, 0x6) 09:24:22 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB], 0x50}}, 0x0) 09:24:22 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x185680, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r4, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r5, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) [ 1970.791663] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1970.808838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1970.836094] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 09:24:22 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0xffffff7f, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}}, 0x0) 09:24:22 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0xf000, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}}, 0x0) 09:24:22 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x185680, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r4, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r5, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:24:22 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080)={0x0, 0xf584, 0x2, 0x2, 0x3d1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) syz_io_uring_setup(0x155b, &(0x7f00000005c0)={0x0, 0x27bd, 0x2, 0x1, 0x3b5}, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x208a, &(0x7f00000004c0)={0x0, 0xb5a, 0x10, 0x0, 0x49}, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) syz_open_dev$vcsa(&(0x7f0000000040), 0x3e0, 0xa00) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, 0xffffffffffffffff, 0x0) [ 1970.955394] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 09:24:22 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0xffffff9e, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}}, 0x0) 09:24:22 executing program 4: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000240)={0x53, 0xfffffffffffffffd, 0x37, 0x9, @scatter={0x1, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/89, 0x59}]}, &(0x7f0000000140)="6c0fb074466e9c37e9d868d97d806a9cf527b61d3cb8202c1b3ea6757e6030eeb2f9b27a83d84701f3127dc939b0ed31c85ebbbc290576", &(0x7f0000000180)=""/84, 0x7, 0x4, 0x1, &(0x7f0000000200)}) 09:24:22 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x80000, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}}, 0x0) [ 1971.646006] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1971.764877] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:24:39 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x185680, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r4, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r5, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:24:39 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0xfffffff0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}}, 0x0) 09:24:39 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195be945b99b06fab0609"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x185680, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:24:39 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080)={0x0, 0xf584, 0x2, 0x2, 0x3d1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) syz_io_uring_setup(0x155b, &(0x7f00000005c0)={0x0, 0x27bd, 0x2, 0x1, 0x3b5}, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x208a, &(0x7f00000004c0)={0x0, 0xb5a, 0x10, 0x0, 0x49}, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) syz_open_dev$vcsa(&(0x7f0000000040), 0x3e0, 0xa00) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, 0xffffffffffffffff, 0x0) [ 1988.333406] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1988.343811] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 09:24:39 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) openat(r1, &(0x7f0000000180)='./file1\x00', 0x185680, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000080)=ANY=[@ANYBLOB="e5ffffff00000000058795b6", @ANYRES32=r3, @ANYBLOB="f7ffffff000000002e2f66696c653000"]) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r7 = signalfd(r3, &(0x7f0000000300)={[0x80000001]}, 0x8) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f0000000380)={0x5e3a, 0x0, &(0x7f0000000340)=[r7, r0, r1]}, 0x3) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x10000, &(0x7f0000000280)=[0xffffffffffffffff, r3, r3, 0xffffffffffffffff, 0xffffffffffffffff, r8, r3, r3], 0x8, 0x0, 0x1, {0x0, r9}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r1, &(0x7f0000000040), 0x0, 0x0, 0x100800, 0x337b197e21407d17, {0x0, r9}}, 0xffb) r10 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) openat(r10, &(0x7f0000000140)='./file0\x00', 0x181000, 0x145) pwritev2(r10, &(0x7f00000003c0)=[{&(0x7f0000000200)="559e083c6e6ef9c8a5f4f1454638b3ac73d134206567014b09c9eaf6e5479207a359212a3a8ee3a027e29ac775c04c1baf81b6685ec825459647537b0088801fd4e17ee280a213ea7d9670", 0x4b}], 0x1, 0x0, 0x4, 0x9) 09:24:39 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0xf0ffff, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}}, 0x0) 09:24:39 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302000000000000000020010000000000000000000000000002"], 0x50}}, 0x0) 09:24:39 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB], 0x50}}, 0x0) 09:24:39 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x1000000, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}}, 0x0) 09:24:40 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0xffffffff, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}}, 0x0) 09:24:40 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB], 0x50}}, 0x0) 09:24:40 executing program 6: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080)={0x0, 0xf584, 0x2, 0x2, 0x3d1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) syz_io_uring_setup(0x155b, &(0x7f00000005c0)={0x0, 0x27bd, 0x2, 0x1, 0x3b5}, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x208a, &(0x7f00000004c0)={0x0, 0xb5a, 0x10, 0x0, 0x49}, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) syz_open_dev$vcsa(&(0x7f0000000040), 0x3e0, 0xa00) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, 0xffffffffffffffff, 0x0) 09:24:40 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x2000000, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}}, 0x0) 09:24:40 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="0f00000015002302"], 0x50}}, 0x0) 09:24:40 executing program 4: keyctl$update(0x2, 0x0, &(0x7f0000000000)="a7", 0x1) keyctl$get_keyring_id(0x0, 0x0, 0x80) keyctl$read(0xb, 0x0, &(0x7f00000000c0)=""/43, 0x2b) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0}, &(0x7f0000000580)=0xc) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f0000000040)=0x0) r3 = syz_mount_image$nfs4(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x20, 0x5, &(0x7f0000000880)=[{&(0x7f00000004c0)="88de01eb6c5a1f3bfa288616c50cb07f275a537e75f359d8c7184513002e85b221fbaecfcf6a6f258f2595aa84d9cb2ce822808c4bd8a024f89823a67ab2389745bb7d9e7c2b6a4503dbb9dcf04c54069d85c1f1d48a43bdf6b2e1417ce8", 0x5e, 0xff}, {&(0x7f00000005c0)="1eaa31122056a402c57d0d98265c6fe0f46ee39cbe597b7164af96d63bbc1394b124fb27a47aa195d08370e94cebfe818e47e1cdad8c77caf16b91157ac9ba26e01456150edaccb8fa8b835d", 0x4c, 0x81}, {&(0x7f0000000640)="b296a9b200d4b47f49943484d5a3e3066ba9fd8964bf7f86fb9c110acb75d1579ce47ae80b8a162b17408c4f60ede0ec7e63051f20a243992cea8acef1f52c3e95668d77fe472fdd5d571a2a4f5c38c1a5a12f61c00fce22394adfb4379a142175b8e323f02b65c1aa3573c7841fc375a29da6d4fc7b55e3286855ab63751f6d30c78161c26e85adbe0bf893d29bef23520b5e4fd88901fee694fbd816", 0x9d, 0x3f}, {&(0x7f0000000700)="7536b465467e633572dd40688d8f697c011c8aefb96bed313e3aeea64372e5001035938e5bdfcb346c1453b667056d2d21850e62c6bd3271383432f05e1689b84ec4f6378c9fd8ec90e688ba5d23cf2d72b235d9995f2cc466b7b43638ff7f8dd7fdce622549202c3421ef1e39c097ee589c0331340812fe4f05c84c2d8b8839ba40959bbd8f2243c2884645825f3e1f3cee4d42698b24c92475ab033b9c5b6148864ab1eb872d3462d5d1f39f60395956e68ef0666414a82272fe9f5c6d3ce51e14a142af31", 0xc6, 0x4}, {&(0x7f0000000800)="54134820c6bea5e0f4d17fab5466d5a2e9238922a0bb283772f16d4c2a54d0ddee4fa41e27d94c896a8f5c622ca4d46ae62dd9756e5805d0f6009df524bb5a439dec8545eb290e3e0e96a948720cc61b", 0x50, 0x9}], 0x400008, &(0x7f0000000540)={[{'&'}, {'^'}, {'[./{*,%#('}, {'icmp6\x00'}, {}], [{@obj_type}, {@fowner_lt={'fowner<', r1}}]}) ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f0000000900)="18b4346caf57932dbceb8e9c6083e8566e2a15af98e3590339a3caa75d1cb0fc7286a53e162a0471eff14f001136edf1539906a973237ee139d8ff4264fec61fb9a7600a8bc622dca8d2146c7aa6a035edd8a07ac3753b07f8af8d1cfb29c02cbc6c1ab1b24d7ba7e7267e590d585cde297338074bf441e1b16b2ab76bf5c28c66234f8a46f628681dace190e248dc367f827c7ef476d8c7c81e07ced4352af6fcfbaeb937b9089015be6bdd9f7e33c95147ef209cd5c22d5a1eea0fb29a182ae0fa7338dba478beaff10c89941b969a1b134a6606c785ee66132cf225db2636c2eab232ac50bfa8f89bf8ebf61928c211805e8895b758b8c4986e765d5082b0") getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000280)={'icmp6\x00'}, &(0x7f0000000380)=0x1e) timer_settime(r2, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_gettime(r2, &(0x7f00000002c0)) timer_create(0x4, &(0x7f0000000080)={0x0, 0x27, 0x4, @tid=r0}, &(0x7f0000000100)) timer_delete(r2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x405d, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x3f}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_gettime(r2, &(0x7f0000000400)) timer_delete(0x0) capset(&(0x7f0000000240)={0x20080522}, &(0x7f0000000300)={0x800, 0x3, 0x7, 0xd7, 0x8000, 0x6}) timer_create(0x0, &(0x7f00000003c0)={0x0, 0x11, 0x1}, &(0x7f0000000340)) clone3(&(0x7f00000001c0)={0x40182300, 0x0, 0x0, 0x0, {0x34}, 0x0, 0x0, 0x0, 0x0}, 0x58) 09:24:40 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0xf000000, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}}, 0x0) [ 1989.000064] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1989.136849] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:24:57 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB], 0x50}}, 0x0) 09:24:57 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="c000000015002302"], 0x50}}, 0x0) 09:24:57 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}}, 0x0) 09:24:57 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000002f80), 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000003840)=[{{&(0x7f0000000040)={0x2, 0x4e20, 0x0, @private0, 0x3}, 0x1c, 0x0}}], 0x1, 0x0) 09:24:57 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0xf584, 0x2, 0x2, 0x3d1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) syz_io_uring_setup(0x155b, &(0x7f00000005c0)={0x0, 0x27bd, 0x2, 0x1, 0x3b5}, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x208a, &(0x7f00000004c0)={0x0, 0xb5a, 0x10, 0x0, 0x49}, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) syz_open_dev$vcsa(&(0x7f0000000040), 0x3e0, 0xa00) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, 0xffffffffffffffff, 0x0) 09:24:57 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x69030000, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}}, 0x0) 09:24:57 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x185680, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r4, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r5, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:24:57 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195be945b99b06fab0609"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x185680, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) [ 2005.946802] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 09:24:57 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="c00e000015002302"], 0x50}}, 0x0) 09:24:57 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0xf584, 0x2, 0x2, 0x3d1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) syz_io_uring_setup(0x155b, &(0x7f00000005c0)={0x0, 0x27bd, 0x2, 0x1, 0x3b5}, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x208a, &(0x7f00000004c0)={0x0, 0xb5a, 0x10, 0x0, 0x49}, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) syz_open_dev$vcsa(&(0x7f0000000040), 0x3e0, 0xa00) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, 0xffffffffffffffff, 0x0) 09:24:57 executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/net', 0x0, 0x0) lseek(r0, 0x0, 0x3) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) r2 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) openat(r2, &(0x7f0000000140)='./file0\x00', 0x181000, 0x145) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000940)={0x2, 0xb, {0x3, @usage=0x3f, 0x0, 0x6b, 0x1, 0x5, 0x7, 0xffffffffffffffff, 0x11, @struct={0x63, 0xfffffd0d}, 0x800, 0x7fff, [0x7, 0x4, 0xff, 0x8, 0x4c4d, 0x2]}, {0x20e02107, @struct={0x3, 0x7}, 0x0, 0x5, 0x6, 0x2, 0x800, 0x80, 0x0, @struct={0x0, 0x35e4}, 0x1, 0x7, [0xff, 0x7, 0x6, 0xff, 0x80000000, 0x11]}, {0x200, @usage=0x7, 0x0, 0x9, 0x5, 0x9, 0x0, 0x8, 0xc8, @struct={0x6, 0x80000001}, 0x62c, 0x4, [0x2, 0x4, 0x5, 0x100, 0x9, 0xfffffffffffffffe]}, {0x4, 0x5, 0xfffffffffffffff8}}) ioctl$BTRFS_IOC_DEV_REPLACE(r2, 0xca289435, &(0x7f0000000d40)={0x3, 0x9, @start={r3, 0x0, "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", "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"}, [0x20, 0x3, 0x3, 0x10001, 0x3, 0x8, 0x10000, 0x2, 0x9, 0x3, 0x9, 0xffffffffffff0000, 0x5, 0x54, 0x7ff, 0x6, 0x1000, 0x8, 0x101, 0x9, 0x4, 0x1, 0x3, 0x7, 0x80, 0x3, 0xfff, 0x3, 0x55, 0x9d, 0x9, 0x0, 0x0, 0x8400000000000000, 0xc000000000, 0x1714, 0x7, 0x1, 0xb9c7ff5, 0x5, 0x8, 0x0, 0x0, 0xfffffffffffffffd, 0x1, 0x4, 0x1fffffffe000000, 0x2, 0x6, 0x101, 0x3, 0x1, 0x7fffffff, 0x10000, 0x9, 0x0, 0xfffffffffffffffc, 0x7, 0x4, 0xfffffffffffffffc, 0x3, 0x100000000, 0xe0f3, 0x1]}) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x50, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve0\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}]}, 0x50}}, 0x45800) r4 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) openat(r4, &(0x7f0000000140)='./file0\x00', 0x181000, 0x145) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r5 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8000000001600}], 0x0, &(0x7f00000003c0)=ANY=[]) openat(r5, &(0x7f0000000140)='./file0\x00', 0x181000, 0x145) sendfile(r0, r5, 0x0, 0x7) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) 09:24:57 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB], 0x50}}, 0x0) 09:24:57 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x9effffff, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}}, 0x0) 09:24:57 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="e03f030015002302"], 0x50}}, 0x0) 09:24:57 executing program 4: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80000000}}, '\x00'}) bind$unix(r0, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={r0, 0x0, 0x5, 0x4}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000011c0)='/proc/crypto\x00', 0x0, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000001200), 0x400, 0x0) sendmsg$unix(r1, &(0x7f0000001280)={&(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001180)=[{&(0x7f0000000180)="2406bf53d7c0ab450c0c79803151a1ca9e64b7f344362f857cc0eb1e4a684178af0cfae50dc15a14a7d82a63b26c787bd513202caade98af6f0a53e05d0ce4af7aabcfaef27af381b37add428b2b8dab73e29937b487379699ac74f578476a190129a2c9f685e8d6ef4108b120dc2a41914c5f17ae73859647709a4ab9a953f4e2416e131f04b6459113d13606bb1566c55c2ca60cd530c18b6b9321add07aeb055a866b32f9a859e42a9f725b05c1e97a7efd638e19b3a8c8d087aa5ba1a13dbc31676a45640660c9ba7043d545d02a62df621b349b899452a127fb009a1a869ef837aa37929fc8191e9bbd1978c25ceb2c9ae659fa526d31891b5f0612115f2a016fc5ba5a99a71d4ca2b79eab27fe1d4fbf0210ec734383949bcc464378ca75ec4913e2c9fbaf5752876a883e5218c43c8deb1ddc3a154e33cfc52021d227e1d639afff5cd9bf4e25d5309ad0f9f0910c48ee48dee3ec5ace60462af79a7c642645c243431433edfe1069ab3b348006e34cc4e97437ee6ea82721773cad630cd2a0851b6c0f7a09b2021e65f9ae9023665abd26d79837fc7fceb6e2a22d401bee2ab29cf653150a33de83fba1b3ff53ec4cce38c649fa5bb2af2006b37621209d30a914ffdd65980d3d43d098f3dc81aa440a2be3c6cb487ba80c31a1821de923a138b1569893982ae7820da6e17783a0119b23fedbfb60b731b1caa272434bcfd299febc7261c9851744d32bfcea2afb36f32d3d378adae98b431c672736346305446b74f6e56f6d4640f9aacaea224e17d9302f31f018522bda02ffd621ddb7bfccefe4c916ae136394a8b798e9f385d3f82aaa431d524bff15fdfe051ef7505f20aef323f0f8d44e9298ccc238e01b198af972c890f4d91d5ad1ecb3e48d00c85a864388dfc7980bd98df0b783762dff4b63b41b7f855c925f2a49a8283bf2144d3719584cb2d9c259e16f4ea022b525df39d38dedc17f2856ca66bab528f6b64253209c383b6364cffc30f5076d7fb5de1c9a9625d63358f6ed248dd51df0be640ee12957de1ab2afc74708477a15c9ae0de11723ff2c4b94528791e7d2090c4394cc57bf26002a8cb78b8becc2493260b2b1643a32513073e57468b81b92657c57339e00454b2c6189ed928a16977e3ae0f4094887966947da133169e35af94f6ccff84a0fb3104552c55bc14e779e18c74151fba0c97269a6b916c2eb634b8d53c4516069f5029ec025fd236db6526f0c2237a78493a195d6109638252a2ffb53f42220e37b43a599240578201aebe537c059d713975d2cfa6017995ab0dcffa73c736aa55a8d2c30243a3a3584e05d2b1b06b31b121fed517cecb2c6687769224e077aecd2e8d491ffe6c09875ba9fb78b0f0be06284dc0ba99401da0e05d14a2c149fd7d852bdef9bb4b03c77ade53ca71925d7acd19451f4872336a5c766a461f62257ddb047350687e5d31ed84409dec6b372d62131402dadab8af2f346608f17fd487095000cd851ea63609c90601dffe77cee585e020b0b7badb7cf2f907888a2726e1976edbc8bb40af4f51d4d47cb59024064dae7c508a79020109cd539a31b81b80e4695a3a441bd215678ca8a4e2c4af5381e05e75b318673fabde40308a614cbd49a40a1fbb8873c03602b85e53a720e5546a56f46e230e0e7dac901d707eb762b06e3924a0b1f2da907a9eb5ac6b5a46f8a2b3542318a95a58f504f0bfe8869a5b7b913b5cccde0f270dceadffb53092cbac145e373c161cf40e3406ad6a3ec3b12ccc32c0a2ed95a688566ab9afb69387c0798c4f0a251c5e5fe94f3cbff9906b2049f95aad85b84013a314eb8a17f337badf0bcafdb8a602c65a6160116d6a51d6236341b2a40d00fe1f6b4ed31a066822499ae6eda22c4ab728975dd012e9d1fa50b5385917765dc11a89c87cebe036cfe7ea35dbe17378aeaa507f25a2dcd1b6572b2cbf0c380c34e3a73d56cb22bf4bbfd5cbfd3239eaeac698b94777757c20c977171c804addbb1ed4b8f3c7d12afae710ade12818c702f23d0f4ee8253a80b0131945acef9ae1c1bfd77d15de0d2c0fa55356f6abafccbfa4cc4bbb7422faf2858b0e7dd05b1b187f6909229ff7bc84f4bdaf6fddc4665fe0bc27697afc6dec6be048dad4706013d187d6d01183673e45c87bb0bd802a5f9d051f4889669a141d2fa7483aef00105480ede1e86572ff0515c1250c5a75041ac3a8a8953c57a93b15424962918b774b1f7649bb3b1c7f6370e292f121b3cf5958cc6835d561ed949eae6870700528baf4c89d3c3ee142d2e892a59dd0a3d08caf3647f0539738564777c965b4068b1587ac87b5e0e48121e3cbde309e0536538bb4601b237cd0ce7bf206fb3ffcbab500782d0d65acd17131e2997343e533a8fbefd56f4006b392615d2089edab8fb7dd235525c3a6d14a8c1b46b6bcee7bf367e2fe0a47575643b1357c5e385871a2797baf4d648170b5ade23e29be9b5ba2e0b5c66c33f1cc308d216fa5d07cb4a397dd1ccdd543524a9eee574871108d84503f39907fcc8bdf07bb4651382ed00bf86f56313c19ee3735d8f1912ff3f0d03d07883d63f6ae4bd1f3c05c0a2922f3cff44b743140a5e0772b5f4d70d58224b55e39fae7f74f40166e884989782e88f91f5ff0064efe3c9ec3bab6d06954657aee58f86c88eaad707e5af5a173c8cc06b7397fab22a2f344001ddc2c1e77fb36f506e98c0447d2d487d8ef3ead60852695cad84d7d07b7bc2e2e51b2688418951361ff07b65219ca5968e7445e6efc15e7c01c2f27f0f97e52c0993897fbfeed700026ec2ad1fdf9985352eba095b95a3305bd45f72d2240e36f6748fee12ae9f0e11b6e2e0887c22e3d1bd4dd700496b896f1571b127a11b54a36a8d2b9b3f27ff2475e85566b803bdde23a42c05501761d36bc8f71ef25fe66e62df7d3ac57a3e3893c3eaf7945a3b94cbc487369e96f977ff9e8fb6beb31d194b25a09df2b397f37d21dbc863951ffcfbd84a709fb956fcd52163d17bbc72c1863e915339841a8c68a1a5c2dd3d70ea9c6e0bde5535cd6be7b5b8e006ea57ab56ab59e8c64bf5c75c7546db8459d62bf57a369976170b042060b77b8c57788faa30e06c9419ecb904a2b01a666249e9e56db2378d1225fa0e04a894abc7fe7399b14eb1e326de813b3577e387137b874afc3ad83ab6525f11b7d5cb5c9d7d8e1682204117dba4e393a16c5a92447eeaf53f3b3e1a316fe46b84faf3a7a6ba1810118766be47c17d6f81abd83c7323f27d2289a96e757a5c5fe3fdfd286d6e29ac0a64628380f70549e12c32314925c9f4e9faa4d17f6f1480aace44d6b83dd67e807eb541fafcbdb71c629789d5ae7a201770da1ac3807547b34585b6480aa70d03b18f7393525ef99ede534d2f228543743e50d92ee72e4e078418206c5783e9dc7b0faecdb9a3ab529975ff43ef184de8da95e80a0339dc67d44e4e3a4dad394d9c81ee5ab6b9839554b8e274dc11272c1870fd8a18ec1df3867907a20db7ef7bb409e672a2abc29caf809b9176598bd53d0e1d56bed9346564ac2389f03e49317bed478b25eb2055350214da2b7179ed8a72aa738829bb641de71c742999107d81c49051505f60d1a597993d342f5df70049c53a48836fee9142bd697db77bfce277806e78e91e0d03dc97ada39de3b566f906b4dbcb65bbb45041673f9958e2fca843e09125f761334b67ba89fb235581c820cb6a122e694404b2dd7818084cb2b0021ae8f65d9d19fe8874262d4b3a0801a6d467be26f0bcd1b3339e8465c1ae04cb17677bf138fe19735b012347701219a5a845b9423a0857291d5c3b3eee85cc4980fd805ab72f37e36d37488684be3c3b45578cdbe766d0745536624fb87f51f51716808ec3b663b7778caa25fb59093fb3de8a607b7cb66af33ccc04e4be045a121d1a4f7b40e905fab5e5b87fcaf204538f454bd7d1c15a8d69d5a15a591f8b962c8ccc6c7e8449665d0f07c2b50ed7b54c5e640965505e97b1cee1aba8e46fa3bc83b9e6d2195538f1c7b3b6d51c2ed2ce89a0f3d86079143cb91f03f67dd5ab986f6dd1154695c05235d9942116dab2c4fda9f255daf122d29a0caabc3f0fe148d993da418178d6d0f53b91f521257c7647d95b9b426bf79dd338b09d8c829edab0a05322ed1bd8fc926d5f657f843a2ce825c07dd5d1b1317fa4c6265414a265fdd6a5d1922cd7977d52afc89f90c9f54533a03ce680ed15454b371431cf8ea3502ab93bb3ff96db7ad68e095980dc45658712dcd6d00ffa7686a10a08d7f85689dcfaf17cf95a0c89b5de7aa70f5d4cf98223c98e2352a7ee335401b94dba0d13daa08fb336369e9102b9cb56aaa4834a8052e68626571d4d8bbccc9c817a600efb138901e1d4f03ca31fbac63a2d7cf1e81e92f5a246773af92fa31da753beeeded6f6ec3aa585b6a6aa76a1f15ed454d38bb931babf5a62b25a58b1682a1125ce4e89ee18265130910df3817a5865b7c8251cfeeaf58d4cf21e0876909d669454dd3732f00f9581899ea9a3405e6a3f6c54a364555b7155756a08a85f15602449580ce4905aac55d5258e461f7eb494661aa98470a5f09fca055fcbba78bf53e24d9fc55aa61a617f5439bb06374dca40e68aeee79e1b403b8593d570e758379d862b4f32d13242e799bbafb01cb299c4e5511b9956954a783aabc3270ddea6b1b15bacfc5a9b2e73f1913cfea446e8fa417004096c99ee49810ac06ec124110d37b59dfdb3014348e5c50b4f5f04c18a77c9f3f51ea1f421622315d95848cb6c290798f0572c30b9c422a770379909c5af97507aa47b2611ffca02381deba0c0510f039818cf622568682f67b489762e349fe785caf532dc39f1622537db1e9e9a3e7237dbbd4102c73b36485e2607882d3db1472cc8b485801b7f4ed9cdd711819b3924a8904ae99681e25b241309169e33fe0762f4b8ff91659d286858486ea79b215a419b2b30c027844730bf99ae7e900bbdf87a52111ce0bb59e0e8ed1d63d4a5c7e330899fa00517109dd07df81a5bfd006451d7080deecf51151a883e95787ef231d4e8fa40da3b8c1c521247ee98db9a129fe766872361cba2f471a136f5709be4e6707d53db8b9db426ab24ea0d86adf82a88e452ed9c04a6e9e0bb7bf4c34e01a856d39b0932732551caef35b82aeb98465f84bb7d6f627d4a74aa5463cd8719357de0dc5674a6bb686cf3a6d8365bb5655a1ef204e9a9c8c38489b73581bc7506995197ff2b8fa128c43d3190e0b8ae15b671a6e5e28a074c04dd7e197856cce36e5ffb210cde222da062cab355f87e0b43a44148e90c6d49e2589f8d4c25589386c5f312e0f58d1f206d8aa68616e88e8e493936b722aec51476e5b0801a527903f0bbbf201ac3205442c1c82a013838a6f3a749652d70c11ad604ffec57adb926fc97530d4e06a980a3e71ae823e2d19eee590b94b34c6f3560e6b3f282b5731e3b9f422a98186c35572c25dc0eb62421f510284b73f5ecc33150394058e03a11219f029db9b73faec60d968e1ae34c20917e5f303f51cb027c4be2b58486c6b95116f87c14a96545b61a596c3a20077fffea9dc535cbcd75a3a944d5e95df8ae3fe3fe5449ad894dfb53ab2aa05e6a28fb75acd883d76d94ee44c98038e4decf7b944e551a231112b474cf941cd2f3f46e29fe592ac9c3edf272ce4b6ec7e030ac0c70af9e95e37716f78712161a8b6fbfb6563717d1acbebbacfcdd61d42a905684707f1549b54e41b397f8ade2", 0x1000}], 0x1, &(0x7f0000001240)=[@rights={{0x18, 0x1, 0x1, [r2, r0]}}, @rights={{0x14, 0x1, 0x1, [r3]}}], 0x30, 0x404c010}, 0x24000021) r4 = syz_open_dev$vcsn(&(0x7f00000012c0), 0x4, 0x10000) bind$unix(r4, &(0x7f0000001300)=@file={0x0, './file0\x00'}, 0x6e) dup3(r3, r4, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000001780)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001740)={&(0x7f00000013c0)=@delsa={0x378, 0x11, 0x200, 0x70bd29, 0x25dfdbfb, {@in=@private=0xa010100, 0x4d2, 0xa, 0x6c}, [@proto={0x5, 0x19, 0x844f2902b4f45e23}, @policy={0xac, 0x7, {{@in=@multicast1, @in6=@private2, 0x4e23, 0x0, 0x4e22, 0x101, 0xa, 0x20, 0x20, 0x2c}, {0x9, 0x0, 0x7, 0x101, 0xb4, 0x22e88000000000, 0x4, 0x1400}, {0x80000001, 0xffffffffffff4ac1, 0x5}, 0x6, 0x6e6bb0, 0x1, 0x0, 0x1}}, @coaddr={0x14, 0xe, @in=@broadcast}, @address_filter={0x28, 0x1a, {@in=@rand_addr=0x64010100, @in=@remote, 0xa, 0x0, 0x7f}}, @offload={0xc, 0x1c, {0x0, 0x3}}, @migrate={0xe8, 0x11, [{@in=@multicast1, @in6=@local, @in6=@dev={0xfe, 0x80, '\x00', 0x21}, @in=@private=0xa010102, 0x6c, 0x1, 0x0, 0x3501, 0xa, 0xa}, {@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@broadcast, @in6=@remote, 0x6c, 0x4, 0x0, 0x3505, 0xa, 0xa}, {@in=@private=0xa010102, @in6=@dev={0xfe, 0x80, '\x00', 0x40}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@mcast1, 0x32, 0x2, 0x0, 0x3506, 0xa, 0xa}]}, @policy={0xac, 0x7, {{@in=@multicast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e21, 0x1f, 0x4e24, 0x0, 0xa, 0x20, 0xa0, 0x16, 0x0, 0xee00}, {0x6, 0x5, 0x9, 0x1, 0x100, 0x4, 0x3, 0x1}, {0x5, 0xff, 0x1, 0x4}, 0x5, 0x0, 0x1, 0x0, 0x1}}, @algo_auth={0xbd, 0x1, {{'sha3-512-ce\x00'}, 0x3a8, "3f24f961b4d49e083aa22934aa052fe7d568898fca6da66bd6848f6323ff7257467705d6d4a361583109b3fad3963a60a59e2b9d6ee645dfcfd2ff343663e6b653db1949f49c990f8c55862f9f15d617aba84419f4d776dd4b31312aeeac5d45637b854343e18af5c95952c3eadc99939e43cff454"}}]}, 0x378}, 0x1, 0x0, 0x0, 0x4000}, 0x4054) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f00000017c0)={0x4, 0xe015, 0x1, 'queue0\x00', 0x20}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r4, 0x8983, &(0x7f0000001880)) getsockname$unix(r1, &(0x7f00000018c0), &(0x7f0000001940)=0x6e) sendmsg$unix(r2, &(0x7f0000002100)={&(0x7f0000001980)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000002000)=[{&(0x7f0000001a00)="42be1ca311e113dcba8aee33dcb036bcf4023d25b633a9b3db62dc1e82bb8e54cfab665f36b3e5463e429bd66d3a775c5e5b54d8feaa00231e5fe873c582fa5e48e18fd19d501ddb6c4f8f18027b169c75cc7253885b9ddd3953ac99d78307b21cca9fed2de8e2455f127f4d4b8791a9c57e754956754c919b8f04299b9dc66c526a5e4ac411030ff8dff00b81e4ab7bd1f9402e52366ab7ad0c5a2356fc5de6d4d0a31b0cea28a8236d18ccfc9cbaefa4", 0xb1}, {&(0x7f0000001ac0)="066fc6c431b8995042138248da3200c2582862762f725e6a230bfdf50614b90353db01b6b909f2bef9b5175431fd5759c855b338ac7daeccb5f70c82b6535faf7b9481c979293186773d45e5a3bb27387b8339", 0x53}, {&(0x7f0000001b40)="1153a7871e3e595de1c398c2cbaaff3da1431fc279280a0c8a5435a4c60d5c50dffd8e550cfdcf639737def679c66317", 0x30}, {&(0x7f0000001b80)="832c1c961ed91a001d5391063336877952cbd34881e6108fd15f4a7fb74dc6a9d7114825c010883ee1daacd7f2784078c0c1265cdb9352653b6a5c1c3cdbb11c75aaa954d1f9803a9d086d07dbb4fe8a4f7164758d0d887f6e1733f7ce487a9b4b5152e7a87ed0927635dc0ef48460fa2aa0bf3e05d95716e0806309c80b43696a8200ce73b785883dd2ac7b8493b39a36b01c58668886f1f73d398eda1ba28317e374d35246eb2d42875ffb1d8478023d96a24afa56a91db2314dcb4ac07dc10a", 0xc1}, {&(0x7f0000001c80)="da", 0x1}, {&(0x7f0000001cc0)="222fc661c3ce55c1005ff325d41a505710bd97df738946afe241257728dc88c823858863f437fdee320824ee82d1deae719bef38c1662ae31d8516b9a13218d65eb9ca2fdbf49e78b85b84c0c91f521d9e9c28f632946f7d52040d916425f8f1a3ae19d56eeb2976e094064a62e6c7bbe794b50eb310fbfb061591d2c23bc9064a82a99eb81249eb94d20904a8aaf72a3ac126ccf04e798185adba46045eabd89d49848287e74af5b2e7c61e59fb062b30546f30ba8e5be301dcbc89ddf30640f926e076881657cafb14487f43bc0efad4ce6e3c7fae2e5061a20286b7b14c98f40735187fe69c862e92b46e1481982198f935", 0xf3}, {&(0x7f0000001dc0)="da755f236b72ee166294465b55bae317bd197cf9d48f872ddaadbae6617efb1310694348392626967378ba86ec0a3edeac52add7483a312b2f64cad93f9256b231", 0x41}, {&(0x7f0000001e40)="392146dc9a3461a9476ce68d1c21f0a03c691951aead572733f361626cdcbe9dff3fe8029bd65799165907863bf79c905d6a7227bdbabc4dad5676b10becef099f12d5b61b6b81f4f005edb19f510703e4f469fa1ac07f11e5c15c0ad3cc18b06927ddc3ab147eccc85a0378c7cc4c58f53b2c14ed7c38e8c93ccf4d902207fa0c872fe13ae8", 0x86}, {&(0x7f0000001f00)="61a9fa061ca52839981c2f5842ab55431c513933cd75a4681978c4f6ab0342d64af07e397ec1c5178f9440", 0x2b}, {&(0x7f0000001f40)="27fe0360f981e8d880795cece4140f5775072af0b63b05151e61704c452d4314a9641ec62781289c7dc747460cb517806661e612aead461a60a1a0aead876bb5f315c725e061c33622ab9b801c5971ec29d55d16cfb46e49a7d13477eff94d66af75922c634f26519aa2163d5744d0dc1d88f6c1b7236c3bb1c3d35a3859ab93ef798ae24e361d38c2088546fbf0e14045b0a18e749f3df413f721e4b3648c06702db16c1894bcd61ebc862782d078", 0xaf}], 0xa, &(0x7f00000020c0)}, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, &(0x7f0000002140)=@v2={0x2, @aes256, 0x4, '\x00', @auto="5a602406912a52bd3828f9c371b70d44"}) r5 = syz_open_dev$vcsa(&(0x7f0000002180), 0x1, 0x4000) sendmsg$AUDIT_MAKE_EQUIV(r5, &(0x7f0000002280)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002240)={&(0x7f0000002200)={0x28, 0x3f7, 0x400, 0x70bd2a, 0x25dfdbfe, {0x7, 0x7, './file1', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4) sendmsg$nl_generic(r5, &(0x7f0000002700)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000026c0)={&(0x7f0000002300)={0x3c0, 0x3e, 0x9, 0x70bd25, 0x25dfdbff, {0x1c}, [@generic, @generic="22952b9ef1441492b41abf4bda843fa8bb6a58a9ea7dcc20252929441705ffb73d9c8309d22067b575d8e96acdb0133280fab7688ea1e3f580fc39b1755fbaba80d80754c027a5c42d353dfe7ee7c6364edc133f883a845c1288d6d7d52f289fac3da22422d8412927dc", @generic="0638e4c700ca81296a92ab2ec45d811edfc3ded8a934e933e5b27a5620192689621e166dc1d98f11f5fd0f162b64f5eda6b5b4ab15510502673e7809a686d46f856dfd3584123f60364c1721b73830dcbc51b6ce7079d27bcdf62edd26ceb592db15218e284ebdbe683f661a6ac46dbc95307cac11712667eb6720a6fe75cffa0009cdbc399360cdbfc1d400ac7b9982b6f5a471ee6c8e2fab3f11d0477ca331289566724c85e1daf65a32f3256604781e98e90cd931802b131949e76d7035fa2e86661923af32b7193ac856158696f239650647482098c951d705a11b7c560ae74c", @nested={0x25d, 0x6e, 0x0, 0x1, [@generic="f8cb4d76abe009778faf8b1ffe29c62e1ca60c4628a2ff59488e14f2edfb37918e8d9a285d52e218b847a255b4", @typed={0xdd, 0x0, 0x0, 0x0, @binary="c6717804cd8b16698e441f2df124cdcc1ccc9c52e6c66620fff56ccb4d888e8fdaea3cedb7b5ba3614c0307285357b07a6027b185d376de7a47406987396ec8503724c94c551b457d00d6d9af3b3ca9a7660163eaaa35f5b8470a83f0c4c2f8be6c9b7c2e5be2c6e33dc83d2fe608beb3ce01c9bbbb251bb294ef6d9177d637bdeb0a3a070b3768b5c0c3404d17b17d82cda3289b9899f888d09f90e4f72a750fe46f371c53c85157509fbb8f031c60357afaf6782dc6eab5012dcf6e2ff5aa8c29660389694fb516e79bb7be01a1ec1256754ad87b1387409"}, @generic="cfb148276dde331b5e49e2acacd27ab04389cbd6650542a2bf1b2215ba70ba9b3d2351ed6581b92cba9fe196cff8d02f3407fbae7683b5514cb76b575eb62ba92adfa5a3742816ee06cd3c9790ed25c9b8b7b74371cfbeee9efe148b", @generic="c827356b60fd363cfa4bbf4da9f0cb594966db238c731d276fcbc592e6fdace9b1dab0a1c40c2c5158140699c1ad42748aa8948c508c326a2b2aa3b7eec23235ada30df4194d777803088a9ac8c955e5739158057f58324bc99719845af2c23abb7df3979fa0464fba1b349e7b20753ad9c8f7fcbbc26bc64652d1ae9d5c85b0f29a03042b48ea39d2131c3e7f6b258d3f6b780a130469be2961c3bafe9d55d77551b54bce5826a54a2281e31184b5070ea5b71fb85d670dba81776d91df64ebb5789a9e526d573ea7a9076342ad84c291a1de3fce446f6805104b7cd06cd827417dc96aa8db6f4f03c8f89775cfee65"]}]}, 0x3c0}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008e80)=[{{&(0x7f0000002740)=@alg, 0x80, &(0x7f00000027c0)}, 0xfff}, {{0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000002800)=""/133, 0x85}], 0x1, &(0x7f0000002900)=""/50, 0x32}, 0x5}, {{&(0x7f0000002940)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000002e00)=[{&(0x7f00000029c0)=""/215, 0xd7}, {&(0x7f0000002ac0)=""/181, 0xb5}, {&(0x7f0000002b80)=""/77, 0x4d}, {&(0x7f0000002c00)=""/210, 0xd2}, {&(0x7f0000002d00)=""/87, 0x57}, {&(0x7f0000002d80)=""/101, 0x65}], 0x6, &(0x7f0000002e80)=""/4, 0x4}, 0x5}, {{0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000002ec0)=""/234, 0xea}, {&(0x7f0000002fc0)=""/4096, 0x1000}, {&(0x7f0000003fc0)=""/60, 0x3c}, {&(0x7f0000004000)=""/4096, 0x1000}], 0x4, &(0x7f0000005040)=""/228, 0xe4}, 0x1000}, {{&(0x7f0000005140)=@generic, 0x80, &(0x7f0000007440)=[{&(0x7f00000051c0)=""/163, 0xa3}, {&(0x7f0000005280)=""/4096, 0x1000}, {&(0x7f0000006280)=""/165, 0xa5}, {&(0x7f0000006340)=""/4096, 0x1000}, {&(0x7f0000007340)=""/214, 0xd6}], 0x5}, 0x1}, {{&(0x7f00000074c0)=@nfc_llcp, 0x80, &(0x7f0000008980)=[{&(0x7f0000007540)=""/191, 0xbf}, {&(0x7f0000007600)=""/152, 0x98}, {&(0x7f00000076c0)=""/46, 0x2e}, {&(0x7f0000007700)=""/155, 0x9b}, {&(0x7f00000077c0)=""/155, 0x9b}, {&(0x7f0000007880)=""/4096, 0x1000}, {&(0x7f0000008880)=""/250, 0xfa}], 0x7, &(0x7f0000008a00)=""/97, 0x61}, 0x41}, {{&(0x7f0000008a80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000008d40)=[{&(0x7f0000008b00)=""/133, 0x85}, {&(0x7f0000008bc0)=""/190, 0xbe}, {&(0x7f0000008c80)=""/109, 0x6d}, {&(0x7f0000008d00)}], 0x4, &(0x7f0000008d80)=""/226, 0xe2}, 0x80000000}], 0x7, 0x1, &(0x7f0000009040)={0x77359400}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r6, 0x400c6615, &(0x7f0000009080)={0x0, @aes128, 0x0, @desc4}) 09:24:57 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0xc00e0000, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}}, 0x0) [ 2006.759706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2006.782890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:25:15 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="1037002015002302"], 0x50}}, 0x0) 09:25:15 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}}, 0x0) 09:25:15 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0xf584, 0x2, 0x2, 0x3d1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) syz_io_uring_setup(0x155b, &(0x7f00000005c0)={0x0, 0x27bd, 0x2, 0x1, 0x3b5}, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x208a, &(0x7f00000004c0)={0x0, 0xb5a, 0x10, 0x0, 0x49}, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) syz_open_dev$vcsa(&(0x7f0000000040), 0x3e0, 0xa00) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, 0xffffffffffffffff, 0x0) 09:25:15 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195be945b99b06fab0609"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x185680, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:25:15 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="a70036b3b181d6b0b72d59c981481ae4ea3d54e9cdd47b99a19770b3d272311cd2d2cb57c63853a2e4dd8bf95a3c1ead3b71a4fd1f79f00ac4d95fa7fab1fb8fc4f49cba93a5683e417d14239699f4d1a1d9287453c34ccd19b43287f59d60abbe036f764ab12304a1061e0f8198649a261e9ed7a5ccce586475403a8a797a73464aea1a36e2bca6830bb088", @ANYRES16, @ANYBLOB="01000000001c63abf52542bfeb393b9f24ebcb000000", @ANYRES32=r2], 0x20}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', 0x80000, 0x21) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_SET(r3, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01000000000000000000140000000c00018008000100", @ANYRES32=r4, @ANYBLOB="199958e60ab294a4a255"], 0x20}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001a00)={'syztnl1\x00', &(0x7f0000001980)={'sit0\x00', 0x0, 0x4, 0x1f, 0x5, 0x8, 0x25, @remote, @mcast1, 0x0, 0x7, 0x100, 0x10000}}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x3c, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_FEATURES_WANTED={0x1c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\\*\x00'}]}]}]}]}, 0x3c}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x58, 0x0, 0x400, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4080}, 0x1) r9 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) pwrite64(r9, &(0x7f0000000140)="afc9", 0x2, 0xffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x3ba4141e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x8, 0x0, 0x8000) ftruncate(r9, 0x91) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="300000001000010000000b000000001100008048000000000000bbe45925adde6a53373f7800"], 0x30}}, 0x0) 09:25:15 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB], 0x50}}, 0x0) 09:25:15 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB], 0x50}}, 0x0) 09:25:15 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x185680, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r4, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r5, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) [ 2024.251154] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2024.270466] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:25:15 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="00f0ff7f15002302"], 0x50}}, 0x0) 09:25:15 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x185680, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r4, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r5, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:25:15 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, 0x0, &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) syz_io_uring_setup(0x155b, &(0x7f00000005c0)={0x0, 0x27bd, 0x2, 0x1, 0x3b5}, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x208a, &(0x7f00000004c0)={0x0, 0xb5a, 0x10, 0x0, 0x49}, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) syz_open_dev$vcsa(&(0x7f0000000040), 0x3e0, 0xa00) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, 0xffffffffffffffff, 0x0) 09:25:15 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0xfffff000, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}}, 0x0) 09:25:15 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x185680, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r4, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r5, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) [ 2024.396378] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2024.413609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2024.445114] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2024.463558] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:25:16 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="effdffff15002302"], 0x50}}, 0x0) 09:25:16 executing program 4: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0xffffffff, 0x4, &(0x7f0000000280)=[{&(0x7f00000001c0)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000e0f4655fe0f4655f0100ffff53efff00000000000000655f000000000000000001000000000000000b0000000001", 0x14, 0x400008}, {0x0, 0x0, 0xffffffffdffffff9}, {&(0x7f0000000340)="020000000300000004a0b7e993028fed635764dcac2744c8cbb482f81f2989ab6e88fd4cb24262c88ae1fad1d8e37dade39a8922ff003fb4c47a772cc8833c7eb9f693e70eead19c5e8c20fca3365a4a3de69cbe7e9d7150e44cd2d2f5710188caead0c8599a2e7dd840b3fbc7761e60c18950efa6ff1ce37a5c6639b26ee57b7de46986ba5ce807dc49960914f2018b04c5636c0caa346eba52df13583694604567b97ea756871237cd5d43175f3e76c0d0fe824123ff2d1466f600e49e5a93eb49bb021d6b4e0e4e28875631bf678f6600000000000000000000e3aaf5e12e78f44c2900000000", 0xe8}, {&(0x7f00000000c0)="ed410055e561800d620dad94b30310347a57b470ac05764f6d52e0f4655fe0f4655f", 0x22, 0x1000000000002101}], 0x0, &(0x7f0000000100)) 09:25:16 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0xffffff7f, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}}, 0x0) 09:25:16 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, 0x0, &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) syz_io_uring_setup(0x155b, &(0x7f00000005c0)={0x0, 0x27bd, 0x2, 0x1, 0x3b5}, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x208a, &(0x7f00000004c0)={0x0, 0xb5a, 0x10, 0x0, 0x49}, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) syz_open_dev$vcsa(&(0x7f0000000040), 0x3e0, 0xa00) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, 0xffffffffffffffff, 0x0) 09:25:16 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x185680, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r4, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r5, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:25:16 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)={0x0, 0x3}) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x3096, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x10000, &(0x7f0000000280)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r1], 0x8, 0x0, 0x1, {0x0, r5}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r2, 0x8000000) syz_io_uring_submit(r6, r4, &(0x7f0000000340)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40012103, 0x1}, 0x80000001) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001e00852e00892a00efff51ffff000000"], 0x14}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10010, 0xffffffffffffffff, 0x0) sendmsg(r7, &(0x7f0000000380)={&(0x7f0000000200)=@sco, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="b8e76b", 0x3}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000001500)="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", 0x1000}], 0x3, &(0x7f0000003680)=ANY=[@ANYBLOB="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"], 0x1120}, 0x4004000) io_uring_enter(r2, 0x58a7, 0xf6f4, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) r8 = creat(&(0x7f0000000040)='./file0\x00', 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r8, 0x1, 0x0, 0x0) [ 2024.643015] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2024.657676] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2025.086324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:25:31 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="500000000f002302"], 0x50}}, 0x0) 09:25:31 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, 0x0, &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) syz_io_uring_setup(0x155b, &(0x7f00000005c0)={0x0, 0x27bd, 0x2, 0x1, 0x3b5}, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x208a, &(0x7f00000004c0)={0x0, 0xb5a, 0x10, 0x0, 0x49}, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) syz_open_dev$vcsa(&(0x7f0000000040), 0x3e0, 0xa00) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, 0xffffffffffffffff, 0x0) 09:25:31 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0xffffff9e, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}}, 0x0) 09:25:31 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195be945b99b06fab0609"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x185680, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:25:31 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB], 0x50}}, 0x0) 09:25:32 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, 0x0, 0x185680, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r4, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r5, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:25:32 executing program 4: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = syz_open_dev$mouse(&(0x7f0000001ac0), 0x10001, 0x204003) perf_event_open(&(0x7f0000001a40)={0x0, 0x80, 0x40, 0x2, 0x1d, 0x16, 0x0, 0x0, 0x201, 0x10, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x20, 0x5, @perf_bp={&(0x7f0000001a00), 0x1}, 0x200, 0x0, 0x1f, 0x3, 0x94c, 0x7f, 0x3f, 0x0, 0x4, 0x0, 0x5}, 0x0, 0x7, r3, 0xa) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r4, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a", 0x2}], 0x1}, 0x0, 0x4008000}, 0x0) syz_io_uring_setup(0x41dc, &(0x7f0000000080)={0x0, 0x6490, 0x10, 0x3, 0x182}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff6000/0x9000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000280)) syz_io_uring_setup(0x142a, &(0x7f0000000340)={0x0, 0xe1ba, 0x1, 0x0, 0x1ef, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000008c0)=@IORING_OP_RECVMSG={0xa, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000880)={&(0x7f0000000500)=@nfc, 0x80, &(0x7f0000000740)=[{&(0x7f0000000580)=""/109, 0x6d}, {&(0x7f0000000440)}, {&(0x7f0000000600)=""/84, 0x54}, {&(0x7f0000000680)=""/179, 0xb3}, {&(0x7f0000000940)=""/4096, 0x1000}], 0x5, &(0x7f00000007c0)=""/102, 0x66}, 0x0, 0x1, 0x1, {0x3}}, 0x2) perf_event_open(&(0x7f0000001b00)={0x3, 0x80, 0x1, 0xf0, 0x5, 0x1f, 0x0, 0xc1, 0x80000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x200, 0xf15}, 0x2, 0x3, 0xfb8, 0x6, 0x0, 0x3, 0x4d7, 0x0, 0x80000001, 0x0, 0x6}, 0x0, 0x4, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4766, &(0x7f0000001940)={0x0, 0x719b, 0x10, 0x3, 0x53}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f00000019c0)) syz_io_uring_submit(r7, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x3) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 09:25:32 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50000000150023020000000000000000"], 0x50}}, 0x0) [ 2040.419392] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=15 sclass=netlink_xfrm_socket pid=11170 comm=syz-executor.7 [ 2040.425910] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 09:25:32 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x2, 0x3d1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) syz_io_uring_setup(0x155b, &(0x7f00000005c0)={0x0, 0x27bd, 0x2, 0x1, 0x3b5}, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x208a, &(0x7f00000004c0)={0x0, 0xb5a, 0x10, 0x0, 0x49}, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) syz_open_dev$vcsa(&(0x7f0000000040), 0x3e0, 0xa00) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, 0xffffffffffffffff, 0x0) 09:25:32 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0xfffffff0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}}, 0x0) 09:25:32 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f00000001c0), &(0x7f0000000080)=0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000000)) syz_io_uring_setup(0x55e2, &(0x7f0000001f80)={0x0, 0x0, 0x2}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000080)=ANY=[@ANYBLOB="e5ffffff00000000058795b6", @ANYRES32=r3, @ANYBLOB="f7ffffff000000002e2f66696c653000"]) r4 = syz_io_uring_setup(0x54c0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff2000/0x4000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x10000, &(0x7f0000000280)=[0xffffffffffffffff, r3, r3, 0xffffffffffffffff, 0xffffffffffffffff, r7, r3, r3], 0x8, 0x0, 0x1, {0x0, r8}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000) syz_io_uring_submit(r9, r6, &(0x7f0000000340)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40012103, 0x1}, 0x80000001) syz_io_uring_submit(r9, r1, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x5, 0x0, @fd=r0, 0x78f67773, 0x0, 0x2, 0x2}, 0x7) 09:25:32 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x3d1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) syz_io_uring_setup(0x155b, &(0x7f00000005c0)={0x0, 0x27bd, 0x2, 0x1, 0x3b5}, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x208a, &(0x7f00000004c0)={0x0, 0xb5a, 0x10, 0x0, 0x49}, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) syz_open_dev$vcsa(&(0x7f0000000040), 0x3e0, 0xa00) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, 0xffffffffffffffff, 0x0) 09:25:32 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000010002302"], 0x50}}, 0x0) 09:25:32 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB], 0x50}}, 0x0) 09:25:32 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3d1}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) syz_io_uring_setup(0x155b, &(0x7f00000005c0)={0x0, 0x27bd, 0x2, 0x1, 0x3b5}, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x208a, &(0x7f00000004c0)={0x0, 0xb5a, 0x10, 0x0, 0x49}, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) syz_open_dev$vcsa(&(0x7f0000000040), 0x3e0, 0xa00) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, 0xffffffffffffffff, 0x0) [ 2040.979039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2041.117709] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:25:50 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB], 0x50}}, 0x0) 09:25:50 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195be945b99b06fab0609"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x185680, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:25:50 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB='P\x00\x00\x00'], 0x50}}, 0x0) 09:25:50 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) syz_io_uring_setup(0x155b, &(0x7f00000005c0)={0x0, 0x27bd, 0x2, 0x1, 0x3b5}, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x208a, &(0x7f00000004c0)={0x0, 0xb5a, 0x10, 0x0, 0x49}, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) syz_open_dev$vcsa(&(0x7f0000000040), 0x3e0, 0xa00) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, 0xffffffffffffffff, 0x0) 09:25:50 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000011002302"], 0x50}}, 0x0) 09:25:50 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0xffffffff, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}}, 0x0) 09:25:50 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, 0x0, 0x185680, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r4, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r5, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:25:50 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195be945b99b06fab0609"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x185680, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) [ 2058.594697] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2058.611975] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2058.617755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2058.624811] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11217 comm=syz-executor.0 09:25:50 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="0f00000015002302"], 0x50}}, 0x0) 09:25:50 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) 09:25:50 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, 0x0, &(0x7f0000000180)) syz_io_uring_setup(0x155b, &(0x7f00000005c0)={0x0, 0x27bd, 0x2, 0x1, 0x3b5}, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x208a, &(0x7f00000004c0)={0x0, 0xb5a, 0x10, 0x0, 0x49}, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) syz_open_dev$vcsa(&(0x7f0000000040), 0x3e0, 0xa00) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, 0xffffffffffffffff, 0x0) 09:25:50 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195be945b99b06fab0609"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x185680, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) [ 2058.729669] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.7'. 09:25:50 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="c000000015002302"], 0x50}}, 0x0) 09:25:50 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000013002302"], 0x50}}, 0x0) 09:25:50 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, 0x0, &(0x7f0000000180)) syz_io_uring_setup(0x155b, &(0x7f00000005c0)={0x0, 0x27bd, 0x2, 0x1, 0x3b5}, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x208a, &(0x7f00000004c0)={0x0, 0xb5a, 0x10, 0x0, 0x49}, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) syz_open_dev$vcsa(&(0x7f0000000040), 0x3e0, 0xa00) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, 0xffffffffffffffff, 0x0) [ 2058.822777] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:25:50 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="c00e000015002302"], 0x50}}, 0x0) [ 2059.429430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2059.448414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:26:06 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, 0x0, &(0x7f0000000180)) syz_io_uring_setup(0x155b, &(0x7f00000005c0)={0x0, 0x27bd, 0x2, 0x1, 0x3b5}, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x208a, &(0x7f00000004c0)={0x0, 0xb5a, 0x10, 0x0, 0x49}, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) syz_open_dev$vcsa(&(0x7f0000000040), 0x3e0, 0xa00) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, 0xffffffffffffffff, 0x0) 09:26:06 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, 0x0, 0x185680, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r4, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r5, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:26:06 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195be945b99b06fab0609"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x185680, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:26:06 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="e03f030015002302"], 0x50}}, 0x0) 09:26:06 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB], 0x50}}, 0x0) 09:26:06 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB='P\x00\x00\x00'], 0x50}}, 0x0) 09:26:06 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000014002302"], 0x50}}, 0x0) 09:26:06 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195be945b99b06fab0609"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x185680, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) [ 2075.300961] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2075.345425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:26:06 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5002000015002302"], 0x50}}, 0x0) [ 2075.363091] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11256 comm=syz-executor.0 09:26:06 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="1037002015002302"], 0x50}}, 0x0) 09:26:07 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x155b, &(0x7f00000005c0)={0x0, 0x27bd, 0x2, 0x1, 0x3b5}, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x208a, &(0x7f00000004c0)={0x0, 0xb5a, 0x10, 0x0, 0x49}, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) syz_open_dev$vcsa(&(0x7f0000000040), 0x3e0, 0xa00) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, 0xffffffffffffffff, 0x0) 09:26:07 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) [ 2075.468706] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. 09:26:07 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="00f0ff7f15002302"], 0x50}}, 0x0) 09:26:07 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5008000015002302"], 0x50}}, 0x0) 09:26:07 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x155b, &(0x7f00000005c0)={0x0, 0x27bd, 0x2, 0x1, 0x3b5}, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x208a, &(0x7f00000004c0)={0x0, 0xb5a, 0x10, 0x0, 0x49}, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) syz_open_dev$vcsa(&(0x7f0000000040), 0x3e0, 0xa00) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, 0xffffffffffffffff, 0x0) [ 2076.108881] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2076.111177] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:26:22 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195be945b99b06fab0609"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x185680, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:26:22 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r4, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r5, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:26:22 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) 09:26:22 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x155b, &(0x7f00000005c0)={0x0, 0x27bd, 0x2, 0x1, 0x3b5}, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x208a, &(0x7f00000004c0)={0x0, 0xb5a, 0x10, 0x0, 0x49}, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) syz_open_dev$vcsa(&(0x7f0000000040), 0x3e0, 0xa00) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, 0xffffffffffffffff, 0x0) 09:26:22 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="effdffff15002302"], 0x50}}, 0x0) 09:26:22 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="500f000015002302"], 0x50}}, 0x0) 09:26:22 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB='P\x00\x00\x00'], 0x50}}, 0x0) 09:26:22 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}}, 0x0) 09:26:22 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50f0000015002302"], 0x50}}, 0x0) [ 2091.366537] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2091.370608] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2091.388859] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11293 comm=syz-executor.0 09:26:23 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="500000000f002302"], 0x50}}, 0x0) 09:26:23 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) 09:26:23 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) syz_io_uring_setup(0x0, &(0x7f00000005c0)={0x0, 0x27bd, 0x2, 0x1, 0x3b5}, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x208a, &(0x7f00000004c0)={0x0, 0xb5a, 0x10, 0x0, 0x49}, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) syz_open_dev$vcsa(&(0x7f0000000040), 0x3e0, 0xa00) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, 0xffffffffffffffff, 0x0) 09:26:23 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50d1020015002302"], 0x50}}, 0x0) 09:26:23 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB], 0x50}}, 0x0) [ 2091.497371] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2091.515236] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=15 sclass=netlink_xfrm_socket pid=11301 comm=syz-executor.5 09:26:23 executing program 4: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) 09:26:23 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000010002302"], 0x50}}, 0x0) [ 2092.150456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2092.178535] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2110.029944] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. 09:26:41 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50c00e0015002302"], 0x50}}, 0x0) 09:26:41 executing program 4: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) 09:26:41 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) syz_io_uring_setup(0x0, &(0x7f00000005c0)={0x0, 0x27bd, 0x2, 0x1, 0x3b5}, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x208a, &(0x7f00000004c0)={0x0, 0xb5a, 0x10, 0x0, 0x49}, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) syz_open_dev$vcsa(&(0x7f0000000040), 0x3e0, 0xa00) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, 0xffffffffffffffff, 0x0) 09:26:41 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB], 0x50}}, 0x0) 09:26:41 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r4, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r5, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:26:41 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000011002302"], 0x50}}, 0x0) 09:26:41 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="500000001500"], 0x50}}, 0x0) 09:26:41 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195be945b99b06fab0609"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x185680, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:26:41 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) 09:26:41 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) syz_io_uring_setup(0x0, &(0x7f00000005c0)={0x0, 0x27bd, 0x2, 0x1, 0x3b5}, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x208a, &(0x7f00000004c0)={0x0, 0xb5a, 0x10, 0x0, 0x49}, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) syz_open_dev$vcsa(&(0x7f0000000040), 0x3e0, 0xa00) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, 0xffffffffffffffff, 0x0) [ 2110.078795] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 09:26:41 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50000f0015002302"], 0x50}}, 0x0) [ 2110.089368] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.5'. 09:26:41 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000013002302"], 0x50}}, 0x0) 09:26:41 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) syz_io_uring_setup(0x0, 0x0, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, &(0x7f0000000640), &(0x7f0000000680)) syz_io_uring_setup(0x208a, &(0x7f00000004c0)={0x0, 0xb5a, 0x10, 0x0, 0x49}, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) syz_open_dev$vcsa(&(0x7f0000000040), 0x3e0, 0xa00) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, 0xffffffffffffffff, 0x0) 09:26:41 executing program 4: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) 09:26:41 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000014002302"], 0x50}}, 0x0) [ 2110.566698] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2110.899938] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:26:58 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5002000015002302"], 0x50}}, 0x0) 09:26:58 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) syz_io_uring_setup(0x0, 0x0, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, 0x0, &(0x7f0000000680)) syz_io_uring_setup(0x208a, &(0x7f00000004c0)={0x0, 0xb5a, 0x10, 0x0, 0x49}, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) syz_open_dev$vcsa(&(0x7f0000000040), 0x3e0, 0xa00) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, 0xffffffffffffffff, 0x0) 09:26:58 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="500ec00015002302"], 0x50}}, 0x0) 09:26:58 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r4, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r5, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:26:58 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) 09:26:58 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB], 0x50}}, 0x0) 09:26:58 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="500000001500"], 0x50}}, 0x0) 09:26:58 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195be945b99b06fab0609"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x185680, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:26:58 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) [ 2126.981816] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 09:26:58 executing program 4: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) 09:26:58 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5008000015002302"], 0x50}}, 0x0) 09:26:58 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5002d10015002302"], 0x50}}, 0x0) 09:26:58 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) syz_io_uring_setup(0x0, 0x0, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x208a, &(0x7f00000004c0)={0x0, 0xb5a, 0x10, 0x0, 0x49}, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) syz_open_dev$vcsa(&(0x7f0000000040), 0x3e0, 0xa00) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, 0xffffffffffffffff, 0x0) 09:26:58 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 09:26:58 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="500f000015002302"], 0x50}}, 0x0) 09:26:58 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) syz_io_uring_setup(0x0, 0x0, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x208a, &(0x7f00000004c0)={0x0, 0xb5a, 0x10, 0x0, 0x49}, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) syz_open_dev$vcsa(&(0x7f0000000040), 0x3e0, 0xa00) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, 0xffffffffffffffff, 0x0) 09:26:58 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000f00015002302"], 0x50}}, 0x0) [ 2127.714943] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2127.798508] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:27:14 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 09:27:14 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB='P\x00\x00\x00'], 0x50}}, 0x0) 09:27:14 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195be945b99b06fab0609"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x185680, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) [ 2142.446099] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.7'. 09:27:14 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) syz_io_uring_setup(0x0, 0x0, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x208a, &(0x7f00000004c0)={0x0, 0xb5a, 0x10, 0x0, 0x49}, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) syz_open_dev$vcsa(&(0x7f0000000040), 0x3e0, 0xa00) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, 0xffffffffffffffff, 0x0) 09:27:14 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50f0000015002302"], 0x50}}, 0x0) 09:27:14 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000028002302"], 0x50}}, 0x0) 09:27:14 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r3, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r4, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:27:14 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="500000001500"], 0x50}}, 0x0) [ 2142.478115] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2142.490782] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11403 comm=syz-executor.1 09:27:14 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5069030015002302"], 0x50}}, 0x0) 09:27:14 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000020015002302"], 0x50}}, 0x0) 09:27:14 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 09:27:14 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) syz_io_uring_setup(0x0, 0x0, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, 0x0, &(0x7f0000000680)) syz_io_uring_setup(0x0, &(0x7f00000004c0)={0x0, 0xb5a, 0x10, 0x0, 0x49}, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) syz_open_dev$vcsa(&(0x7f0000000040), 0x3e0, 0xa00) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, 0xffffffffffffffff, 0x0) 09:27:14 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50c00e0015002302"], 0x50}}, 0x0) 09:27:14 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 09:27:14 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000080015002302"], 0x50}}, 0x0) 09:27:14 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) syz_io_uring_setup(0x0, 0x0, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, 0x0, &(0x7f0000000680)) syz_io_uring_setup(0x0, &(0x7f00000004c0)={0x0, 0xb5a, 0x10, 0x0, 0x49}, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) syz_open_dev$vcsa(&(0x7f0000000040), 0x3e0, 0xa00) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, 0xffffffffffffffff, 0x0) [ 2143.224475] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2143.312137] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:27:30 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50000f0015002302"], 0x50}}, 0x0) 09:27:30 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195be945b99b06fab0609"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x185680, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:27:30 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50000000150023"], 0x50}}, 0x0) 09:27:30 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) syz_io_uring_setup(0x0, 0x0, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, 0x0, &(0x7f0000000680)) syz_io_uring_setup(0x0, &(0x7f00000004c0)={0x0, 0xb5a, 0x10, 0x0, 0x49}, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) syz_open_dev$vcsa(&(0x7f0000000040), 0x3e0, 0xa00) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, 0xffffffffffffffff, 0x0) 09:27:30 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50000f0015002302"], 0x50}}, 0x0) 09:27:30 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 09:27:30 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r3, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r4, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:27:30 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB='P\x00\x00\x00'], 0x50}}, 0x0) [ 2158.557922] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 09:27:30 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) syz_io_uring_setup(0x0, 0x0, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, 0x0, &(0x7f0000000680)) syz_io_uring_setup(0x208a, 0x0, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, &(0x7f0000000540), &(0x7f0000000580)) syz_open_dev$vcsa(&(0x7f0000000040), 0x3e0, 0xa00) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, 0xffffffffffffffff, 0x0) 09:27:30 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) [ 2158.603086] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11440 comm=syz-executor.1 09:27:30 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000f00015002302"], 0x50}}, 0x0) 09:27:30 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5003690015002302"], 0x50}}, 0x0) 09:27:30 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50000000150023"], 0x50}}, 0x0) 09:27:30 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000d10215002302"], 0x50}}, 0x0) 09:27:30 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x50}}, 0x0) 09:27:30 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="500ec00015002302"], 0x50}}, 0x0) [ 2159.378092] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2159.405027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:27:46 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50000000150023"], 0x50}}, 0x0) 09:27:46 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195be945b99b06fab0609"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x185680, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:27:46 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r3, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r4, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:27:46 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000c00e15002302"], 0x50}}, 0x0) 09:27:46 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x50}}, 0x0) 09:27:46 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000f00015002302"], 0x50}}, 0x0) 09:27:46 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB='P\x00\x00\x00'], 0x50}}, 0x0) 09:27:46 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) syz_io_uring_setup(0x0, 0x0, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, 0x0, &(0x7f0000000680)) syz_io_uring_setup(0x208a, 0x0, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, 0x0, &(0x7f0000000580)) syz_open_dev$vcsa(&(0x7f0000000040), 0x3e0, 0xa00) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, 0xffffffffffffffff, 0x0) [ 2175.024579] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 09:27:46 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x50}}, 0x0) [ 2175.072680] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11477 comm=syz-executor.1 09:27:46 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000028002302"], 0x50}}, 0x0) 09:27:46 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000f15002302"], 0x50}}, 0x0) 09:27:46 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[], 0x50}}, 0x0) 09:27:46 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r4, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r5, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:27:46 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) syz_io_uring_setup(0x0, 0x0, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, 0x0, &(0x7f0000000680)) syz_io_uring_setup(0x208a, 0x0, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000040), 0x3e0, 0xa00) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, 0xffffffffffffffff, 0x0) [ 2175.173911] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2175.203592] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:27:46 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[], 0x50}}, 0x0) 09:27:46 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000020015002302"], 0x50}}, 0x0) [ 2175.663042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:27:47 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195be945b99b06fab0609"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x185680, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:27:47 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50000ec015002302"], 0x50}}, 0x0) [ 2175.764400] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2175.840558] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2176.039172] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2176.271928] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:28:04 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000080015002302"], 0x50}}, 0x0) 09:28:04 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r4, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r5, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:28:04 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[], 0x50}}, 0x0) 09:28:04 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) syz_io_uring_setup(0x0, 0x0, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, 0x0, &(0x7f0000000680)) syz_io_uring_setup(0x208a, 0x0, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x3e0, 0xa00) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, 0xffffffffffffffff, 0x0) 09:28:04 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="500002d115002302"], 0x50}}, 0x0) 09:28:04 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="500000001500"], 0x50}}, 0x0) 09:28:04 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195be945b99b06fab0609"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x185680, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:28:04 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r3, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r4, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) [ 2192.677363] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2192.683642] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:28:04 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) syz_io_uring_setup(0x0, 0x0, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, 0x0, &(0x7f0000000680)) syz_io_uring_setup(0x208a, 0x0, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x3e0, 0xa00) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, 0xffffffffffffffff, 0x0) 09:28:04 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB], 0x50}}, 0x0) 09:28:04 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50000f0015002302"], 0x50}}, 0x0) 09:28:04 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="500000f015002302"], 0x50}}, 0x0) 09:28:04 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) syz_io_uring_setup(0x0, 0x0, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, 0x0, &(0x7f0000000680)) syz_io_uring_setup(0x208a, 0x0, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0xa00) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, 0xffffffffffffffff, 0x0) [ 2193.498424] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2193.518009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2193.603866] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:28:21 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="500000000f002302"], 0x50}}, 0x0) 09:28:21 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000f00015002302"], 0x50}}, 0x0) 09:28:21 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195be945b99b06fab0609"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x185680, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:28:21 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r4, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r5, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:28:21 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) syz_io_uring_setup(0x0, 0x0, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, 0x0, &(0x7f0000000680)) syz_io_uring_setup(0x208a, 0x0, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0xa00) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, 0xffffffffffffffff, 0x0) 09:28:21 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="500000001500"], 0x50}}, 0x0) 09:28:21 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r3, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:28:21 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB], 0x50}}, 0x0) [ 2209.593156] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2209.599938] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=15 sclass=netlink_xfrm_socket pid=11542 comm=syz-executor.7 09:28:21 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) syz_io_uring_setup(0x0, 0x0, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, 0x0, &(0x7f0000000680)) syz_io_uring_setup(0x208a, 0x0, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x1f012, 0xffffffffffffffff, 0x0) [ 2209.631990] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. 09:28:21 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000690315002302"], 0x50}}, 0x0) 09:28:21 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000011002302"], 0x50}}, 0x0) 09:28:21 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB], 0x50}}, 0x0) 09:28:21 executing program 6: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) syz_io_uring_setup(0x0, 0x0, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, 0x0, &(0x7f0000000680)) syz_io_uring_setup(0x208a, 0x0, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 2209.709987] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.7'. 09:28:21 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) [ 2209.788072] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.7'. 09:28:21 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r4, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r5, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) [ 2209.838593] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2210.382818] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2210.411704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2210.499599] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2210.537871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:28:41 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000013002302"], 0x50}}, 0x0) 09:28:41 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195be945b99b06fab0609"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x185680, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:28:41 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) (fail_nth: 1) syz_io_uring_setup(0x0, 0x0, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, 0x0, &(0x7f0000000680)) syz_io_uring_setup(0x208a, 0x0, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 09:28:41 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="500000001500"], 0x50}}, 0x0) 09:28:41 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000c00e15002302"], 0x50}}, 0x0) 09:28:41 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB='P\x00\x00\x00'], 0x50}}, 0x0) 09:28:41 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r3, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:28:41 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r4, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r5, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) [ 2229.741769] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11576 comm=syz-executor.4 [ 2229.749680] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2229.752033] FAULT_INJECTION: forcing a failure. [ 2229.752033] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2229.754253] CPU: 0 PID: 11575 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 2229.755560] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2229.757107] Call Trace: [ 2229.757608] dump_stack+0x107/0x167 [ 2229.757630] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2229.759835] should_fail.cold+0x5/0xa [ 2229.760550] _copy_from_user+0x2e/0x1b0 [ 2229.761292] io_uring_setup+0x9b/0x2980 [ 2229.762032] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2229.762933] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2229.763848] ? wait_for_completion_io+0x270/0x270 [ 2229.764743] ? rcu_read_lock_any_held+0x75/0xa0 [ 2229.765590] ? vfs_write+0x354/0xb10 [ 2229.766276] ? fput_many+0x2f/0x1a0 [ 2229.766959] ? ksys_write+0x1a9/0x260 [ 2229.767665] ? __ia32_sys_read+0xb0/0xb0 [ 2229.768416] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2229.769373] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2229.770327] do_syscall_64+0x33/0x40 [ 2229.771016] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2229.771951] RIP: 0033:0x7fd0bb875b19 [ 2229.772632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2229.775937] RSP: 002b:00007fd0b8deb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2229.777317] RAX: ffffffffffffffda RBX: 00007fd0bb988f60 RCX: 00007fd0bb875b19 [ 2229.778616] RDX: 000000002080d000 RSI: 0000000020000080 RDI: 0000000000002726 [ 2229.779912] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2229.781203] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000180 [ 2229.782493] R13: 000000002080d000 R14: 0000000020000100 R15: 0000000020ffc000 09:28:41 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000014002302"], 0x50}}, 0x0) 09:28:41 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB='P\x00\x00\x00'], 0x50}}, 0x0) 09:28:41 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000f15002302"], 0x50}}, 0x0) [ 2229.892301] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11583 comm=syz-executor.4 09:28:41 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000215002302"], 0x50}}, 0x0) 09:28:41 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB='P\x00\x00\x00'], 0x50}}, 0x0) 09:28:41 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000f15002302"], 0x50}}, 0x0) 09:28:41 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000036915002302"], 0x50}}, 0x0) [ 2230.036192] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11591 comm=syz-executor.4 09:28:41 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000028002302"], 0x50}}, 0x0) [ 2230.130992] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2230.562364] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2230.581360] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2230.654424] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:28:58 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50000ec015002302"], 0x50}}, 0x0) 09:28:58 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r4, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r5, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:28:58 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) (fail_nth: 2) syz_io_uring_setup(0x0, 0x0, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, 0x0, &(0x7f0000000680)) syz_io_uring_setup(0x208a, 0x0, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 09:28:58 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="500000001200"], 0x50}}, 0x0) 09:28:58 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r3, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:28:58 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="500000000f002302"], 0x50}}, 0x0) 09:28:58 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195be945b99b06fab0609"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:28:58 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50000000150023"], 0x50}}, 0x0) [ 2247.270034] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2247.291860] FAULT_INJECTION: forcing a failure. [ 2247.291860] name failslab, interval 1, probability 0, space 0, times 0 [ 2247.295563] CPU: 0 PID: 11604 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 2247.297396] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2247.299559] Call Trace: [ 2247.300266] dump_stack+0x107/0x167 [ 2247.301250] should_fail.cold+0x5/0xa [ 2247.302261] ? io_uring_setup+0x258/0x2980 [ 2247.303366] should_failslab+0x5/0x20 [ 2247.304249] kmem_cache_alloc_trace+0x55/0x320 [ 2247.305402] io_uring_setup+0x258/0x2980 [ 2247.306346] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2247.307478] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2247.308638] ? wait_for_completion_io+0x270/0x270 [ 2247.309865] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2247.311112] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2247.312306] do_syscall_64+0x33/0x40 [ 2247.313187] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2247.314365] RIP: 0033:0x7fd0bb875b19 [ 2247.315242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2247.319454] RSP: 002b:00007fd0b8deb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2247.321225] RAX: ffffffffffffffda RBX: 00007fd0bb988f60 RCX: 00007fd0bb875b19 [ 2247.322874] RDX: 000000002080d000 RSI: 0000000020000080 RDI: 0000000000002726 [ 2247.324509] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2247.326210] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000180 [ 2247.327842] R13: 000000002080d000 R14: 0000000020000100 R15: 0000000020ffc000 [ 2247.341458] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2247.348015] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=15 sclass=netlink_xfrm_socket pid=11615 comm=syz-executor.7 09:28:58 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50000000150023"], 0x50}}, 0x0) 09:28:59 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="500000f015002302"], 0x50}}, 0x0) 09:28:59 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="500000001200"], 0x50}}, 0x0) 09:28:59 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000010002302"], 0x50}}, 0x0) 09:28:59 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) (fail_nth: 3) syz_io_uring_setup(0x0, 0x0, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, 0x0, &(0x7f0000000680)) syz_io_uring_setup(0x208a, 0x0, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 2247.500105] FAULT_INJECTION: forcing a failure. [ 2247.500105] name failslab, interval 1, probability 0, space 0, times 0 [ 2247.501507] CPU: 1 PID: 11627 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 2247.502318] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2247.503287] Call Trace: [ 2247.503600] dump_stack+0x107/0x167 [ 2247.504027] should_fail.cold+0x5/0xa [ 2247.504472] ? create_object.isra.0+0x3a/0xa30 [ 2247.505063] should_failslab+0x5/0x20 [ 2247.505593] kmem_cache_alloc+0x5b/0x310 [ 2247.506099] create_object.isra.0+0x3a/0xa30 [ 2247.506610] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2247.507283] kmem_cache_alloc_trace+0x151/0x320 [ 2247.507958] io_uring_setup+0x258/0x2980 [ 2247.508488] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2247.509069] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2247.509671] ? wait_for_completion_io+0x270/0x270 [ 2247.510260] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2247.510906] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2247.511511] do_syscall_64+0x33/0x40 [ 2247.511965] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2247.512593] RIP: 0033:0x7fd0bb875b19 [ 2247.513063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2247.515183] RSP: 002b:00007fd0b8deb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2247.516063] RAX: ffffffffffffffda RBX: 00007fd0bb988f60 RCX: 00007fd0bb875b19 [ 2247.516879] RDX: 000000002080d000 RSI: 0000000020000080 RDI: 0000000000002726 [ 2247.517706] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2247.518521] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000180 [ 2247.519345] R13: 000000002080d000 R14: 0000000020000100 R15: 0000000020ffc000 09:28:59 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000011002302"], 0x50}}, 0x0) [ 2247.543840] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=15 sclass=netlink_xfrm_socket pid=11630 comm=syz-executor.5 09:28:59 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="500000000f002302"], 0x50}}, 0x0) 09:28:59 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50000000150023"], 0x50}}, 0x0) [ 2247.568529] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2248.069670] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2248.102841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2248.125527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2263.831099] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2263.842736] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2263.850265] FAULT_INJECTION: forcing a failure. [ 2263.850265] name failslab, interval 1, probability 0, space 0, times 0 [ 2263.852033] CPU: 0 PID: 11652 Comm: syz-executor.0 Not tainted 5.10.247 #1 09:29:15 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000011002302"], 0x50}}, 0x0) 09:29:15 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195be945b99b06fab0609"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:29:15 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="500000001200"], 0x50}}, 0x0) 09:29:15 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) 09:29:15 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50000000150023"], 0x50}}, 0x0) 09:29:15 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) (fail_nth: 4) syz_io_uring_setup(0x0, 0x0, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, 0x0, &(0x7f0000000680)) syz_io_uring_setup(0x208a, 0x0, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 09:29:15 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r3, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r4, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:29:15 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r4, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r5, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) [ 2263.853047] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2263.854388] Call Trace: [ 2263.854780] dump_stack+0x107/0x167 [ 2263.855331] should_fail.cold+0x5/0xa [ 2263.855899] ? io_uring_setup+0x33c/0x2980 [ 2263.856521] should_failslab+0x5/0x20 [ 2263.857077] __kmalloc+0x72/0x390 [ 2263.857586] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2263.858334] io_uring_setup+0x33c/0x2980 [ 2263.858931] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2263.859648] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2263.860382] ? wait_for_completion_io+0x270/0x270 [ 2263.861120] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2263.861888] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2263.862646] do_syscall_64+0x33/0x40 [ 2263.863171] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2263.864407] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2263.864419] RIP: 0033:0x7fd0bb875b19 [ 2263.864433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2263.864442] RSP: 002b:00007fd0b8deb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2263.864469] RAX: ffffffffffffffda RBX: 00007fd0bb988f60 RCX: 00007fd0bb875b19 [ 2263.870875] RDX: 000000002080d000 RSI: 0000000020000080 RDI: 0000000000002726 [ 2263.871914] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2263.872942] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000180 [ 2263.873969] R13: 000000002080d000 R14: 0000000020000100 R15: 0000000020ffc000 [ 2263.876627] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.6'. 09:29:15 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50000000150023"], 0x50}}, 0x0) 09:29:15 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50000000120023"], 0x50}}, 0x0) 09:29:15 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000013002302"], 0x50}}, 0x0) 09:29:15 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) 09:29:15 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) (fail_nth: 5) syz_io_uring_setup(0x0, 0x0, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, 0x0, &(0x7f0000000680)) syz_io_uring_setup(0x208a, 0x0, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 2264.008889] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. 09:29:15 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r0, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50000000150023"], 0x50}}, 0x0) [ 2264.059762] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.5'. 09:29:15 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000014002302"], 0x50}}, 0x0) [ 2264.086058] FAULT_INJECTION: forcing a failure. [ 2264.086058] name failslab, interval 1, probability 0, space 0, times 0 [ 2264.088717] CPU: 1 PID: 11669 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 2264.090289] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2264.092170] Call Trace: [ 2264.092769] dump_stack+0x107/0x167 [ 2264.093596] should_fail.cold+0x5/0xa [ 2264.094465] ? create_object.isra.0+0x3a/0xa30 [ 2264.095506] should_failslab+0x5/0x20 [ 2264.096366] kmem_cache_alloc+0x5b/0x310 [ 2264.097296] create_object.isra.0+0x3a/0xa30 [ 2264.098285] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2264.099445] __kmalloc+0x16e/0x390 [ 2264.100258] io_uring_setup+0x33c/0x2980 [ 2264.101178] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2264.102271] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2264.103419] ? wait_for_completion_io+0x270/0x270 [ 2264.104537] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2264.105722] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2264.106889] do_syscall_64+0x33/0x40 [ 2264.107739] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2264.108885] RIP: 0033:0x7fd0bb875b19 [ 2264.109718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2264.113845] RSP: 002b:00007fd0b8deb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2264.115552] RAX: ffffffffffffffda RBX: 00007fd0bb988f60 RCX: 00007fd0bb875b19 [ 2264.117138] RDX: 000000002080d000 RSI: 0000000020000080 RDI: 0000000000002726 [ 2264.118723] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2264.120323] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000180 [ 2264.121912] R13: 000000002080d000 R14: 0000000020000100 R15: 0000000020ffc000 09:29:15 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50000000120023"], 0x50}}, 0x0) [ 2264.191601] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2264.647639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2264.649649] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2264.654049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:29:31 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000013002302"], 0x50}}, 0x0) 09:29:31 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000028002302"], 0x50}}, 0x0) 09:29:31 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50000000150023"], 0x50}}, 0x0) 09:29:31 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) (fail_nth: 6) syz_io_uring_setup(0x0, 0x0, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, 0x0, &(0x7f0000000680)) syz_io_uring_setup(0x208a, 0x0, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 09:29:31 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50000000120023"], 0x50}}, 0x0) 09:29:31 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195be945b99b06fab0609"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:29:31 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r4, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:29:31 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r3, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r4, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) [ 2279.602123] FAULT_INJECTION: forcing a failure. [ 2279.602123] name failslab, interval 1, probability 0, space 0, times 0 [ 2279.604602] CPU: 0 PID: 11691 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 2279.606078] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2279.607856] Call Trace: [ 2279.608428] dump_stack+0x107/0x167 [ 2279.609218] should_fail.cold+0x5/0xa [ 2279.610041] ? io_uring_setup+0x40b/0x2980 [ 2279.610106] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2279.610944] should_failslab+0x5/0x20 [ 2279.610969] kmem_cache_alloc_trace+0x55/0x320 [ 2279.610991] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2279.611029] io_uring_setup+0x40b/0x2980 [ 2279.616641] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2279.617676] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2279.618752] ? wait_for_completion_io+0x270/0x270 [ 2279.619845] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2279.620968] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2279.622078] do_syscall_64+0x33/0x40 [ 2279.622875] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2279.623979] RIP: 0033:0x7fd0bb875b19 [ 2279.624773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2279.628671] RSP: 002b:00007fd0b8deb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2279.630304] RAX: ffffffffffffffda RBX: 00007fd0bb988f60 RCX: 00007fd0bb875b19 [ 2279.631836] RDX: 000000002080d000 RSI: 0000000020000080 RDI: 0000000000002726 [ 2279.633353] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2279.634868] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000180 [ 2279.636416] R13: 000000002080d000 R14: 0000000020000100 R15: 0000000020ffc000 [ 2279.638963] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2279.652667] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2279.657725] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 09:29:31 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000014002302"], 0x50}}, 0x0) 09:29:31 executing program 1: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50000000150023"], 0x50}}, 0x0) 09:29:31 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015022302"], 0x50}}, 0x0) 09:29:31 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) (fail_nth: 1) 09:29:31 executing program 1: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50000000150023"], 0x50}}, 0x0) [ 2279.808969] FAULT_INJECTION: forcing a failure. [ 2279.808969] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2279.811562] CPU: 1 PID: 11702 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2279.813032] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2279.814800] Call Trace: [ 2279.815369] dump_stack+0x107/0x167 [ 2279.816153] should_fail.cold+0x5/0xa [ 2279.816973] _copy_from_user+0x2e/0x1b0 [ 2279.817833] __copy_msghdr_from_user+0x91/0x4b0 [ 2279.818828] ? __ia32_sys_shutdown+0x80/0x80 [ 2279.819777] ? perf_trace_lock+0xac/0x490 [ 2279.820670] ? SOFTIRQ_verbose+0x10/0x10 [ 2279.821543] ? __lock_acquire+0xbb1/0x5b00 [ 2279.822454] sendmsg_copy_msghdr+0xa1/0x160 [ 2279.823383] ? do_recvmmsg+0x6d0/0x6d0 [ 2279.824218] ? perf_trace_lock+0xac/0x490 [ 2279.825103] ? SOFTIRQ_verbose+0x10/0x10 09:29:31 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) (fail_nth: 7) syz_io_uring_setup(0x0, 0x0, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, 0x0, &(0x7f0000000680)) syz_io_uring_setup(0x208a, 0x0, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 2279.825978] ? lock_downgrade+0x6d0/0x6d0 [ 2279.827081] ? __lockdep_reset_lock+0x180/0x180 [ 2279.828113] ? SOFTIRQ_verbose+0x10/0x10 [ 2279.829004] ___sys_sendmsg+0xc6/0x170 [ 2279.829856] ? sendmsg_copy_msghdr+0x160/0x160 [ 2279.830848] ? __fget_files+0x2cf/0x520 [ 2279.831730] ? lock_downgrade+0x6d0/0x6d0 [ 2279.832636] ? find_held_lock+0x2c/0x110 [ 2279.833544] ? __fget_files+0x2f8/0x520 [ 2279.834406] ? __fget_light+0xea/0x290 [ 2279.835265] __sys_sendmsg+0xe5/0x1b0 [ 2279.836108] ? __sys_sendmsg_sock+0x40/0x40 [ 2279.837056] ? rcu_read_lock_any_held+0x75/0xa0 [ 2279.838092] ? fput_many+0x2f/0x1a0 [ 2279.838897] ? ksys_write+0x1a9/0x260 [ 2279.839789] ? __ia32_sys_read+0xb0/0xb0 [ 2279.840697] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2279.841870] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2279.843000] ? trace_hardirqs_on+0x5b/0x180 [ 2279.843970] do_syscall_64+0x33/0x40 [ 2279.844795] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2279.845912] RIP: 0033:0x7f5bc02e3b19 [ 2279.846742] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2279.850776] RSP: 002b:00007f5bbd859188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2279.852477] RAX: ffffffffffffffda RBX: 00007f5bc03f6f60 RCX: 00007f5bc02e3b19 [ 2279.854056] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 2279.855655] RBP: 00007f5bbd8591d0 R08: 0000000000000000 R09: 0000000000000000 [ 2279.857236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2279.858827] R13: 00007ffd61fe3dcf R14: 00007f5bbd859300 R15: 0000000000022000 [ 2279.862324] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=533 sclass=netlink_xfrm_socket pid=11703 comm=syz-executor.7 [ 2279.900985] FAULT_INJECTION: forcing a failure. [ 2279.900985] name failslab, interval 1, probability 0, space 0, times 0 [ 2279.903360] CPU: 0 PID: 11707 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 2279.904733] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2279.906349] Call Trace: [ 2279.906876] dump_stack+0x107/0x167 [ 2279.907608] should_fail.cold+0x5/0xa [ 2279.908362] ? create_object.isra.0+0x3a/0xa30 [ 2279.909257] should_failslab+0x5/0x20 [ 2279.910005] kmem_cache_alloc+0x5b/0x310 [ 2279.910820] create_object.isra.0+0x3a/0xa30 [ 2279.911693] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2279.912714] kmem_cache_alloc_trace+0x151/0x320 [ 2279.913654] io_uring_setup+0x40b/0x2980 [ 2279.914459] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2279.915419] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2279.916411] ? wait_for_completion_io+0x270/0x270 [ 2279.917407] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2279.918433] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2279.919459] do_syscall_64+0x33/0x40 [ 2279.920193] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2279.921190] RIP: 0033:0x7fd0bb875b19 [ 2279.921917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2279.925460] RSP: 002b:00007fd0b8deb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2279.926946] RAX: ffffffffffffffda RBX: 00007fd0bb988f60 RCX: 00007fd0bb875b19 [ 2279.928353] RDX: 000000002080d000 RSI: 0000000020000080 RDI: 0000000000002726 [ 2279.929731] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2279.931116] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000180 [ 2279.932512] R13: 000000002080d000 R14: 0000000020000100 R15: 0000000020ffc000 09:29:31 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000215002302"], 0x50}}, 0x0) 09:29:31 executing program 1: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50000000150023"], 0x50}}, 0x0) 09:29:31 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50000000150f2302"], 0x50}}, 0x0) 09:29:31 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) (fail_nth: 2) [ 2280.070055] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=3861 sclass=netlink_xfrm_socket pid=11714 comm=syz-executor.7 [ 2280.088510] FAULT_INJECTION: forcing a failure. [ 2280.088510] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2280.090681] CPU: 0 PID: 11716 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2280.091914] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2280.093364] Call Trace: [ 2280.093833] dump_stack+0x107/0x167 [ 2280.094480] should_fail.cold+0x5/0xa [ 2280.095159] _copy_from_user+0x2e/0x1b0 [ 2280.095871] iovec_from_user+0x141/0x400 [ 2280.096585] __import_iovec+0x67/0x590 [ 2280.097260] ? __ia32_sys_shutdown+0x80/0x80 [ 2280.098023] ? perf_trace_lock+0xac/0x490 [ 2280.098754] import_iovec+0x83/0xb0 [ 2280.099406] sendmsg_copy_msghdr+0x131/0x160 [ 2280.100165] ? do_recvmmsg+0x6d0/0x6d0 [ 2280.100848] ? SOFTIRQ_verbose+0x10/0x10 [ 2280.101560] ? lock_downgrade+0x6d0/0x6d0 [ 2280.102282] ? __lockdep_reset_lock+0x180/0x180 [ 2280.103088] ? SOFTIRQ_verbose+0x10/0x10 [ 2280.103806] ___sys_sendmsg+0xc6/0x170 [ 2280.104489] ? sendmsg_copy_msghdr+0x160/0x160 [ 2280.105289] ? __fget_files+0x2cf/0x520 [ 2280.105985] ? lock_downgrade+0x6d0/0x6d0 [ 2280.106708] ? find_held_lock+0x2c/0x110 [ 2280.107437] ? __fget_files+0x2f8/0x520 [ 2280.108136] ? __fget_light+0xea/0x290 [ 2280.108817] __sys_sendmsg+0xe5/0x1b0 [ 2280.109484] ? __sys_sendmsg_sock+0x40/0x40 [ 2280.110237] ? rcu_read_lock_any_held+0x75/0xa0 [ 2280.111048] ? fput_many+0x2f/0x1a0 [ 2280.111689] ? ksys_write+0x1a9/0x260 [ 2280.112350] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2280.113250] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2280.114139] ? trace_hardirqs_on+0x5b/0x180 [ 2280.114892] do_syscall_64+0x33/0x40 [ 2280.115544] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2280.116427] RIP: 0033:0x7f5bc02e3b19 [ 2280.117068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2280.120238] RSP: 002b:00007f5bbd859188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2280.121553] RAX: ffffffffffffffda RBX: 00007f5bc03f6f60 RCX: 00007f5bc02e3b19 [ 2280.122769] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 2280.124010] RBP: 00007f5bbd8591d0 R08: 0000000000000000 R09: 0000000000000000 [ 2280.125227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2280.126455] R13: 00007ffd61fe3dcf R14: 00007f5bbd859300 R15: 0000000000022000 [ 2280.435356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2280.459817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2280.462923] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:29:50 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) (fail_nth: 8) syz_io_uring_setup(0x0, 0x0, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, 0x0, &(0x7f0000000680)) syz_io_uring_setup(0x208a, 0x0, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 09:29:50 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195be945b99b06fab0609"], 0x14}}, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x185680, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:29:50 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r3, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r4, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:29:50 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002319"], 0x50}}, 0x0) 09:29:50 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) (fail_nth: 3) 09:29:50 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r4, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:29:50 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000f15002302"], 0x50}}, 0x0) 09:29:50 executing program 1: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50000000150023"], 0x50}}, 0x0) [ 2299.073856] FAULT_INJECTION: forcing a failure. [ 2299.073856] name failslab, interval 1, probability 0, space 0, times 0 [ 2299.076038] CPU: 0 PID: 11726 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2299.077357] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2299.078932] Call Trace: [ 2299.079433] dump_stack+0x107/0x167 [ 2299.080127] should_fail.cold+0x5/0xa [ 2299.080842] ? __alloc_skb+0x6d/0x5b0 [ 2299.081558] should_failslab+0x5/0x20 [ 2299.082271] kmem_cache_alloc_node+0x55/0x330 [ 2299.083119] __alloc_skb+0x6d/0x5b0 [ 2299.083821] netlink_sendmsg+0x998/0xe00 [ 2299.084592] ? netlink_unicast+0xa00/0xa00 [ 2299.085399] ? netlink_unicast+0xa00/0xa00 [ 2299.086187] __sock_sendmsg+0x154/0x190 [ 2299.086937] ____sys_sendmsg+0x70d/0x870 [ 2299.087711] ? sock_write_iter+0x3d0/0x3d0 [ 2299.088496] ? do_recvmmsg+0x6d0/0x6d0 [ 2299.089232] ? SOFTIRQ_verbose+0x10/0x10 [ 2299.089995] ? lock_downgrade+0x6d0/0x6d0 [ 2299.090784] ? __lockdep_reset_lock+0x180/0x180 [ 2299.091662] ? SOFTIRQ_verbose+0x10/0x10 [ 2299.092431] ___sys_sendmsg+0xf3/0x170 [ 2299.093160] ? sendmsg_copy_msghdr+0x160/0x160 [ 2299.094018] ? __fget_files+0x2cf/0x520 [ 2299.094764] ? lock_downgrade+0x6d0/0x6d0 [ 2299.095543] ? find_held_lock+0x2c/0x110 [ 2299.096342] ? __fget_files+0x2f8/0x520 [ 2299.097100] ? __fget_light+0xea/0x290 [ 2299.097832] __sys_sendmsg+0xe5/0x1b0 [ 2299.098545] ? __sys_sendmsg_sock+0x40/0x40 [ 2299.099351] ? rcu_read_lock_any_held+0x75/0xa0 [ 2299.100256] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2299.101226] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2299.102174] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2299.103751] ? trace_hardirqs_on+0x5b/0x180 [ 2299.104564] do_syscall_64+0x33/0x40 [ 2299.105254] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2299.106204] RIP: 0033:0x7f5bc02e3b19 [ 2299.106892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2299.110292] RSP: 002b:00007f5bbd859188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2299.111700] RAX: ffffffffffffffda RBX: 00007f5bc03f6f60 RCX: 00007f5bc02e3b19 [ 2299.113016] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 2299.114339] RBP: 00007f5bbd8591d0 R08: 0000000000000000 R09: 0000000000000000 [ 2299.115670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2299.116988] R13: 00007ffd61fe3dcf R14: 00007f5bbd859300 R15: 0000000000022000 [ 2299.131261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2299.140390] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.6'. 09:29:50 executing program 1: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50000000150023"], 0x50}}, 0x0) [ 2299.176504] FAULT_INJECTION: forcing a failure. [ 2299.176504] name failslab, interval 1, probability 0, space 0, times 0 [ 2299.178561] CPU: 0 PID: 11735 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 2299.179806] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2299.181271] Call Trace: [ 2299.181743] dump_stack+0x107/0x167 [ 2299.182391] should_fail.cold+0x5/0xa [ 2299.183067] ? create_object.isra.0+0x3a/0xa30 [ 2299.183894] should_failslab+0x5/0x20 [ 2299.184570] kmem_cache_alloc+0x5b/0x310 [ 2299.185302] create_object.isra.0+0x3a/0xa30 [ 2299.186092] kmemleak_alloc_percpu+0xa0/0x100 [ 2299.186892] pcpu_alloc+0x4e2/0x1240 [ 2299.187570] ? io_tctx_exit_cb+0xf0/0xf0 [ 2299.188301] percpu_ref_init+0x31/0x3d0 [ 2299.189015] io_uring_setup+0x47a/0x2980 [ 2299.189734] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2299.190602] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2299.191503] ? wait_for_completion_io+0x270/0x270 [ 2299.192389] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2299.193328] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2299.194236] do_syscall_64+0x33/0x40 [ 2299.194899] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2299.195821] RIP: 0033:0x7fd0bb875b19 [ 2299.196473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2299.199700] RSP: 002b:00007fd0b8dca108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2299.201041] RAX: ffffffffffffffda RBX: 00007fd0bb989020 RCX: 00007fd0bb875b19 [ 2299.202298] RDX: 000000002080d000 RSI: 0000000020000080 RDI: 0000000000002726 [ 2299.203548] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2299.204798] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000180 [ 2299.206055] R13: 000000002080d000 R14: 0000000020000100 R15: 0000000020ffc000 09:29:50 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0xf}}, 0x0) 09:29:50 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000028002302"], 0x50}}, 0x0) 09:29:50 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195be945b99b06fab0609"], 0x14}}, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x185680, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:29:50 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) (fail_nth: 4) [ 2299.288319] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2299.306949] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 09:29:50 executing program 1: socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50000000150023"], 0x50}}, 0x0) [ 2299.319836] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2299.333529] FAULT_INJECTION: forcing a failure. [ 2299.333529] name failslab, interval 1, probability 0, space 0, times 0 [ 2299.335333] CPU: 0 PID: 11748 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2299.336479] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2299.337814] Call Trace: [ 2299.338248] dump_stack+0x107/0x167 [ 2299.338832] should_fail.cold+0x5/0xa [ 2299.339451] ? create_object.isra.0+0x3a/0xa30 [ 2299.340221] should_failslab+0x5/0x20 [ 2299.340847] kmem_cache_alloc+0x5b/0x310 [ 2299.341510] create_object.isra.0+0x3a/0xa30 [ 2299.342205] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2299.343046] kmem_cache_alloc_node+0x169/0x330 [ 2299.343798] __alloc_skb+0x6d/0x5b0 [ 2299.344388] netlink_sendmsg+0x998/0xe00 [ 2299.345044] ? netlink_unicast+0xa00/0xa00 [ 2299.345735] ? netlink_unicast+0xa00/0xa00 [ 2299.346419] __sock_sendmsg+0x154/0x190 [ 2299.347071] ____sys_sendmsg+0x70d/0x870 [ 2299.347736] ? sock_write_iter+0x3d0/0x3d0 [ 2299.348421] ? do_recvmmsg+0x6d0/0x6d0 [ 2299.349054] ? SOFTIRQ_verbose+0x10/0x10 [ 2299.349701] ? lock_downgrade+0x6d0/0x6d0 [ 2299.350368] ? __lockdep_reset_lock+0x180/0x180 [ 2299.351113] ? SOFTIRQ_verbose+0x10/0x10 [ 2299.351767] ___sys_sendmsg+0xf3/0x170 [ 2299.352392] ? sendmsg_copy_msghdr+0x160/0x160 [ 2299.353133] ? __fget_files+0x2cf/0x520 [ 2299.353776] ? lock_downgrade+0x6d0/0x6d0 [ 2299.354435] ? find_held_lock+0x2c/0x110 [ 2299.355088] ? __fget_files+0x2f8/0x520 [ 2299.355733] ? __fget_light+0xea/0x290 [ 2299.356357] __sys_sendmsg+0xe5/0x1b0 [ 2299.356963] ? __sys_sendmsg_sock+0x40/0x40 [ 2299.357655] ? rcu_read_lock_any_held+0x75/0xa0 [ 2299.358411] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2299.359202] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2299.360025] ? trace_hardirqs_on+0x5b/0x180 [ 2299.360716] do_syscall_64+0x33/0x40 [ 2299.361313] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2299.362135] RIP: 0033:0x7f5bc02e3b19 [ 2299.362723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2299.365669] RSP: 002b:00007f5bbd859188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2299.366898] RAX: ffffffffffffffda RBX: 00007f5bc03f6f60 RCX: 00007f5bc02e3b19 [ 2299.368041] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 2299.369168] RBP: 00007f5bbd8591d0 R08: 0000000000000000 R09: 0000000000000000 [ 2299.370291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2299.371414] R13: 00007ffd61fe3dcf R14: 00007f5bbd859300 R15: 0000000000022000 09:29:50 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="500000000f002302"], 0x50}}, 0x0) 09:29:50 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0xc0}}, 0x0) [ 2299.447394] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2299.452691] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=15 sclass=netlink_xfrm_socket pid=11754 comm=syz-executor.5 [ 2299.743038] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2299.813182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:30:06 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) (fail_nth: 5) 09:30:06 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195be945b99b06fab0609"], 0x14}}, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x185680, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:30:06 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r4, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:30:06 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0xec0}}, 0x0) 09:30:06 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r3, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r4, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:30:06 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) (fail_nth: 9) syz_io_uring_setup(0x0, 0x0, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, 0x0, &(0x7f0000000680)) syz_io_uring_setup(0x208a, 0x0, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 09:30:06 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 09:30:06 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000010002302"], 0x50}}, 0x0) [ 2315.021148] FAULT_INJECTION: forcing a failure. [ 2315.021148] name failslab, interval 1, probability 0, space 0, times 0 [ 2315.023595] CPU: 0 PID: 11760 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2315.025079] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2315.026836] Call Trace: [ 2315.027404] dump_stack+0x107/0x167 [ 2315.028191] should_fail.cold+0x5/0xa [ 2315.029009] should_failslab+0x5/0x20 [ 2315.029820] __kmalloc_node_track_caller+0x74/0x3b0 [ 2315.030887] ? netlink_sendmsg+0x998/0xe00 [ 2315.031788] __alloc_skb+0xb1/0x5b0 [ 2315.032571] netlink_sendmsg+0x998/0xe00 [ 2315.033433] ? netlink_unicast+0xa00/0xa00 [ 2315.034345] ? netlink_unicast+0xa00/0xa00 [ 2315.035233] __sock_sendmsg+0x154/0x190 [ 2315.036082] ____sys_sendmsg+0x70d/0x870 [ 2315.036940] ? sock_write_iter+0x3d0/0x3d0 [ 2315.037637] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2315.037819] ? do_recvmmsg+0x6d0/0x6d0 [ 2315.037849] ? SOFTIRQ_verbose+0x10/0x10 [ 2315.041470] ? lock_downgrade+0x6d0/0x6d0 [ 2315.042356] ? __lockdep_reset_lock+0x180/0x180 [ 2315.043345] ? SOFTIRQ_verbose+0x10/0x10 [ 2315.044207] ___sys_sendmsg+0xf3/0x170 [ 2315.045025] ? sendmsg_copy_msghdr+0x160/0x160 [ 2315.045549] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2315.046000] ? __fget_files+0x2cf/0x520 [ 2315.048747] ? lock_downgrade+0x6d0/0x6d0 [ 2315.049621] ? find_held_lock+0x2c/0x110 [ 2315.050489] ? __fget_files+0x2f8/0x520 [ 2315.051336] ? __fget_light+0xea/0x290 [ 2315.052166] __sys_sendmsg+0xe5/0x1b0 [ 2315.052963] ? __sys_sendmsg_sock+0x40/0x40 [ 2315.053868] ? rcu_read_lock_any_held+0x75/0xa0 [ 2315.054877] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2315.055989] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2315.057071] ? trace_hardirqs_on+0x5b/0x180 [ 2315.057985] do_syscall_64+0x33/0x40 [ 2315.058772] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2315.059857] RIP: 0033:0x7f5bc02e3b19 [ 2315.060643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2315.064531] RSP: 002b:00007f5bbd859188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2315.066129] RAX: ffffffffffffffda RBX: 00007f5bc03f6f60 RCX: 00007f5bc02e3b19 [ 2315.067634] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 2315.069144] RBP: 00007f5bbd8591d0 R08: 0000000000000000 R09: 0000000000000000 [ 2315.070638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2315.072139] R13: 00007ffd61fe3dcf R14: 00007f5bbd859300 R15: 0000000000022000 [ 2315.079845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:30:06 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 09:30:06 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000011002302"], 0x50}}, 0x0) [ 2315.134596] FAULT_INJECTION: forcing a failure. [ 2315.134596] name failslab, interval 1, probability 0, space 0, times 0 [ 2315.137045] CPU: 0 PID: 11773 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 2315.138515] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2315.140276] Call Trace: [ 2315.140851] dump_stack+0x107/0x167 [ 2315.141643] should_fail.cold+0x5/0xa [ 2315.142470] ? create_object.isra.0+0x3a/0xa30 [ 2315.143446] should_failslab+0x5/0x20 [ 2315.144271] kmem_cache_alloc+0x5b/0x310 [ 2315.145142] create_object.isra.0+0x3a/0xa30 [ 2315.146097] kmemleak_alloc_percpu+0xa0/0x100 [ 2315.147053] pcpu_alloc+0x4e2/0x1240 [ 2315.147871] ? io_tctx_exit_cb+0xf0/0xf0 [ 2315.148752] percpu_ref_init+0x31/0x3d0 [ 2315.149605] io_uring_setup+0x47a/0x2980 [ 2315.150465] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2315.151498] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2315.152583] ? wait_for_completion_io+0x270/0x270 [ 2315.153648] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2315.154767] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2315.155875] do_syscall_64+0x33/0x40 [ 2315.156684] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2315.157773] RIP: 0033:0x7fd0bb875b19 [ 2315.158572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2315.162480] RSP: 002b:00007fd0b8dca108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2315.164115] RAX: ffffffffffffffda RBX: 00007fd0bb989020 RCX: 00007fd0bb875b19 [ 2315.165625] RDX: 000000002080d000 RSI: 0000000020000080 RDI: 0000000000002726 [ 2315.167136] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2315.168655] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000180 [ 2315.170158] R13: 000000002080d000 R14: 0000000020000100 R15: 0000000020ffc000 09:30:06 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x33fe0}}, 0x0) 09:30:06 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x185680, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r1, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) [ 2315.223080] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2315.256068] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 09:30:06 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) 09:30:06 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) 09:30:06 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) (fail_nth: 6) 09:30:06 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x20003710}}, 0x0) [ 2315.357285] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2315.394857] FAULT_INJECTION: forcing a failure. [ 2315.394857] name failslab, interval 1, probability 0, space 0, times 0 [ 2315.397638] CPU: 0 PID: 11791 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2315.399395] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2315.401539] Call Trace: [ 2315.402220] dump_stack+0x107/0x167 [ 2315.403157] should_fail.cold+0x5/0xa [ 2315.404150] ? create_object.isra.0+0x3a/0xa30 [ 2315.405326] should_failslab+0x5/0x20 [ 2315.406312] kmem_cache_alloc+0x5b/0x310 [ 2315.407365] create_object.isra.0+0x3a/0xa30 [ 2315.408502] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2315.409821] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2315.411126] ? netlink_sendmsg+0x998/0xe00 [ 2315.412240] __alloc_skb+0xb1/0x5b0 [ 2315.413183] netlink_sendmsg+0x998/0xe00 [ 2315.414226] ? netlink_unicast+0xa00/0xa00 [ 2315.415335] ? netlink_unicast+0xa00/0xa00 [ 2315.416437] __sock_sendmsg+0x154/0x190 [ 2315.417478] ____sys_sendmsg+0x70d/0x870 [ 2315.418525] ? sock_write_iter+0x3d0/0x3d0 [ 2315.419608] ? do_recvmmsg+0x6d0/0x6d0 [ 2315.420694] ? SOFTIRQ_verbose+0x10/0x10 [ 2315.421696] ? lock_downgrade+0x6d0/0x6d0 [ 2315.422722] ? __lockdep_reset_lock+0x180/0x180 [ 2315.423883] ? SOFTIRQ_verbose+0x10/0x10 [ 2315.424876] ___sys_sendmsg+0xf3/0x170 [ 2315.425697] ? sendmsg_copy_msghdr+0x160/0x160 [ 2315.426685] ? __fget_files+0x2cf/0x520 [ 2315.427516] ? lock_downgrade+0x6d0/0x6d0 [ 2315.428426] ? find_held_lock+0x2c/0x110 [ 2315.429313] ? __fget_files+0x2f8/0x520 [ 2315.430183] ? __fget_light+0xea/0x290 [ 2315.431028] __sys_sendmsg+0xe5/0x1b0 [ 2315.431850] ? __sys_sendmsg_sock+0x40/0x40 [ 2315.432784] ? rcu_read_lock_any_held+0x75/0xa0 [ 2315.433806] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2315.434932] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2315.436050] ? trace_hardirqs_on+0x5b/0x180 [ 2315.436977] do_syscall_64+0x33/0x40 [ 2315.437786] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2315.438890] RIP: 0033:0x7f5bc02e3b19 [ 2315.439696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2315.443654] RSP: 002b:00007f5bbd859188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2315.445308] RAX: ffffffffffffffda RBX: 00007f5bc03f6f60 RCX: 00007f5bc02e3b19 [ 2315.446836] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 2315.448387] RBP: 00007f5bbd8591d0 R08: 0000000000000000 R09: 0000000000000000 [ 2315.449913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2315.451463] R13: 00007ffd61fe3dcf R14: 00007f5bbd859300 R15: 0000000000022000 09:30:07 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x7ffff000}}, 0x0) [ 2315.469374] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2315.849067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2315.870595] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:30:22 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x185680, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r1, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:30:22 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 09:30:22 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000013002302"], 0x50}}, 0x0) 09:30:22 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0xfffffdef}}, 0x0) 09:30:22 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r3, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r4, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:30:22 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) (fail_nth: 10) syz_io_uring_setup(0x0, 0x0, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, 0x0, &(0x7f0000000680)) syz_io_uring_setup(0x208a, 0x0, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 09:30:22 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) (fail_nth: 7) 09:30:22 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r4, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) [ 2331.051734] FAULT_INJECTION: forcing a failure. [ 2331.051734] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2331.054460] CPU: 0 PID: 11809 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2331.056021] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2331.057891] Call Trace: [ 2331.058498] dump_stack+0x107/0x167 [ 2331.059324] should_fail.cold+0x5/0xa [ 2331.060211] _copy_from_iter_full+0x201/0xa60 [ 2331.061235] ? __virt_addr_valid+0x170/0x5d0 [ 2331.062233] ? __check_object_size+0x319/0x440 [ 2331.063277] netlink_sendmsg+0x879/0xe00 [ 2331.064222] ? netlink_unicast+0xa00/0xa00 [ 2331.065191] ? netlink_unicast+0xa00/0xa00 [ 2331.066148] __sock_sendmsg+0x154/0x190 [ 2331.067051] ____sys_sendmsg+0x70d/0x870 [ 2331.067971] ? sock_write_iter+0x3d0/0x3d0 [ 2331.068934] ? do_recvmmsg+0x6d0/0x6d0 [ 2331.069817] ? SOFTIRQ_verbose+0x10/0x10 [ 2331.070730] ? lock_downgrade+0x6d0/0x6d0 [ 2331.071672] ? __lockdep_reset_lock+0x180/0x180 [ 2331.072741] ? SOFTIRQ_verbose+0x10/0x10 [ 2331.073666] ___sys_sendmsg+0xf3/0x170 [ 2331.074547] ? sendmsg_copy_msghdr+0x160/0x160 [ 2331.075594] ? __fget_files+0x2cf/0x520 [ 2331.076510] ? lock_downgrade+0x6d0/0x6d0 [ 2331.077457] ? find_held_lock+0x2c/0x110 [ 2331.078388] ? __fget_files+0x2f8/0x520 [ 2331.079387] ? __fget_light+0xea/0x290 [ 2331.080498] __sys_sendmsg+0xe5/0x1b0 [ 2331.081550] ? __sys_sendmsg_sock+0x40/0x40 [ 2331.082746] ? rcu_read_lock_any_held+0x75/0xa0 [ 2331.084071] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2331.085541] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2331.086975] ? trace_hardirqs_on+0x5b/0x180 [ 2331.088169] do_syscall_64+0x33/0x40 [ 2331.089207] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2331.090625] RIP: 0033:0x7f5bc02e3b19 [ 2331.091480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2331.096255] RSP: 002b:00007f5bbd859188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2331.098062] RAX: ffffffffffffffda RBX: 00007f5bc03f6f60 RCX: 00007f5bc02e3b19 [ 2331.099746] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 2331.101405] RBP: 00007f5bbd8591d0 R08: 0000000000000000 R09: 0000000000000000 [ 2331.103044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2331.104725] R13: 00007ffd61fe3dcf R14: 00007f5bbd859300 R15: 0000000000022000 [ 2331.106518] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2331.118133] FAULT_INJECTION: forcing a failure. [ 2331.118133] name failslab, interval 1, probability 0, space 0, times 0 [ 2331.120861] CPU: 0 PID: 11811 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 2331.122454] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2331.124325] Call Trace: [ 2331.125052] dump_stack+0x107/0x167 [ 2331.125906] should_fail.cold+0x5/0xa [ 2331.126788] ? percpu_ref_init+0xd8/0x3d0 [ 2331.127750] should_failslab+0x5/0x20 [ 2331.128642] kmem_cache_alloc_trace+0x55/0x320 [ 2331.129715] ? io_tctx_exit_cb+0xf0/0xf0 [ 2331.130654] percpu_ref_init+0xd8/0x3d0 [ 2331.131586] io_uring_setup+0x47a/0x2980 [ 2331.132569] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2331.133715] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2331.134901] ? wait_for_completion_io+0x270/0x270 [ 2331.136074] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2331.137309] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2331.138550] do_syscall_64+0x33/0x40 [ 2331.139440] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2331.140650] RIP: 0033:0x7fd0bb875b19 [ 2331.141504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2331.145799] RSP: 002b:00007fd0b8deb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2331.147592] RAX: ffffffffffffffda RBX: 00007fd0bb988f60 RCX: 00007fd0bb875b19 [ 2331.149257] RDX: 000000002080d000 RSI: 0000000020000080 RDI: 0000000000002726 [ 2331.150956] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2331.152618] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000180 [ 2331.154270] R13: 000000002080d000 R14: 0000000020000100 R15: 0000000020ffc000 09:30:22 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) [ 2331.166617] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.6'. 09:30:22 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000014002302"], 0x50}}, 0x0) 09:30:22 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x8}, 0x0) 09:30:22 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 09:30:22 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x19}, 0x0) 09:30:22 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) (fail_nth: 11) syz_io_uring_setup(0x0, 0x0, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, 0x0, &(0x7f0000000680)) syz_io_uring_setup(0x208a, 0x0, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 09:30:22 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) (fail_nth: 8) 09:30:22 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000028002302"], 0x50}}, 0x0) [ 2331.312646] FAULT_INJECTION: forcing a failure. [ 2331.312646] name failslab, interval 1, probability 0, space 0, times 0 [ 2331.314037] CPU: 1 PID: 11826 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 2331.314840] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2331.315790] Call Trace: [ 2331.316115] dump_stack+0x107/0x167 [ 2331.316546] should_fail.cold+0x5/0xa [ 2331.316986] ? create_object.isra.0+0x3a/0xa30 [ 2331.317512] should_failslab+0x5/0x20 [ 2331.317947] kmem_cache_alloc+0x5b/0x310 [ 2331.318428] create_object.isra.0+0x3a/0xa30 [ 2331.318929] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2331.319521] kmem_cache_alloc_trace+0x151/0x320 [ 2331.320057] ? io_tctx_exit_cb+0xf0/0xf0 [ 2331.320534] percpu_ref_init+0xd8/0x3d0 [ 2331.320997] io_uring_setup+0x47a/0x2980 [ 2331.321471] ? __mutex_unlock_slowpath+0xe1/0x600 [ 2331.322031] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2331.322622] ? wait_for_completion_io+0x270/0x270 [ 2331.323197] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2331.323807] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2331.324418] do_syscall_64+0x33/0x40 [ 2331.324557] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2331.324855] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2331.324865] RIP: 0033:0x7fd0bb875b19 [ 2331.324878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2331.324895] RSP: 002b:00007fd0b8deb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2331.330637] RAX: ffffffffffffffda RBX: 00007fd0bb988f60 RCX: 00007fd0bb875b19 [ 2331.331466] RDX: 000000002080d000 RSI: 0000000020000080 RDI: 0000000000002726 [ 2331.332295] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2331.333117] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000180 [ 2331.333950] R13: 000000002080d000 R14: 0000000020000100 R15: 0000000020ffc000 [ 2331.343946] FAULT_INJECTION: forcing a failure. [ 2331.343946] name failslab, interval 1, probability 0, space 0, times 0 [ 2331.345353] CPU: 1 PID: 11830 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2331.346152] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2331.347108] Call Trace: [ 2331.347411] dump_stack+0x107/0x167 [ 2331.347835] should_fail.cold+0x5/0xa [ 2331.348287] ? __alloc_skb+0x6d/0x5b0 [ 2331.348730] should_failslab+0x5/0x20 [ 2331.349168] kmem_cache_alloc_node+0x55/0x330 [ 2331.349689] __alloc_skb+0x6d/0x5b0 [ 2331.350123] netlink_dump+0x195/0x11f0 [ 2331.350582] ? netlink_deliver_tap+0xcc0/0xcc0 [ 2331.351120] ? security_capable+0x95/0xc0 [ 2331.351609] __netlink_dump_start+0x62e/0x8e0 [ 2331.352130] ? xfrm_compile_policy+0x610/0x610 [ 2331.352659] xfrm_user_rcv_msg+0x6bb/0x830 [ 2331.353148] ? copy_to_user_tmpl.part.0+0x610/0x610 [ 2331.353727] ? xfrm_compile_policy+0x610/0x610 [ 2331.354253] ? xfrm_dump_policy_start+0x20/0x20 [ 2331.354806] ? lock_acquire+0x197/0x470 [ 2331.355261] ? xfrm_netlink_rcv+0x61/0x90 [ 2331.355749] ? lock_release+0x680/0x680 [ 2331.356224] ? perf_trace_lock+0xac/0x490 [ 2331.356708] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2331.357321] ? SOFTIRQ_verbose+0x10/0x10 [ 2331.357791] ? __lockdep_reset_lock+0x180/0x180 [ 2331.358339] ? __mutex_lock+0x4fe/0x10b0 [ 2331.358814] ? __lockdep_reset_lock+0x180/0x180 [ 2331.359356] netlink_rcv_skb+0x14b/0x430 [ 2331.359827] ? copy_to_user_tmpl.part.0+0x610/0x610 [ 2331.360413] ? netlink_ack+0xab0/0xab0 [ 2331.360866] ? netlink_deliver_tap+0x1c4/0xcc0 [ 2331.361397] xfrm_netlink_rcv+0x70/0x90 [ 2331.361857] netlink_unicast+0x6ce/0xa00 [ 2331.362336] ? netlink_attachskb+0xab0/0xab0 [ 2331.362851] netlink_sendmsg+0x90f/0xe00 [ 2331.363326] ? netlink_unicast+0xa00/0xa00 [ 2331.363824] ? netlink_unicast+0xa00/0xa00 [ 2331.364327] __sock_sendmsg+0x154/0x190 [ 2331.364789] ____sys_sendmsg+0x70d/0x870 [ 2331.365257] ? sock_write_iter+0x3d0/0x3d0 [ 2331.365745] ? do_recvmmsg+0x6d0/0x6d0 [ 2331.366202] ? SOFTIRQ_verbose+0x10/0x10 [ 2331.366669] ? lock_downgrade+0x6d0/0x6d0 [ 2331.367156] ? __lockdep_reset_lock+0x180/0x180 [ 2331.367695] ? SOFTIRQ_verbose+0x10/0x10 [ 2331.368170] ___sys_sendmsg+0xf3/0x170 [ 2331.368615] ? sendmsg_copy_msghdr+0x160/0x160 [ 2331.369137] ? __fget_files+0x2cf/0x520 [ 2331.369596] ? lock_downgrade+0x6d0/0x6d0 [ 2331.370075] ? find_held_lock+0x2c/0x110 [ 2331.370554] ? __fget_files+0x2f8/0x520 [ 2331.371019] ? __fget_light+0xea/0x290 [ 2331.371475] __sys_sendmsg+0xe5/0x1b0 [ 2331.371912] ? __sys_sendmsg_sock+0x40/0x40 [ 2331.372419] ? rcu_read_lock_any_held+0x75/0xa0 [ 2331.372966] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2331.373566] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2331.374152] ? trace_hardirqs_on+0x5b/0x180 [ 2331.374646] do_syscall_64+0x33/0x40 [ 2331.375073] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2331.375662] RIP: 0033:0x7f5bc02e3b19 [ 2331.376084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2331.378204] RSP: 002b:00007f5bbd859188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2331.379076] RAX: ffffffffffffffda RBX: 00007f5bc03f6f60 RCX: 00007f5bc02e3b19 [ 2331.379899] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 2331.380731] RBP: 00007f5bbd8591d0 R08: 0000000000000000 R09: 0000000000000000 [ 2331.381551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2331.382377] R13: 00007ffd61fe3dcf R14: 00007f5bbd859300 R15: 0000000000022000 [ 2331.876490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2331.903790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:30:39 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x50}}, 0x0) [ 2347.453829] FAULT_INJECTION: forcing a failure. [ 2347.453829] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 2347.455370] CPU: 0 PID: 11834 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 2347.456243] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2347.457299] Call Trace: [ 2347.457644] dump_stack+0x107/0x167 [ 2347.458130] should_fail.cold+0x5/0xa [ 2347.458636] __alloc_pages_nodemask+0x182/0x600 [ 2347.459239] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2347.460015] ? cap_capable+0x1cd/0x230 [ 2347.460534] alloc_pages_current+0x187/0x280 [ 2347.461097] __get_free_pages+0xc/0xa0 [ 2347.461593] io_uring_setup+0xe27/0x2980 [ 2347.462119] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2347.462764] ? wait_for_completion_io+0x270/0x270 [ 2347.463421] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2347.464099] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2347.464781] do_syscall_64+0x33/0x40 [ 2347.465259] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2347.465911] RIP: 0033:0x7fd0bb875b19 [ 2347.466379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2347.468718] RSP: 002b:00007fd0b8deb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2347.469678] RAX: ffffffffffffffda RBX: 00007fd0bb988f60 RCX: 00007fd0bb875b19 [ 2347.470597] RDX: 000000002080d000 RSI: 0000000020000080 RDI: 0000000000002726 [ 2347.471503] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2347.472420] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000180 [ 2347.473318] R13: 000000002080d000 R14: 0000000020000100 R15: 0000000020ffc000 [ 2347.487227] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=533 sclass=netlink_xfrm_socket pid=11845 comm=syz-executor.5 09:30:39 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r4, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:30:39 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r3, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r4, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:30:39 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) (fail_nth: 12) syz_io_uring_setup(0x0, 0x0, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, 0x0, &(0x7f0000000680)) syz_io_uring_setup(0x208a, 0x0, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 09:30:39 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x300}, 0x0) 09:30:39 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015022302"], 0x50}}, 0x0) 09:30:39 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) (fail_nth: 9) 09:30:39 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x185680, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r1, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) [ 2347.505354] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2347.507861] FAULT_INJECTION: forcing a failure. [ 2347.507861] name failslab, interval 1, probability 0, space 0, times 0 [ 2347.510447] CPU: 1 PID: 11843 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2347.511961] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2347.513775] Call Trace: [ 2347.514358] dump_stack+0x107/0x167 [ 2347.515148] should_fail.cold+0x5/0xa [ 2347.515983] ? create_object.isra.0+0x3a/0xa30 [ 2347.516984] should_failslab+0x5/0x20 [ 2347.517811] kmem_cache_alloc+0x5b/0x310 [ 2347.518690] ? SOFTIRQ_verbose+0x10/0x10 [ 2347.519573] create_object.isra.0+0x3a/0xa30 09:30:39 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50000000150f2302"], 0x50}}, 0x0) [ 2347.520523] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2347.521743] kmem_cache_alloc_node+0x169/0x330 [ 2347.522759] __alloc_skb+0x6d/0x5b0 [ 2347.523573] netlink_dump+0x195/0x11f0 [ 2347.524453] ? netlink_deliver_tap+0xcc0/0xcc0 [ 2347.525450] ? security_capable+0x95/0xc0 [ 2347.526372] __netlink_dump_start+0x62e/0x8e0 [ 2347.527361] ? xfrm_compile_policy+0x610/0x610 [ 2347.528364] xfrm_user_rcv_msg+0x6bb/0x830 [ 2347.529309] ? copy_to_user_tmpl.part.0+0x610/0x610 [ 2347.530415] ? xfrm_compile_policy+0x610/0x610 [ 2347.531457] ? xfrm_dump_policy_start+0x20/0x20 [ 2347.532503] ? lock_acquire+0x197/0x470 [ 2347.533368] ? xfrm_netlink_rcv+0x61/0x90 [ 2347.533802] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=3861 sclass=netlink_xfrm_socket pid=11849 comm=syz-executor.5 [ 2347.534276] ? lock_release+0x680/0x680 [ 2347.534296] ? perf_trace_lock+0xac/0x490 [ 2347.537522] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2347.538651] ? SOFTIRQ_verbose+0x10/0x10 [ 2347.539526] ? __lockdep_reset_lock+0x180/0x180 [ 2347.540556] ? __mutex_lock+0x4fe/0x10b0 [ 2347.541429] ? __lockdep_reset_lock+0x180/0x180 [ 2347.542429] netlink_rcv_skb+0x14b/0x430 [ 2347.543293] ? copy_to_user_tmpl.part.0+0x610/0x610 [ 2347.544361] ? netlink_ack+0xab0/0xab0 [ 2347.545227] ? netlink_deliver_tap+0x1c4/0xcc0 [ 2347.546205] xfrm_netlink_rcv+0x70/0x90 [ 2347.547062] netlink_unicast+0x6ce/0xa00 [ 2347.547963] ? netlink_attachskb+0xab0/0xab0 [ 2347.548949] netlink_sendmsg+0x90f/0xe00 [ 2347.549842] ? netlink_unicast+0xa00/0xa00 [ 2347.550791] ? netlink_unicast+0xa00/0xa00 [ 2347.551714] __sock_sendmsg+0x154/0x190 [ 2347.552597] ____sys_sendmsg+0x70d/0x870 [ 2347.553482] ? sock_write_iter+0x3d0/0x3d0 [ 2347.554397] ? do_recvmmsg+0x6d0/0x6d0 [ 2347.555248] ? SOFTIRQ_verbose+0x10/0x10 [ 2347.556136] ? lock_downgrade+0x6d0/0x6d0 [ 2347.557045] ? __lockdep_reset_lock+0x180/0x180 [ 2347.558052] ? SOFTIRQ_verbose+0x10/0x10 [ 2347.558937] ___sys_sendmsg+0xf3/0x170 [ 2347.559786] ? sendmsg_copy_msghdr+0x160/0x160 [ 2347.560796] ? __fget_files+0x2cf/0x520 [ 2347.561659] ? lock_downgrade+0x6d0/0x6d0 [ 2347.562554] ? find_held_lock+0x2c/0x110 [ 2347.563446] ? __fget_files+0x2f8/0x520 [ 2347.564312] ? __fget_light+0xea/0x290 [ 2347.565170] __sys_sendmsg+0xe5/0x1b0 [ 2347.565986] ? __sys_sendmsg_sock+0x40/0x40 [ 2347.566909] ? rcu_read_lock_any_held+0x75/0xa0 [ 2347.567932] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2347.569065] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2347.570166] ? trace_hardirqs_on+0x5b/0x180 [ 2347.571096] do_syscall_64+0x33/0x40 [ 2347.571897] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2347.573001] RIP: 0033:0x7f5bc02e3b19 [ 2347.573802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2347.577741] RSP: 002b:00007f5bbd859188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2347.579373] RAX: ffffffffffffffda RBX: 00007f5bc03f6f60 RCX: 00007f5bc02e3b19 [ 2347.580906] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 2347.582427] RBP: 00007f5bbd8591d0 R08: 0000000000000000 R09: 0000000000000000 [ 2347.583950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2347.585466] R13: 00007ffd61fe3dcf R14: 00007f5bbd859300 R15: 0000000000022000 09:30:39 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x2}, 0x0) 09:30:39 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x50}}, 0x0) [ 2347.602440] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 09:30:39 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002319"], 0x50}}, 0x0) [ 2347.635658] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2348.102968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2348.313619] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:30:56 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0xf}}, 0x0) [ 2365.404407] FAULT_INJECTION: forcing a failure. [ 2365.404407] name failslab, interval 1, probability 0, space 0, times 0 [ 2365.406982] CPU: 1 PID: 11868 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2365.408441] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2365.410189] Call Trace: [ 2365.410752] dump_stack+0x107/0x167 [ 2365.410890] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2365.411524] should_fail.cold+0x5/0xa [ 2365.411553] should_failslab+0x5/0x20 [ 2365.411584] __kmalloc_node_track_caller+0x74/0x3b0 [ 2365.415994] ? netlink_dump+0x195/0x11f0 [ 2365.416933] __alloc_skb+0xb1/0x5b0 [ 2365.417709] netlink_dump+0x195/0x11f0 [ 2365.418545] ? netlink_deliver_tap+0xcc0/0xcc0 [ 2365.419524] ? security_capable+0x95/0xc0 [ 2365.420406] __netlink_dump_start+0x62e/0x8e0 [ 2365.421376] ? xfrm_compile_policy+0x610/0x610 [ 2365.422338] xfrm_user_rcv_msg+0x6bb/0x830 [ 2365.423241] ? copy_to_user_tmpl.part.0+0x610/0x610 [ 2365.424296] ? xfrm_compile_policy+0x610/0x610 [ 2365.425285] ? xfrm_dump_policy_start+0x20/0x20 [ 2365.426274] ? lock_acquire+0x197/0x470 [ 2365.427110] ? xfrm_netlink_rcv+0x61/0x90 [ 2365.427986] ? lock_release+0x680/0x680 [ 2365.428832] ? perf_trace_lock+0xac/0x490 [ 2365.429711] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2365.430828] ? SOFTIRQ_verbose+0x10/0x10 [ 2365.431684] ? __lockdep_reset_lock+0x180/0x180 [ 2365.432681] ? __mutex_lock+0x4fe/0x10b0 [ 2365.433545] ? __lockdep_reset_lock+0x180/0x180 [ 2365.434530] netlink_rcv_skb+0x14b/0x430 [ 2365.435389] ? copy_to_user_tmpl.part.0+0x610/0x610 [ 2365.436445] ? netlink_ack+0xab0/0xab0 [ 2365.437291] ? netlink_deliver_tap+0x1c4/0xcc0 [ 2365.438260] xfrm_netlink_rcv+0x70/0x90 [ 2365.439095] netlink_unicast+0x6ce/0xa00 [ 2365.439971] ? netlink_attachskb+0xab0/0xab0 [ 2365.440953] netlink_sendmsg+0x90f/0xe00 [ 2365.441819] ? netlink_unicast+0xa00/0xa00 [ 2365.442726] ? netlink_unicast+0xa00/0xa00 [ 2365.443619] __sock_sendmsg+0x154/0x190 [ 2365.444464] ____sys_sendmsg+0x70d/0x870 [ 2365.445348] ? sock_write_iter+0x3d0/0x3d0 [ 2365.446230] ? do_recvmmsg+0x6d0/0x6d0 [ 2365.447057] ? SOFTIRQ_verbose+0x10/0x10 [ 2365.447909] ? lock_downgrade+0x6d0/0x6d0 [ 2365.448796] ? __lockdep_reset_lock+0x180/0x180 [ 2365.449770] ? SOFTIRQ_verbose+0x10/0x10 [ 2365.450630] ___sys_sendmsg+0xf3/0x170 [ 2365.451460] ? sendmsg_copy_msghdr+0x160/0x160 [ 2365.452424] ? __fget_files+0x2cf/0x520 [ 2365.453276] ? lock_downgrade+0x6d0/0x6d0 [ 2365.454155] ? find_held_lock+0x2c/0x110 [ 2365.455022] ? __fget_files+0x2f8/0x520 [ 2365.455876] ? __fget_light+0xea/0x290 [ 2365.456727] __sys_sendmsg+0xe5/0x1b0 [ 2365.457529] ? __sys_sendmsg_sock+0x40/0x40 [ 2365.458449] ? rcu_read_lock_any_held+0x75/0xa0 [ 2365.459479] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2365.460584] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2365.461673] ? trace_hardirqs_on+0x5b/0x180 [ 2365.462585] do_syscall_64+0x33/0x40 [ 2365.463377] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2365.464451] RIP: 0033:0x7f5bc02e3b19 [ 2365.465250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2365.469119] RSP: 002b:00007f5bbd859188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2365.470712] RAX: ffffffffffffffda RBX: 00007f5bc03f6f60 RCX: 00007f5bc02e3b19 [ 2365.472206] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 2365.473714] RBP: 00007f5bbd8591d0 R08: 0000000000000000 R09: 0000000000000000 [ 2365.475211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2365.476689] R13: 00007ffd61fe3dcf R14: 00007f5bbd859300 R15: 0000000000022000 [ 2365.486743] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 09:30:56 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r4, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:30:56 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) (fail_nth: 10) 09:30:56 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195be945b99b06fab0609"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x185680, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:30:56 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x8}, 0x0) 09:30:57 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x50}}, 0x0) 09:30:57 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r3, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r4, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:30:57 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) (fail_nth: 13) syz_io_uring_setup(0x0, 0x0, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, 0x0, &(0x7f0000000680)) syz_io_uring_setup(0x208a, 0x0, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 09:30:57 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0xc0}}, 0x0) 09:30:57 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[], 0x50}}, 0x0) [ 2365.549962] FAULT_INJECTION: forcing a failure. [ 2365.549962] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2365.552513] CPU: 1 PID: 11878 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 2365.553990] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2365.555726] Call Trace: [ 2365.556287] dump_stack+0x107/0x167 [ 2365.557072] should_fail.cold+0x5/0xa [ 2365.557883] __alloc_pages_nodemask+0x182/0x600 [ 2365.558874] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2365.560148] ? cap_capable+0x1cd/0x230 [ 2365.560999] alloc_pages_current+0x187/0x280 [ 2365.561928] __get_free_pages+0xc/0xa0 [ 2365.562750] io_uring_setup+0xf9a/0x2980 [ 2365.563619] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2365.564687] ? wait_for_completion_io+0x270/0x270 [ 2365.565751] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2365.566864] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2365.567964] do_syscall_64+0x33/0x40 [ 2365.568759] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2365.569839] RIP: 0033:0x7fd0bb875b19 [ 2365.570622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2365.574505] RSP: 002b:00007fd0b8dca108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2365.576107] RAX: ffffffffffffffda RBX: 00007fd0bb989020 RCX: 00007fd0bb875b19 [ 2365.577613] RDX: 000000002080d000 RSI: 0000000020000080 RDI: 0000000000002726 [ 2365.579119] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2365.580636] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000180 [ 2365.582158] R13: 000000002080d000 R14: 0000000020000100 R15: 0000000020ffc000 09:30:57 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0xf}, 0x0) 09:30:57 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0xec0}}, 0x0) 09:30:57 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[], 0x50}}, 0x0) 09:30:57 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0xf0}, 0x0) 09:30:57 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[], 0x50}}, 0x0) 09:30:57 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x33fe0}}, 0x0) 09:30:57 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) (fail_nth: 11) [ 2365.877181] FAULT_INJECTION: forcing a failure. [ 2365.877181] name failslab, interval 1, probability 0, space 0, times 0 [ 2365.879721] CPU: 1 PID: 11899 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2365.881196] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2365.882950] Call Trace: [ 2365.883514] dump_stack+0x107/0x167 [ 2365.884291] should_fail.cold+0x5/0xa [ 2365.885111] ? create_object.isra.0+0x3a/0xa30 [ 2365.886082] should_failslab+0x5/0x20 [ 2365.886886] kmem_cache_alloc+0x5b/0x310 [ 2365.887761] create_object.isra.0+0x3a/0xa30 [ 2365.888691] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2365.889798] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2365.890873] ? netlink_dump+0x195/0x11f0 [ 2365.891742] __alloc_skb+0xb1/0x5b0 [ 2365.892527] netlink_dump+0x195/0x11f0 [ 2365.893370] ? netlink_deliver_tap+0xcc0/0xcc0 [ 2365.894352] ? security_capable+0x95/0xc0 [ 2365.895234] __netlink_dump_start+0x62e/0x8e0 [ 2365.896190] ? xfrm_compile_policy+0x610/0x610 [ 2365.897166] xfrm_user_rcv_msg+0x6bb/0x830 [ 2365.898067] ? copy_to_user_tmpl.part.0+0x610/0x610 [ 2365.899129] ? xfrm_compile_policy+0x610/0x610 [ 2365.900089] ? xfrm_dump_policy_start+0x20/0x20 [ 2365.901121] ? lock_acquire+0x197/0x470 [ 2365.901963] ? xfrm_netlink_rcv+0x61/0x90 [ 2365.902848] ? lock_release+0x680/0x680 [ 2365.903691] ? perf_trace_lock+0xac/0x490 [ 2365.904574] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2365.905698] ? SOFTIRQ_verbose+0x10/0x10 [ 2365.906557] ? __lockdep_reset_lock+0x180/0x180 [ 2365.907552] ? __mutex_lock+0x4fe/0x10b0 [ 2365.908413] ? __lockdep_reset_lock+0x180/0x180 [ 2365.909417] netlink_rcv_skb+0x14b/0x430 [ 2365.910281] ? copy_to_user_tmpl.part.0+0x610/0x610 [ 2365.911337] ? netlink_ack+0xab0/0xab0 [ 2365.912181] ? netlink_deliver_tap+0x1c4/0xcc0 [ 2365.913170] xfrm_netlink_rcv+0x70/0x90 [ 2365.914017] netlink_unicast+0x6ce/0xa00 [ 2365.914883] ? netlink_attachskb+0xab0/0xab0 [ 2365.915831] netlink_sendmsg+0x90f/0xe00 [ 2365.916718] ? netlink_unicast+0xa00/0xa00 [ 2365.917636] ? netlink_unicast+0xa00/0xa00 [ 2365.918533] __sock_sendmsg+0x154/0x190 [ 2365.919381] ____sys_sendmsg+0x70d/0x870 [ 2365.920247] ? sock_write_iter+0x3d0/0x3d0 [ 2365.921156] ? do_recvmmsg+0x6d0/0x6d0 [ 2365.921989] ? SOFTIRQ_verbose+0x10/0x10 [ 2365.922849] ? lock_downgrade+0x6d0/0x6d0 [ 2365.923729] ? __lockdep_reset_lock+0x180/0x180 [ 2365.924724] ? SOFTIRQ_verbose+0x10/0x10 [ 2365.925591] ___sys_sendmsg+0xf3/0x170 [ 2365.926418] ? sendmsg_copy_msghdr+0x160/0x160 [ 2365.927399] ? __fget_files+0x2cf/0x520 [ 2365.928241] ? lock_downgrade+0x6d0/0x6d0 [ 2365.929132] ? find_held_lock+0x2c/0x110 [ 2365.930008] ? __fget_files+0x2f8/0x520 [ 2365.930859] ? __fget_light+0xea/0x290 [ 2365.931692] __sys_sendmsg+0xe5/0x1b0 [ 2365.932498] ? __sys_sendmsg_sock+0x40/0x40 [ 2365.933419] ? rcu_read_lock_any_held+0x75/0xa0 [ 2365.934429] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2365.935537] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2365.936624] ? trace_hardirqs_on+0x5b/0x180 [ 2365.937551] do_syscall_64+0x33/0x40 [ 2365.938345] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2365.939429] RIP: 0033:0x7f5bc02e3b19 [ 2365.940225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2365.944144] RSP: 002b:00007f5bbd859188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2365.945772] RAX: ffffffffffffffda RBX: 00007f5bc03f6f60 RCX: 00007f5bc02e3b19 [ 2365.947293] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 2365.948813] RBP: 00007f5bbd8591d0 R08: 0000000000000000 R09: 0000000000000000 [ 2365.950325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2365.951834] R13: 00007ffd61fe3dcf R14: 00007f5bbd859300 R15: 0000000000022000 [ 2365.953489] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2366.240253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2366.241559] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2366.345697] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:31:12 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x20003710}}, 0x0) 09:31:12 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) (fail_nth: 14) syz_io_uring_setup(0x0, 0x0, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, 0x0, &(0x7f0000000680)) syz_io_uring_setup(0x208a, 0x0, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 09:31:12 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x2d1}, 0x0) 09:31:12 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r3, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r4, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:31:12 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r4, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r5, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:31:12 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB], 0x50}}, 0x0) 09:31:12 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) (fail_nth: 12) 09:31:12 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195be945b99b06fab0609"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x185680, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:31:12 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB], 0x50}}, 0x0) [ 2381.178057] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2381.179324] FAULT_INJECTION: forcing a failure. [ 2381.179324] name failslab, interval 1, probability 0, space 0, times 0 [ 2381.180903] CPU: 1 PID: 11908 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 2381.181876] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2381.183016] Call Trace: [ 2381.183398] dump_stack+0x107/0x167 [ 2381.183902] should_fail.cold+0x5/0xa [ 2381.184428] ? io_rsrc_node_switch_start.part.0+0x43/0x250 [ 2381.185224] should_failslab+0x5/0x20 [ 2381.185756] kmem_cache_alloc_trace+0x55/0x320 [ 2381.186398] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 2381.187156] io_uring_setup+0x14f6/0x2980 [ 2381.187735] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2381.188431] ? wait_for_completion_io+0x270/0x270 [ 2381.189130] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2381.189859] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2381.190579] do_syscall_64+0x33/0x40 [ 2381.191096] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2381.191804] RIP: 0033:0x7fd0bb875b19 [ 2381.192322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2381.194866] RSP: 002b:00007fd0b8deb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2381.195923] RAX: ffffffffffffffda RBX: 00007fd0bb988f60 RCX: 00007fd0bb875b19 [ 2381.196908] RDX: 000000002080d000 RSI: 0000000020000080 RDI: 0000000000002726 [ 2381.197905] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2381.198885] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000180 [ 2381.199861] R13: 000000002080d000 R14: 0000000020000100 R15: 0000000020ffc000 [ 2381.200242] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2381.214190] FAULT_INJECTION: forcing a failure. [ 2381.214190] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2381.217216] CPU: 0 PID: 11914 Comm: syz-executor.4 Not tainted 5.10.247 #1 [ 2381.218892] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2381.220907] Call Trace: [ 2381.221553] dump_stack+0x107/0x167 [ 2381.222437] should_fail.cold+0x5/0xa [ 2381.223375] _copy_to_user+0x2e/0x180 [ 2381.224311] simple_read_from_buffer+0xcc/0x160 [ 2381.225447] proc_fail_nth_read+0x198/0x230 [ 2381.226496] ? proc_sessionid_read+0x230/0x230 [ 2381.227606] ? security_file_permission+0xb1/0xe0 [ 2381.228778] ? proc_sessionid_read+0x230/0x230 [ 2381.229890] vfs_read+0x228/0x620 [ 2381.230733] ksys_read+0x12d/0x260 [ 2381.231594] ? vfs_write+0xb10/0xb10 [ 2381.232493] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2381.233766] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2381.235013] do_syscall_64+0x33/0x40 [ 2381.235932] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2381.237177] RIP: 0033:0x7f5bc029669c [ 2381.238065] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2381.242494] RSP: 002b:00007f5bbd859170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2381.244309] RAX: ffffffffffffffda RBX: 0000000000000050 RCX: 00007f5bc029669c [ 2381.246017] RDX: 000000000000000f RSI: 00007f5bbd8591e0 RDI: 0000000000000004 [ 2381.247712] RBP: 00007f5bbd8591d0 R08: 0000000000000000 R09: 0000000000000000 [ 2381.249417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2381.251111] R13: 00007ffd61fe3dcf R14: 00007f5bbd859300 R15: 0000000000022000 09:31:12 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x7ffff000}}, 0x0) [ 2381.258872] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.6'. 09:31:12 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB], 0x50}}, 0x0) 09:31:12 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0xec0}, 0x0) 09:31:13 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) (fail_nth: 15) syz_io_uring_setup(0x0, 0x0, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, 0x0, &(0x7f0000000680)) syz_io_uring_setup(0x208a, 0x0, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 09:31:13 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0xf00}, 0x0) 09:31:13 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB='P\x00\x00\x00'], 0x50}}, 0x0) 09:31:13 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0xfffffdef}}, 0x0) [ 2381.484690] FAULT_INJECTION: forcing a failure. [ 2381.484690] name failslab, interval 1, probability 0, space 0, times 0 [ 2381.487534] CPU: 0 PID: 11929 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 2381.489251] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2381.491164] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11933 comm=syz-executor.1 [ 2381.491267] Call Trace: [ 2381.491304] dump_stack+0x107/0x167 [ 2381.491341] should_fail.cold+0x5/0xa [ 2381.496252] ? create_object.isra.0+0x3a/0xa30 [ 2381.497397] should_failslab+0x5/0x20 [ 2381.498346] kmem_cache_alloc+0x5b/0x310 [ 2381.499349] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2381.500838] create_object.isra.0+0x3a/0xa30 [ 2381.501940] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2381.503201] kmem_cache_alloc_trace+0x151/0x320 [ 2381.504379] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 2381.505728] io_uring_setup+0x14f6/0x2980 [ 2381.506781] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2381.508030] ? wait_for_completion_io+0x270/0x270 [ 2381.509286] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2381.510574] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2381.511860] do_syscall_64+0x33/0x40 [ 2381.512785] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2381.514057] RIP: 0033:0x7fd0bb875b19 [ 2381.514983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2381.519499] RSP: 002b:00007fd0b8deb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2381.521385] RAX: ffffffffffffffda RBX: 00007fd0bb988f60 RCX: 00007fd0bb875b19 [ 2381.523121] RDX: 000000002080d000 RSI: 0000000020000080 RDI: 0000000000002726 [ 2381.524868] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2381.526614] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000180 [ 2381.528366] R13: 000000002080d000 R14: 0000000020000100 R15: 0000000020ffc000 09:31:13 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) [ 2381.639965] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2381.998748] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2382.023471] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2382.029825] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2396.361484] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. 09:31:27 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r3, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r4, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:31:27 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB='P\x00\x00\x00'], 0x50}}, 0x0) 09:31:27 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195be945b99b06fab0609"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x185680, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:31:27 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) 09:31:27 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0xc00e}, 0x0) 09:31:27 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x8}, 0x0) 09:31:27 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) (fail_nth: 16) syz_io_uring_setup(0x0, 0x0, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, 0x0, &(0x7f0000000680)) syz_io_uring_setup(0x208a, 0x0, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 09:31:27 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r4, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r5, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) [ 2396.370578] FAULT_INJECTION: forcing a failure. [ 2396.370578] name failslab, interval 1, probability 0, space 0, times 0 [ 2396.373166] CPU: 1 PID: 11948 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 2396.374680] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2396.376499] Call Trace: [ 2396.377077] dump_stack+0x107/0x167 [ 2396.377883] should_fail.cold+0x5/0xa [ 2396.378709] ? create_object.isra.0+0x3a/0xa30 [ 2396.379693] should_failslab+0x5/0x20 [ 2396.380518] kmem_cache_alloc+0x5b/0x310 [ 2396.381418] create_object.isra.0+0x3a/0xa30 [ 2396.382387] kmemleak_alloc_percpu+0xa0/0x100 [ 2396.383363] pcpu_alloc+0x4e2/0x1240 [ 2396.384185] ? io_async_queue_proc+0x80/0x80 [ 2396.385136] percpu_ref_init+0x31/0x3d0 [ 2396.386019] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 2396.387192] io_uring_setup+0x14f6/0x2980 [ 2396.388100] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2396.389204] ? wait_for_completion_io+0x270/0x270 [ 2396.390274] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2396.391413] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2396.392538] do_syscall_64+0x33/0x40 [ 2396.393352] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2396.394459] RIP: 0033:0x7fd0bb875b19 [ 2396.395264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2396.399260] RSP: 002b:00007fd0b8deb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2396.399993] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2396.400896] RAX: ffffffffffffffda RBX: 00007fd0bb988f60 RCX: 00007fd0bb875b19 [ 2396.400909] RDX: 000000002080d000 RSI: 0000000020000080 RDI: 0000000000002726 [ 2396.400920] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2396.400940] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000180 [ 2396.408880] R13: 000000002080d000 R14: 0000000020000100 R15: 0000000020ffc000 [ 2396.412699] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2396.415438] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11950 comm=syz-executor.1 09:31:28 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x2, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) 09:31:28 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB='P\x00\x00\x00'], 0x50}}, 0x0) 09:31:28 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x19}, 0x0) 09:31:28 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0xd102}, 0x0) [ 2396.526714] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2396.528534] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=11960 comm=syz-executor.1 09:31:28 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="500000001500"], 0x50}}, 0x0) 09:31:28 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) 09:31:28 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x300}, 0x0) 09:31:28 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) (fail_nth: 17) syz_io_uring_setup(0x0, 0x0, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, 0x0, &(0x7f0000000680)) syz_io_uring_setup(0x208a, 0x0, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 2396.722839] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2396.727127] FAULT_INJECTION: forcing a failure. [ 2396.727127] name failslab, interval 1, probability 0, space 0, times 0 [ 2396.729582] CPU: 1 PID: 11973 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 2396.731066] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2396.732854] Call Trace: [ 2396.733445] dump_stack+0x107/0x167 [ 2396.734236] should_fail.cold+0x5/0xa [ 2396.735059] ? create_object.isra.0+0x3a/0xa30 [ 2396.736050] should_failslab+0x5/0x20 [ 2396.736873] kmem_cache_alloc+0x5b/0x310 [ 2396.737765] create_object.isra.0+0x3a/0xa30 [ 2396.738724] kmemleak_alloc_percpu+0xa0/0x100 [ 2396.739694] pcpu_alloc+0x4e2/0x1240 [ 2396.740521] ? io_async_queue_proc+0x80/0x80 [ 2396.741478] percpu_ref_init+0x31/0x3d0 [ 2396.742346] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 2396.743517] io_uring_setup+0x14f6/0x2980 [ 2396.744427] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2396.745530] ? wait_for_completion_io+0x270/0x270 [ 2396.746597] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2396.747728] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2396.748839] do_syscall_64+0x33/0x40 [ 2396.749660] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2396.750763] RIP: 0033:0x7fd0bb875b19 [ 2396.751562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2396.755543] RSP: 002b:00007fd0b8deb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2396.757175] RAX: ffffffffffffffda RBX: 00007fd0bb988f60 RCX: 00007fd0bb875b19 [ 2396.758717] RDX: 000000002080d000 RSI: 0000000020000080 RDI: 0000000000002726 [ 2396.760253] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2396.761782] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000180 [ 2396.763315] R13: 000000002080d000 R14: 0000000020000100 R15: 0000000020ffc000 [ 2397.216927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2397.235290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2397.251250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:31:43 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) 09:31:43 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x2}, 0x0) 09:31:43 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195be945b99b06fab0609"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x185680, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:31:43 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0xf000}, 0x0) 09:31:43 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="500000001500"], 0x50}}, 0x0) 09:31:43 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) (fail_nth: 18) syz_io_uring_setup(0x0, 0x0, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, 0x0, &(0x7f0000000680)) syz_io_uring_setup(0x208a, 0x0, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 2412.305561] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. 09:31:43 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r4, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r5, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:31:43 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r3, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r4, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) [ 2412.334848] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2412.338919] FAULT_INJECTION: forcing a failure. [ 2412.338919] name failslab, interval 1, probability 0, space 0, times 0 [ 2412.341289] CPU: 1 PID: 11990 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 2412.342742] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2412.344647] Call Trace: [ 2412.345288] dump_stack+0x107/0x167 [ 2412.346185] should_fail.cold+0x5/0xa [ 2412.347120] ? percpu_ref_init+0xd8/0x3d0 [ 2412.348123] should_failslab+0x5/0x20 [ 2412.349048] kmem_cache_alloc_trace+0x55/0x320 [ 2412.350172] ? io_async_queue_proc+0x80/0x80 [ 2412.351237] percpu_ref_init+0xd8/0x3d0 [ 2412.352222] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 2412.353549] io_uring_setup+0x14f6/0x2980 [ 2412.354575] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2412.355798] ? wait_for_completion_io+0x270/0x270 [ 2412.356989] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2412.358265] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2412.359512] do_syscall_64+0x33/0x40 [ 2412.360397] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2412.361507] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2412.361642] RIP: 0033:0x7fd0bb875b19 [ 2412.361665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2412.361685] RSP: 002b:00007fd0b8deb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2412.370578] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2412.370657] RAX: ffffffffffffffda RBX: 00007fd0bb988f60 RCX: 00007fd0bb875b19 [ 2412.370671] RDX: 000000002080d000 RSI: 0000000020000080 RDI: 0000000000002726 [ 2412.370684] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2412.370706] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000180 [ 2412.379168] R13: 000000002080d000 R14: 0000000020000100 R15: 0000000020ffc000 09:31:44 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="500000001500"], 0x50}}, 0x0) 09:31:44 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x8}, 0x0) 09:31:44 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x80000}, 0x0) 09:31:44 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x5, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) [ 2412.490628] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. 09:31:44 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x6, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) 09:31:44 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) (fail_nth: 19) syz_io_uring_setup(0x0, 0x0, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, 0x0, &(0x7f0000000680)) syz_io_uring_setup(0x208a, 0x0, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 09:31:44 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0xc9ffff}, 0x0) 09:31:44 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0xf}, 0x0) 09:31:44 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x185680, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r1, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) [ 2412.653646] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2412.665349] FAULT_INJECTION: forcing a failure. [ 2412.665349] name failslab, interval 1, probability 0, space 0, times 0 [ 2412.668038] CPU: 1 PID: 12008 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 2412.669627] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2412.671489] Call Trace: [ 2412.672085] dump_stack+0x107/0x167 [ 2412.672905] should_fail.cold+0x5/0xa [ 2412.673789] ? create_object.isra.0+0x3a/0xa30 [ 2412.674820] should_failslab+0x5/0x20 [ 2412.675681] kmem_cache_alloc+0x5b/0x310 [ 2412.676619] create_object.isra.0+0x3a/0xa30 [ 2412.677588] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2412.678724] kmem_cache_alloc_trace+0x151/0x320 [ 2412.679775] ? io_async_queue_proc+0x80/0x80 [ 2412.680761] percpu_ref_init+0xd8/0x3d0 [ 2412.681674] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 2412.682919] io_uring_setup+0x14f6/0x2980 [ 2412.683888] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2412.685023] ? wait_for_completion_io+0x270/0x270 [ 2412.686165] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2412.687351] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2412.688507] do_syscall_64+0x33/0x40 [ 2412.689371] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2412.690555] RIP: 0033:0x7fd0bb875b19 [ 2412.691382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2412.695492] RSP: 002b:00007fd0b8deb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2412.697173] RAX: ffffffffffffffda RBX: 00007fd0bb988f60 RCX: 00007fd0bb875b19 [ 2412.698768] RDX: 000000002080d000 RSI: 0000000020000080 RDI: 0000000000002726 [ 2412.700316] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2412.701923] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000180 [ 2412.703529] R13: 000000002080d000 R14: 0000000020000100 R15: 0000000020ffc000 [ 2412.724350] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2413.157099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2413.180709] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2413.196247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:32:00 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) (fail_nth: 20) syz_io_uring_setup(0x0, 0x0, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, 0x0, &(0x7f0000000680)) syz_io_uring_setup(0x208a, 0x0, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 09:32:00 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195be945b99b06fab0609"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x185680, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:32:00 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0xf0ffff}, 0x0) 09:32:00 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) 09:32:00 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0xf0}, 0x0) 09:32:00 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x185680, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r1, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:32:00 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r5, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:32:00 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r3, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r4, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) [ 2429.402459] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2429.409092] FAULT_INJECTION: forcing a failure. [ 2429.409092] name failslab, interval 1, probability 0, space 0, times 0 [ 2429.409796] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2429.411536] CPU: 1 PID: 12030 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 2429.414678] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2429.416363] Call Trace: [ 2429.416907] dump_stack+0x107/0x167 [ 2429.417656] should_fail.cold+0x5/0xa [ 2429.418443] ? create_object.isra.0+0x3a/0xa30 [ 2429.419404] should_failslab+0x5/0x20 [ 2429.420205] kmem_cache_alloc+0x5b/0x310 [ 2429.421052] create_object.isra.0+0x3a/0xa30 [ 2429.421983] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2429.422256] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2429.423053] kmem_cache_alloc_trace+0x151/0x320 [ 2429.423078] ? io_async_queue_proc+0x80/0x80 [ 2429.426655] percpu_ref_init+0xd8/0x3d0 [ 2429.427471] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 2429.428576] io_uring_setup+0x14f6/0x2980 [ 2429.429430] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2429.430483] ? wait_for_completion_io+0x270/0x270 [ 2429.431536] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2429.432640] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2429.433730] do_syscall_64+0x33/0x40 [ 2429.434507] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2429.435585] RIP: 0033:0x7fd0bb875b19 [ 2429.436361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2429.440216] RSP: 002b:00007fd0b8deb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2429.441805] RAX: ffffffffffffffda RBX: 00007fd0bb988f60 RCX: 00007fd0bb875b19 [ 2429.443254] RDX: 000000002080d000 RSI: 0000000020000080 RDI: 0000000000002726 [ 2429.444696] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2429.446188] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000180 [ 2429.447638] R13: 000000002080d000 R14: 0000000020000100 R15: 0000000020ffc000 [ 2429.455913] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2429.469132] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. 09:32:01 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x369}, 0x0) 09:32:01 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x1000000}, 0x0) 09:32:01 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x8, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) 09:32:01 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) (fail_nth: 21) syz_io_uring_setup(0x0, 0x0, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, 0x0, &(0x7f0000000680)) syz_io_uring_setup(0x208a, 0x0, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 2429.577076] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. 09:32:01 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x9, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) 09:32:01 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0xec0}, 0x0) [ 2429.660440] FAULT_INJECTION: forcing a failure. [ 2429.660440] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2429.662942] CPU: 0 PID: 12044 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 2429.664402] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2429.666133] Call Trace: [ 2429.666707] dump_stack+0x107/0x167 [ 2429.667462] should_fail.cold+0x5/0xa [ 2429.668260] _copy_to_user+0x2e/0x180 [ 2429.669060] io_uring_setup+0x11b5/0x2980 [ 2429.669948] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2429.670983] ? wait_for_completion_io+0x270/0x270 [ 2429.672030] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2429.673159] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2429.674269] do_syscall_64+0x33/0x40 [ 2429.675067] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2429.676159] RIP: 0033:0x7fd0bb875b19 [ 2429.676948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2429.680809] RSP: 002b:00007fd0b8deb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2429.682387] RAX: ffffffffffffffda RBX: 00007fd0bb988f60 RCX: 00007fd0bb875b19 [ 2429.683911] RDX: 000000002080d000 RSI: 0000000020000080 RDI: 0000000000002726 [ 2429.685421] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2429.686885] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000180 [ 2429.688336] R13: 000000002080d000 R14: 0000000020000100 R15: 0000000020ffc000 09:32:01 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x2000000}, 0x0) [ 2429.732264] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. 09:32:01 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0xf00}, 0x0) [ 2430.221053] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2430.236804] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2430.273520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:32:17 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x185680, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r1, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:32:17 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0xf, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) 09:32:17 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195be945b99b06fab0609"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x185680, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:32:17 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0xf000000}, 0x0) 09:32:17 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x6903}, 0x0) 09:32:17 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) (fail_nth: 22) syz_io_uring_setup(0x0, 0x0, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, 0x0, &(0x7f0000000680)) syz_io_uring_setup(0x208a, 0x0, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 09:32:17 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r5, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:32:17 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r3, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r4, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) [ 2446.041397] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2446.053543] FAULT_INJECTION: forcing a failure. [ 2446.053543] name failslab, interval 1, probability 0, space 0, times 0 [ 2446.054878] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2446.056018] CPU: 1 PID: 12070 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 2446.057919] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2446.058747] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2446.058754] Call Trace: [ 2446.058782] dump_stack+0x107/0x167 [ 2446.058808] should_fail.cold+0x5/0xa [ 2446.063929] ? create_object.isra.0+0x3a/0xa30 [ 2446.064915] should_failslab+0x5/0x20 [ 2446.065742] kmem_cache_alloc+0x5b/0x310 [ 2446.066635] create_object.isra.0+0x3a/0xa30 [ 2446.067581] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2446.068683] kmem_cache_alloc+0x159/0x310 [ 2446.069587] __d_alloc+0x2a/0x990 [ 2446.070353] ? find_held_lock+0x2c/0x110 [ 2446.071211] d_alloc_pseudo+0x19/0x70 [ 2446.072039] alloc_file_pseudo+0xce/0x250 [ 2446.072946] ? trace_hardirqs_on+0x5b/0x180 [ 2446.073874] ? alloc_file+0x5a0/0x5a0 [ 2446.074731] anon_inode_getfile+0xc8/0x1f0 [ 2446.075652] io_uring_setup+0x138b/0x2980 [ 2446.076556] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2446.077651] ? wait_for_completion_io+0x270/0x270 [ 2446.078725] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2446.079862] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2446.080962] do_syscall_64+0x33/0x40 [ 2446.081761] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2446.082861] RIP: 0033:0x7fd0bb875b19 [ 2446.083664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2446.087585] RSP: 002b:00007fd0b8deb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2446.089211] RAX: ffffffffffffffda RBX: 00007fd0bb988f60 RCX: 00007fd0bb875b19 [ 2446.090739] RDX: 000000002080d000 RSI: 0000000020000080 RDI: 0000000000002726 [ 2446.092274] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2446.093791] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000180 [ 2446.095329] R13: 000000002080d000 R14: 0000000020000100 R15: 0000000020ffc000 [ 2446.109777] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2446.111687] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.6'. 09:32:17 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0xc00e}, 0x0) 09:32:17 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x9effffff}, 0x0) 09:32:17 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x48, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) 09:32:17 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0xf000}, 0x0) [ 2446.220484] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. 09:32:17 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0xc00e0000}, 0x0) 09:32:17 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x80000}, 0x0) 09:32:17 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x4c, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) 09:32:17 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) (fail_nth: 23) syz_io_uring_setup(0x0, 0x0, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, 0x0, &(0x7f0000000680)) syz_io_uring_setup(0x208a, 0x0, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 2446.390663] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2446.405776] FAULT_INJECTION: forcing a failure. [ 2446.405776] name failslab, interval 1, probability 0, space 0, times 0 [ 2446.407198] CPU: 0 PID: 12088 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 2446.407994] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2446.409000] Call Trace: [ 2446.409324] dump_stack+0x107/0x167 [ 2446.409759] should_fail.cold+0x5/0xa [ 2446.410213] ? __alloc_file+0x21/0x320 [ 2446.410668] should_failslab+0x5/0x20 [ 2446.411112] kmem_cache_alloc+0x5b/0x310 [ 2446.411594] __alloc_file+0x21/0x320 [ 2446.412030] alloc_empty_file+0x6d/0x170 [ 2446.412536] alloc_file+0x5e/0x5a0 [ 2446.412959] alloc_file_pseudo+0x16a/0x250 [ 2446.413451] ? alloc_file+0x5a0/0x5a0 [ 2446.413946] anon_inode_getfile+0xc8/0x1f0 [ 2446.414454] io_uring_setup+0x138b/0x2980 [ 2446.414949] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2446.415536] ? wait_for_completion_io+0x270/0x270 [ 2446.416160] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2446.416768] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2446.417372] do_syscall_64+0x33/0x40 [ 2446.417808] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2446.418404] RIP: 0033:0x7fd0bb875b19 [ 2446.418863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2446.420957] RSP: 002b:00007fd0b8deb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2446.421830] RAX: ffffffffffffffda RBX: 00007fd0bb988f60 RCX: 00007fd0bb875b19 [ 2446.422649] RDX: 000000002080d000 RSI: 0000000020000080 RDI: 0000000000002726 [ 2446.423517] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2446.424331] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000180 [ 2446.425197] R13: 000000002080d000 R14: 0000000020000100 R15: 0000000020ffc000 [ 2446.877205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2446.887442] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2446.931870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2462.363041] FAULT_INJECTION: forcing a failure. [ 2462.363041] name failslab, interval 1, probability 0, space 0, times 0 [ 2462.364475] CPU: 1 PID: 12095 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 2462.365506] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2462.366775] Call Trace: [ 2462.367110] dump_stack+0x107/0x167 [ 2462.367663] should_fail.cold+0x5/0xa [ 2462.368240] ? create_object.isra.0+0x3a/0xa30 [ 2462.368934] should_failslab+0x5/0x20 [ 2462.369515] kmem_cache_alloc+0x5b/0x310 [ 2462.370138] create_object.isra.0+0x3a/0xa30 [ 2462.370821] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2462.371592] kmem_cache_alloc+0x159/0x310 [ 2462.372228] __alloc_file+0x21/0x320 [ 2462.372788] alloc_empty_file+0x6d/0x170 [ 2462.373406] alloc_file+0x5e/0x5a0 [ 2462.373953] alloc_file_pseudo+0x16a/0x250 [ 2462.374604] ? alloc_file+0x5a0/0x5a0 09:32:33 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0xd1020000}, 0x0) 09:32:33 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32, @ANYBLOB], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r3, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r4, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:32:33 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r5 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r5, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:32:33 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0xc9ffff}, 0x0) 09:32:33 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) (fail_nth: 24) syz_io_uring_setup(0x0, 0x0, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, 0x0, &(0x7f0000000680)) syz_io_uring_setup(0x208a, 0x0, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 2462.375442] anon_inode_getfile+0xc8/0x1f0 [ 2462.376308] io_uring_setup+0x138b/0x2980 [ 2462.376635] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2462.376815] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2462.379207] ? wait_for_completion_io+0x270/0x270 [ 2462.379799] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2462.380417] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2462.381025] do_syscall_64+0x33/0x40 [ 2462.381465] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2462.382068] RIP: 0033:0x7fd0bb875b19 [ 2462.382516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2462.384668] RSP: 002b:00007fd0b8deb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2462.385561] RAX: ffffffffffffffda RBX: 00007fd0bb988f60 RCX: 00007fd0bb875b19 [ 2462.386404] RDX: 000000002080d000 RSI: 0000000020000080 RDI: 0000000000002726 [ 2462.387238] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2462.388077] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000180 [ 2462.388911] R13: 000000002080d000 R14: 0000000020000100 R15: 0000000020ffc000 [ 2462.412509] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2462.434811] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2462.434848] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.6'. [ 2462.448103] FAULT_INJECTION: forcing a failure. [ 2462.448103] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2462.449487] CPU: 1 PID: 12107 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 2462.450286] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2462.451237] Call Trace: [ 2462.451544] dump_stack+0x107/0x167 [ 2462.451967] should_fail.cold+0x5/0xa [ 2462.452407] _copy_from_user+0x2e/0x1b0 [ 2462.452867] __copy_msghdr_from_user+0x91/0x4b0 [ 2462.453397] ? __ia32_sys_shutdown+0x80/0x80 [ 2462.453900] ? perf_trace_lock+0xac/0x490 [ 2462.454383] ? SOFTIRQ_verbose+0x10/0x10 [ 2462.454853] ? __lock_acquire+0xbb1/0x5b00 09:32:34 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x68, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) 09:32:34 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195be945b99b06fab0609"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x185680, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r1, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:32:34 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50000000150023"], 0x50}}, 0x0) (fail_nth: 1) 09:32:34 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0xf0ffff}, 0x0) 09:32:34 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) (fail_nth: 25) syz_io_uring_setup(0x0, 0x0, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, 0x0, &(0x7f0000000680)) syz_io_uring_setup(0x208a, 0x0, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 2462.455566] sendmsg_copy_msghdr+0xa1/0x160 [ 2462.456178] ? do_recvmmsg+0x6d0/0x6d0 [ 2462.456626] ? perf_trace_lock+0xac/0x490 [ 2462.457097] ? SOFTIRQ_verbose+0x10/0x10 [ 2462.457560] ? lock_downgrade+0x6d0/0x6d0 [ 2462.458036] ? __lockdep_reset_lock+0x180/0x180 [ 2462.458574] ? SOFTIRQ_verbose+0x10/0x10 [ 2462.459071] ___sys_sendmsg+0xc6/0x170 [ 2462.459517] ? sendmsg_copy_msghdr+0x160/0x160 [ 2462.460045] ? __fget_files+0x2cf/0x520 [ 2462.460500] ? lock_downgrade+0x6d0/0x6d0 [ 2462.460978] ? find_held_lock+0x2c/0x110 [ 2462.461480] ? __fget_files+0x2f8/0x520 [ 2462.461944] ? __fget_light+0xea/0x290 [ 2462.462400] __sys_sendmsg+0xe5/0x1b0 [ 2462.462835] ? __sys_sendmsg_sock+0x40/0x40 [ 2462.463330] ? rcu_read_lock_any_held+0x75/0xa0 [ 2462.463863] ? fput_many+0x2f/0x1a0 [ 2462.464282] ? ksys_write+0x1a9/0x260 [ 2462.464719] ? __ia32_sys_read+0xb0/0xb0 [ 2462.465187] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2462.465785] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2462.466387] ? trace_hardirqs_on+0x5b/0x180 [ 2462.466883] do_syscall_64+0x33/0x40 [ 2462.467311] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2462.467896] RIP: 0033:0x7ffbfb165b19 [ 2462.468344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2462.470441] RSP: 002b:00007ffbf86db188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2462.471315] RAX: ffffffffffffffda RBX: 00007ffbfb278f60 RCX: 00007ffbfb165b19 [ 2462.472170] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 2462.472985] RBP: 00007ffbf86db1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2462.473838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2462.474654] R13: 00007ffd61ec4e2f R14: 00007ffbf86db300 R15: 0000000000022000 [ 2462.487791] FAULT_INJECTION: forcing a failure. [ 2462.487791] name failslab, interval 1, probability 0, space 0, times 0 [ 2462.489151] CPU: 1 PID: 12110 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 2462.489923] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2462.490901] Call Trace: [ 2462.491200] dump_stack+0x107/0x167 [ 2462.491611] should_fail.cold+0x5/0xa [ 2462.492043] ? security_file_alloc+0x34/0x170 [ 2462.492545] should_failslab+0x5/0x20 [ 2462.492999] kmem_cache_alloc+0x5b/0x310 [ 2462.493455] security_file_alloc+0x34/0x170 [ 2462.493938] __alloc_file+0xb7/0x320 [ 2462.494358] alloc_empty_file+0x6d/0x170 [ 2462.494809] alloc_file+0x5e/0x5a0 [ 2462.495207] alloc_file_pseudo+0x16a/0x250 [ 2462.495710] ? alloc_file+0x5a0/0x5a0 [ 2462.496264] anon_inode_getfile+0xc8/0x1f0 [ 2462.496871] io_uring_setup+0x138b/0x2980 [ 2462.497469] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2462.498199] ? wait_for_completion_io+0x270/0x270 [ 2462.498915] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2462.499672] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2462.500423] do_syscall_64+0x33/0x40 [ 2462.500969] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2462.501708] RIP: 0033:0x7fd0bb875b19 [ 2462.502248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2462.504867] RSP: 002b:00007fd0b8deb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2462.505952] RAX: ffffffffffffffda RBX: 00007fd0bb988f60 RCX: 00007fd0bb875b19 [ 2462.506972] RDX: 000000002080d000 RSI: 0000000020000080 RDI: 0000000000002726 [ 2462.508000] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2462.508836] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000180 [ 2462.509858] R13: 000000002080d000 R14: 0000000020000100 R15: 0000000020ffc000 09:32:34 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0xf0ffffff}, 0x0) 09:32:34 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x6c, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) 09:32:34 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0xfffff000}, 0x0) [ 2462.626641] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2463.199089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2463.224642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:32:50 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r3, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:32:50 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x74, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) 09:32:50 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32, @ANYBLOB], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r3, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r4, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:32:50 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) (fail_nth: 26) syz_io_uring_setup(0x0, 0x0, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, 0x0, &(0x7f0000000680)) syz_io_uring_setup(0x208a, 0x0, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 09:32:50 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x1000000}, 0x0) 09:32:50 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50000000150023"], 0x50}}, 0x0) (fail_nth: 2) 09:32:50 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195be945b99b06fab0609"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x185680, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r1, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:32:50 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0xffffff7f}, 0x0) [ 2478.630503] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2478.642723] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2478.642842] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2478.646345] FAULT_INJECTION: forcing a failure. [ 2478.646345] name failslab, interval 1, probability 0, space 0, times 0 [ 2478.647862] CPU: 1 PID: 12134 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 2478.648775] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2478.649869] Call Trace: [ 2478.650221] dump_stack+0x107/0x167 [ 2478.650711] should_fail.cold+0x5/0xa [ 2478.651230] ? create_object.isra.0+0x3a/0xa30 [ 2478.651861] FAULT_INJECTION: forcing a failure. [ 2478.651861] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2478.652361] should_failslab+0x5/0x20 [ 2478.652385] kmem_cache_alloc+0x5b/0x310 [ 2478.652419] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 2478.658155] create_object.isra.0+0x3a/0xa30 [ 2478.659282] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2478.660585] kmem_cache_alloc+0x159/0x310 [ 2478.661655] security_file_alloc+0x34/0x170 [ 2478.662769] __alloc_file+0xb7/0x320 [ 2478.663710] alloc_empty_file+0x6d/0x170 [ 2478.664750] alloc_file+0x5e/0x5a0 [ 2478.665662] alloc_file_pseudo+0x16a/0x250 [ 2478.666746] ? alloc_file+0x5a0/0x5a0 [ 2478.667573] anon_inode_getfile+0xc8/0x1f0 [ 2478.668254] io_uring_setup+0x138b/0x2980 [ 2478.668921] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2478.669720] ? wait_for_completion_io+0x270/0x270 [ 2478.670517] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2478.671340] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2478.672015] do_syscall_64+0x33/0x40 [ 2478.672504] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2478.673173] RIP: 0033:0x7fd0bb875b19 [ 2478.673665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2478.676082] RSP: 002b:00007fd0b8deb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2478.677077] RAX: ffffffffffffffda RBX: 00007fd0bb988f60 RCX: 00007fd0bb875b19 [ 2478.678016] RDX: 000000002080d000 RSI: 0000000020000080 RDI: 0000000000002726 [ 2478.678969] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2478.679922] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000180 [ 2478.680858] R13: 000000002080d000 R14: 0000000020000100 R15: 0000000020ffc000 [ 2478.681825] CPU: 0 PID: 12136 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 2478.683435] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2478.685328] Call Trace: [ 2478.685935] dump_stack+0x107/0x167 [ 2478.686788] should_fail.cold+0x5/0xa [ 2478.687684] _copy_from_user+0x2e/0x1b0 [ 2478.688594] iovec_from_user+0x141/0x400 [ 2478.689530] __import_iovec+0x67/0x590 [ 2478.690416] ? __ia32_sys_shutdown+0x80/0x80 [ 2478.691419] ? perf_trace_lock+0xac/0x490 [ 2478.692373] import_iovec+0x83/0xb0 [ 2478.693216] sendmsg_copy_msghdr+0x131/0x160 [ 2478.694225] ? do_recvmmsg+0x6d0/0x6d0 [ 2478.695129] ? SOFTIRQ_verbose+0x10/0x10 [ 2478.696057] ? lock_downgrade+0x6d0/0x6d0 [ 2478.697015] ? __lockdep_reset_lock+0x180/0x180 [ 2478.698067] ? SOFTIRQ_verbose+0x10/0x10 [ 2478.698998] ___sys_sendmsg+0xc6/0x170 [ 2478.699881] ? sendmsg_copy_msghdr+0x160/0x160 [ 2478.700918] ? __fget_files+0x2cf/0x520 [ 2478.701815] ? lock_downgrade+0x6d0/0x6d0 [ 2478.702764] ? find_held_lock+0x2c/0x110 [ 2478.703697] ? __fget_files+0x2f8/0x520 [ 2478.704606] ? __fget_light+0xea/0x290 [ 2478.705493] __sys_sendmsg+0xe5/0x1b0 [ 2478.706356] ? __sys_sendmsg_sock+0x40/0x40 [ 2478.707331] ? rcu_read_lock_any_held+0x75/0xa0 [ 2478.708383] ? fput_many+0x2f/0x1a0 [ 2478.709198] ? ksys_write+0x1a9/0x260 [ 2478.710068] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2478.711259] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2478.712418] ? trace_hardirqs_on+0x5b/0x180 [ 2478.713392] do_syscall_64+0x33/0x40 [ 2478.714232] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2478.715395] RIP: 0033:0x7ffbfb165b19 [ 2478.716240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2478.720359] RSP: 002b:00007ffbf86db188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2478.722059] RAX: ffffffffffffffda RBX: 00007ffbfb278f60 RCX: 00007ffbfb165b19 [ 2478.723656] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 2478.725255] RBP: 00007ffbf86db1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2478.726856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2478.728443] R13: 00007ffd61ec4e2f R14: 00007ffbf86db300 R15: 0000000000022000 09:32:50 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0xffffff9e}, 0x0) 09:32:50 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x2000000}, 0x0) 09:32:50 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x7a, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) 09:32:50 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0xfffffff0}, 0x0) [ 2478.815807] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. 09:32:50 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x8000000000000}, 0x0) 09:32:50 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50000000150023"], 0x50}}, 0x0) (fail_nth: 3) 09:32:50 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0xf0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) 09:32:50 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0xf0ffffffffffff}, 0x0) [ 2478.897318] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2478.945781] FAULT_INJECTION: forcing a failure. [ 2478.945781] name failslab, interval 1, probability 0, space 0, times 0 [ 2478.947120] CPU: 1 PID: 12156 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 2478.947902] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2478.948854] Call Trace: [ 2478.949160] dump_stack+0x107/0x167 [ 2478.949577] should_fail.cold+0x5/0xa [ 2478.950017] ? __alloc_skb+0x6d/0x5b0 [ 2478.950450] should_failslab+0x5/0x20 [ 2478.950890] kmem_cache_alloc_node+0x55/0x330 [ 2478.951415] __alloc_skb+0x6d/0x5b0 [ 2478.951836] netlink_sendmsg+0x998/0xe00 [ 2478.952302] ? netlink_unicast+0xa00/0xa00 [ 2478.952788] ? netlink_unicast+0xa00/0xa00 [ 2478.953273] __sock_sendmsg+0x154/0x190 [ 2478.953725] ____sys_sendmsg+0x70d/0x870 [ 2478.954199] ? sock_write_iter+0x3d0/0x3d0 [ 2478.954683] ? do_recvmmsg+0x6d0/0x6d0 [ 2478.955135] ? SOFTIRQ_verbose+0x10/0x10 [ 2478.955596] ? lock_downgrade+0x6d0/0x6d0 [ 2478.956070] ? __lockdep_reset_lock+0x180/0x180 [ 2478.956604] ? SOFTIRQ_verbose+0x10/0x10 [ 2478.957067] ___sys_sendmsg+0xf3/0x170 [ 2478.957509] ? sendmsg_copy_msghdr+0x160/0x160 [ 2478.958030] ? __fget_files+0x2cf/0x520 [ 2478.958499] ? lock_downgrade+0x6d0/0x6d0 [ 2478.958970] ? find_held_lock+0x2c/0x110 [ 2478.959443] ? __fget_files+0x2f8/0x520 [ 2478.959900] ? __fget_light+0xea/0x290 [ 2478.960354] __sys_sendmsg+0xe5/0x1b0 [ 2478.960785] ? __sys_sendmsg_sock+0x40/0x40 [ 2478.961276] ? rcu_read_lock_any_held+0x75/0xa0 [ 2478.961819] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2478.962423] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2478.963014] ? trace_hardirqs_on+0x5b/0x180 [ 2478.963511] do_syscall_64+0x33/0x40 [ 2478.963937] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2478.964518] RIP: 0033:0x7ffbfb165b19 [ 2478.964953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2478.967043] RSP: 002b:00007ffbf86db188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2478.967921] RAX: ffffffffffffffda RBX: 00007ffbfb278f60 RCX: 00007ffbfb165b19 [ 2478.968725] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 2478.969534] RBP: 00007ffbf86db1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2478.970363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2478.971180] R13: 00007ffd61ec4e2f R14: 00007ffbf86db300 R15: 0000000000022000 [ 2479.443900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2479.484485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:33:07 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x100000000000000}, 0x0) 09:33:07 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0xf000000}, 0x0) 09:33:07 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32, @ANYBLOB], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r3, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r4, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:33:07 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r3, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:33:07 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x300, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) 09:33:07 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50000000150023"], 0x50}}, 0x0) (fail_nth: 4) 09:33:07 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195be945b99b06fab0609"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x185680, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r1, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) [ 2495.905967] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2495.911036] FAULT_INJECTION: forcing a failure. 09:33:07 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) (fail_nth: 27) syz_io_uring_setup(0x0, 0x0, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, 0x0, &(0x7f0000000680)) syz_io_uring_setup(0x208a, 0x0, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 2495.911036] name failslab, interval 1, probability 0, space 0, times 0 [ 2495.913740] CPU: 0 PID: 12172 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 2495.914485] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2495.915224] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2495.915233] Call Trace: [ 2495.915261] dump_stack+0x107/0x167 [ 2495.915287] should_fail.cold+0x5/0xa [ 2495.921038] ? create_object.isra.0+0x3a/0xa30 [ 2495.922007] should_failslab+0x5/0x20 [ 2495.922824] kmem_cache_alloc+0x5b/0x310 [ 2495.923687] create_object.isra.0+0x3a/0xa30 [ 2495.924618] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2495.925700] kmem_cache_alloc_node+0x169/0x330 [ 2495.926682] __alloc_skb+0x6d/0x5b0 [ 2495.927469] netlink_sendmsg+0x998/0xe00 [ 2495.928341] ? netlink_unicast+0xa00/0xa00 [ 2495.929262] ? netlink_unicast+0xa00/0xa00 [ 2495.930153] __sock_sendmsg+0x154/0x190 [ 2495.931010] ____sys_sendmsg+0x70d/0x870 [ 2495.931875] ? sock_write_iter+0x3d0/0x3d0 [ 2495.932757] ? do_recvmmsg+0x6d0/0x6d0 [ 2495.933586] ? SOFTIRQ_verbose+0x10/0x10 [ 2495.934438] ? lock_downgrade+0x6d0/0x6d0 [ 2495.935330] ? __lockdep_reset_lock+0x180/0x180 [ 2495.936305] ? SOFTIRQ_verbose+0x10/0x10 [ 2495.937166] ___sys_sendmsg+0xf3/0x170 [ 2495.937986] ? sendmsg_copy_msghdr+0x160/0x160 [ 2495.939098] ? __fget_files+0x2cf/0x520 [ 2495.939932] ? lock_downgrade+0x6d0/0x6d0 [ 2495.940809] ? find_held_lock+0x2c/0x110 [ 2495.941678] ? __fget_files+0x2f8/0x520 [ 2495.942520] ? __fget_light+0xea/0x290 [ 2495.943359] __sys_sendmsg+0xe5/0x1b0 [ 2495.944151] ? __sys_sendmsg_sock+0x40/0x40 [ 2495.945051] ? rcu_read_lock_any_held+0x75/0xa0 [ 2495.946041] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2495.947149] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2495.948229] ? trace_hardirqs_on+0x5b/0x180 [ 2495.949134] do_syscall_64+0x33/0x40 [ 2495.949912] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2495.950992] RIP: 0033:0x7ffbfb165b19 [ 2495.951770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2495.955609] RSP: 002b:00007ffbf86db188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2495.957200] RAX: ffffffffffffffda RBX: 00007ffbfb278f60 RCX: 00007ffbfb165b19 [ 2495.958686] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 2495.960172] RBP: 00007ffbf86db1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2495.961650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2495.963137] R13: 00007ffd61ec4e2f R14: 00007ffbf86db300 R15: 0000000000022000 [ 2495.973045] FAULT_INJECTION: forcing a failure. [ 2495.973045] name failslab, interval 1, probability 0, space 0, times 0 [ 2495.975512] CPU: 0 PID: 12171 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 2495.976988] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2495.978747] Call Trace: [ 2495.979319] dump_stack+0x107/0x167 [ 2495.980109] should_fail.cold+0x5/0xa [ 2495.980933] ? io_uring_alloc_task_context+0x99/0x6a0 [ 2495.982037] should_failslab+0x5/0x20 [ 2495.982853] kmem_cache_alloc_trace+0x55/0x320 [ 2495.983849] io_uring_alloc_task_context+0x99/0x6a0 [ 2495.984918] ? io_import_iovec+0x1120/0x1120 [ 2495.985855] ? lock_downgrade+0x6d0/0x6d0 [ 2495.986753] ? do_raw_spin_lock+0x121/0x260 [ 2495.987674] ? rwlock_bug.part.0+0x90/0x90 [ 2495.988599] __io_uring_add_tctx_node+0x2c6/0x520 [ 2495.989635] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2495.990756] ? alloc_fd+0x2e7/0x670 [ 2495.991565] io_uring_setup+0x1fbb/0x2980 [ 2495.992474] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2495.993555] ? wait_for_completion_io+0x270/0x270 [ 2495.994640] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 09:33:07 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x200000000000000}, 0x0) [ 2495.995765] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2495.997054] do_syscall_64+0x33/0x40 [ 2495.997854] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2495.998948] RIP: 0033:0x7fd0bb875b19 [ 2495.999740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2496.003660] RSP: 002b:00007fd0b8deb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2496.005284] RAX: ffffffffffffffda RBX: 00007fd0bb988f60 RCX: 00007fd0bb875b19 [ 2496.006820] RDX: 000000002080d000 RSI: 0000000020000080 RDI: 0000000000002726 [ 2496.008340] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2496.009855] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000180 [ 2496.011375] R13: 000000002080d000 R14: 0000000020000100 R15: 0000000020ffc000 09:33:07 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x3d5, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) 09:33:07 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x69030000}, 0x0) [ 2496.024694] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2496.097185] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. 09:33:07 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0xf00000000000000}, 0x0) 09:33:07 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x9effffff}, 0x0) 09:33:07 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x500, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) 09:33:07 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) (fail_nth: 28) syz_io_uring_setup(0x0, 0x0, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, 0x0, &(0x7f0000000680)) syz_io_uring_setup(0x208a, 0x0, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 09:33:07 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50000000150023"], 0x50}}, 0x0) (fail_nth: 5) [ 2496.255604] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2496.283030] FAULT_INJECTION: forcing a failure. [ 2496.283030] name failslab, interval 1, probability 0, space 0, times 0 [ 2496.285504] CPU: 1 PID: 12192 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 2496.286978] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2496.288722] Call Trace: [ 2496.289286] dump_stack+0x107/0x167 [ 2496.290064] should_fail.cold+0x5/0xa [ 2496.290884] ? create_object.isra.0+0x3a/0xa30 [ 2496.291851] should_failslab+0x5/0x20 [ 2496.292673] kmem_cache_alloc+0x5b/0x310 [ 2496.293550] create_object.isra.0+0x3a/0xa30 [ 2496.294481] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2496.295573] kmem_cache_alloc_trace+0x151/0x320 [ 2496.296570] io_uring_alloc_task_context+0x99/0x6a0 [ 2496.297625] ? io_import_iovec+0x1120/0x1120 [ 2496.298563] ? lock_downgrade+0x6d0/0x6d0 [ 2496.299453] ? do_raw_spin_lock+0x121/0x260 [ 2496.300367] ? rwlock_bug.part.0+0x90/0x90 [ 2496.301271] __io_uring_add_tctx_node+0x2c6/0x520 [ 2496.302292] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2496.303405] ? alloc_fd+0x2e7/0x670 [ 2496.304186] io_uring_setup+0x1fbb/0x2980 [ 2496.305072] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2496.306140] ? wait_for_completion_io+0x270/0x270 [ 2496.307211] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2496.308341] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2496.309431] do_syscall_64+0x33/0x40 [ 2496.310222] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2496.311319] RIP: 0033:0x7fd0bb875b19 [ 2496.312114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2496.315995] RSP: 002b:00007fd0b8deb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2496.317598] RAX: ffffffffffffffda RBX: 00007fd0bb988f60 RCX: 00007fd0bb875b19 [ 2496.319136] RDX: 000000002080d000 RSI: 0000000020000080 RDI: 0000000000002726 [ 2496.320655] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2496.321571] FAULT_INJECTION: forcing a failure. [ 2496.321571] name failslab, interval 1, probability 0, space 0, times 0 [ 2496.322159] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000180 [ 2496.322172] R13: 000000002080d000 R14: 0000000020000100 R15: 0000000020ffc000 [ 2496.327704] CPU: 0 PID: 12194 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 2496.329181] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2496.330951] Call Trace: [ 2496.331523] dump_stack+0x107/0x167 [ 2496.332293] should_fail.cold+0x5/0xa [ 2496.333102] should_failslab+0x5/0x20 [ 2496.333917] __kmalloc_node_track_caller+0x74/0x3b0 [ 2496.334976] ? netlink_sendmsg+0x998/0xe00 [ 2496.335889] __alloc_skb+0xb1/0x5b0 [ 2496.336672] netlink_sendmsg+0x998/0xe00 [ 2496.337546] ? netlink_unicast+0xa00/0xa00 [ 2496.338455] ? netlink_unicast+0xa00/0xa00 [ 2496.339358] __sock_sendmsg+0x154/0x190 [ 2496.340203] ____sys_sendmsg+0x70d/0x870 [ 2496.341065] ? sock_write_iter+0x3d0/0x3d0 [ 2496.341956] ? do_recvmmsg+0x6d0/0x6d0 [ 2496.342797] ? SOFTIRQ_verbose+0x10/0x10 [ 2496.343655] ? lock_downgrade+0x6d0/0x6d0 [ 2496.344537] ? __lockdep_reset_lock+0x180/0x180 [ 2496.345519] ? SOFTIRQ_verbose+0x10/0x10 [ 2496.346384] ___sys_sendmsg+0xf3/0x170 [ 2496.347215] ? sendmsg_copy_msghdr+0x160/0x160 [ 2496.348192] ? __fget_files+0x2cf/0x520 [ 2496.349037] ? lock_downgrade+0x6d0/0x6d0 [ 2496.349908] ? find_held_lock+0x2c/0x110 [ 2496.350787] ? __fget_files+0x2f8/0x520 [ 2496.351640] ? __fget_light+0xea/0x290 [ 2496.352484] __sys_sendmsg+0xe5/0x1b0 [ 2496.353285] ? __sys_sendmsg_sock+0x40/0x40 [ 2496.354191] ? rcu_read_lock_any_held+0x75/0xa0 [ 2496.355224] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2496.356339] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2496.357424] ? trace_hardirqs_on+0x5b/0x180 [ 2496.358338] do_syscall_64+0x33/0x40 [ 2496.359156] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2496.360234] RIP: 0033:0x7ffbfb165b19 [ 2496.361015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2496.364930] RSP: 002b:00007ffbf86db188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2496.366532] RAX: ffffffffffffffda RBX: 00007ffbfb278f60 RCX: 00007ffbfb165b19 [ 2496.368043] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 2496.369544] RBP: 00007ffbf86db1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2496.371054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2496.372561] R13: 00007ffd61ec4e2f R14: 00007ffbf86db300 R15: 0000000000022000 09:33:08 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x600, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) 09:33:08 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x9effffff00000000}, 0x0) [ 2496.441901] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2496.727887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2496.763735] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:33:22 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50000000150023"], 0x50}}, 0x0) (fail_nth: 6) 09:33:22 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0xc00e0000}, 0x0) 09:33:22 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0xc00e000000000000}, 0x0) 09:33:22 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x700, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) 09:33:22 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) (fail_nth: 29) syz_io_uring_setup(0x0, 0x0, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, 0x0, &(0x7f0000000680)) syz_io_uring_setup(0x208a, 0x0, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 09:33:22 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r3, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:33:22 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32, @ANYBLOB="0c0099000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r3, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r4, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:33:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195be945b99b06fab0609"], 0x14}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x185680, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r1, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) [ 2511.148687] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2511.160464] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2511.164018] FAULT_INJECTION: forcing a failure. [ 2511.164018] name failslab, interval 1, probability 0, space 0, times 0 [ 2511.165567] CPU: 1 PID: 12212 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 2511.166466] FAULT_INJECTION: forcing a failure. [ 2511.166466] name failslab, interval 1, probability 0, space 0, times 0 [ 2511.166496] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2511.166509] Call Trace: [ 2511.170313] dump_stack+0x107/0x167 [ 2511.170810] should_fail.cold+0x5/0xa [ 2511.171331] ? create_object.isra.0+0x3a/0xa30 [ 2511.171938] should_failslab+0x5/0x20 [ 2511.172444] kmem_cache_alloc+0x5b/0x310 [ 2511.172991] create_object.isra.0+0x3a/0xa30 [ 2511.173580] kmemleak_alloc_percpu+0xa0/0x100 [ 2511.174186] pcpu_alloc+0x4e2/0x1240 [ 2511.174711] __percpu_counter_init+0x10d/0x2d0 [ 2511.175343] io_uring_alloc_task_context+0xcc/0x6a0 [ 2511.176015] ? io_import_iovec+0x1120/0x1120 [ 2511.176604] ? lock_downgrade+0x6d0/0x6d0 [ 2511.177170] ? do_raw_spin_lock+0x121/0x260 [ 2511.177761] ? rwlock_bug.part.0+0x90/0x90 [ 2511.178332] __io_uring_add_tctx_node+0x2c6/0x520 [ 2511.178991] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2511.179706] ? alloc_fd+0x2e7/0x670 [ 2511.180200] io_uring_setup+0x1fbb/0x2980 [ 2511.180762] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2511.181435] ? wait_for_completion_io+0x270/0x270 [ 2511.182101] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2511.182803] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2511.183502] do_syscall_64+0x33/0x40 [ 2511.184008] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2511.184701] RIP: 0033:0x7fd0bb875b19 [ 2511.185198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2511.187682] RSP: 002b:00007fd0b8deb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2511.188688] RAX: ffffffffffffffda RBX: 00007fd0bb988f60 RCX: 00007fd0bb875b19 [ 2511.189658] RDX: 000000002080d000 RSI: 0000000020000080 RDI: 0000000000002726 [ 2511.190615] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2511.191564] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000180 [ 2511.192513] R13: 000000002080d000 R14: 0000000020000100 R15: 0000000020ffc000 [ 2511.193489] CPU: 0 PID: 12217 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 2511.194991] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2511.196747] Call Trace: [ 2511.197315] dump_stack+0x107/0x167 [ 2511.198104] should_fail.cold+0x5/0xa [ 2511.198916] ? create_object.isra.0+0x3a/0xa30 [ 2511.199898] should_failslab+0x5/0x20 [ 2511.200710] kmem_cache_alloc+0x5b/0x310 [ 2511.201579] create_object.isra.0+0x3a/0xa30 [ 2511.202506] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2511.203594] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2511.204663] ? netlink_sendmsg+0x998/0xe00 [ 2511.205564] __alloc_skb+0xb1/0x5b0 [ 2511.206348] netlink_sendmsg+0x998/0xe00 [ 2511.207225] ? netlink_unicast+0xa00/0xa00 [ 2511.208134] ? netlink_unicast+0xa00/0xa00 [ 2511.209039] __sock_sendmsg+0x154/0x190 [ 2511.209886] ____sys_sendmsg+0x70d/0x870 [ 2511.210751] ? sock_write_iter+0x3d0/0x3d0 [ 2511.211658] ? do_recvmmsg+0x6d0/0x6d0 [ 2511.212489] ? SOFTIRQ_verbose+0x10/0x10 [ 2511.213344] ? lock_downgrade+0x6d0/0x6d0 [ 2511.214231] ? __lockdep_reset_lock+0x180/0x180 [ 2511.215220] ? SOFTIRQ_verbose+0x10/0x10 [ 2511.216082] ___sys_sendmsg+0xf3/0x170 [ 2511.216906] ? sendmsg_copy_msghdr+0x160/0x160 [ 2511.217876] ? __fget_files+0x2cf/0x520 [ 2511.218722] ? lock_downgrade+0x6d0/0x6d0 [ 2511.219606] ? find_held_lock+0x2c/0x110 [ 2511.220472] ? __fget_files+0x2f8/0x520 [ 2511.221321] ? __fget_light+0xea/0x290 [ 2511.222148] __sys_sendmsg+0xe5/0x1b0 [ 2511.222960] ? __sys_sendmsg_sock+0x40/0x40 [ 2511.223872] ? rcu_read_lock_any_held+0x75/0xa0 [ 2511.224879] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2511.225984] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2511.227077] ? trace_hardirqs_on+0x5b/0x180 [ 2511.228007] do_syscall_64+0x33/0x40 [ 2511.228794] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2511.229873] RIP: 0033:0x7ffbfb165b19 [ 2511.230662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2511.234551] RSP: 002b:00007ffbf86db188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2511.236181] RAX: ffffffffffffffda RBX: 00007ffbfb278f60 RCX: 00007ffbfb165b19 [ 2511.237684] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 2511.239210] RBP: 00007ffbf86db1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2511.240715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2511.242220] R13: 00007ffd61ec4e2f R14: 00007ffbf86db300 R15: 0000000000022000 09:33:22 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0xd102000000000000}, 0x0) [ 2511.252086] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2511.270401] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 09:33:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195be945b99b06fab0609"], 0x14}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x185680, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r1, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:33:22 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x900, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) 09:33:22 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0xf0ffffff}, 0x0) 09:33:22 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0xf0ffffff00000000}, 0x0) [ 2511.366058] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2511.377158] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 09:33:23 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) (fail_nth: 30) syz_io_uring_setup(0x0, 0x0, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, 0x0, &(0x7f0000000680)) syz_io_uring_setup(0x208a, 0x0, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 2511.391083] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:33:23 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0xec0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) 09:33:23 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0xfffff000}, 0x0) [ 2511.446178] FAULT_INJECTION: forcing a failure. [ 2511.446178] name failslab, interval 1, probability 0, space 0, times 0 [ 2511.448734] CPU: 0 PID: 12233 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 2511.450218] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2511.452025] Call Trace: [ 2511.452604] dump_stack+0x107/0x167 [ 2511.452652] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2511.453394] should_fail.cold+0x5/0xa [ 2511.453424] ? create_object.isra.0+0x3a/0xa30 [ 2511.456192] should_failslab+0x5/0x20 [ 2511.457013] kmem_cache_alloc+0x5b/0x310 [ 2511.457898] create_object.isra.0+0x3a/0xa30 [ 2511.458862] kmemleak_alloc_percpu+0xa0/0x100 [ 2511.459852] pcpu_alloc+0x4e2/0x1240 [ 2511.460691] __percpu_counter_init+0x10d/0x2d0 [ 2511.461678] io_uring_alloc_task_context+0xcc/0x6a0 [ 2511.462749] ? io_import_iovec+0x1120/0x1120 [ 2511.463699] ? lock_downgrade+0x6d0/0x6d0 [ 2511.464588] ? do_raw_spin_lock+0x121/0x260 [ 2511.465518] ? rwlock_bug.part.0+0x90/0x90 [ 2511.466439] __io_uring_add_tctx_node+0x2c6/0x520 [ 2511.467482] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2511.468602] ? alloc_fd+0x2e7/0x670 [ 2511.469409] io_uring_setup+0x1fbb/0x2980 [ 2511.470313] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2511.471409] ? wait_for_completion_io+0x270/0x270 [ 2511.472497] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2511.473630] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2511.474742] do_syscall_64+0x33/0x40 [ 2511.475551] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2511.476648] RIP: 0033:0x7fd0bb875b19 [ 2511.477451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2511.481380] RSP: 002b:00007fd0b8deb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2511.483009] RAX: ffffffffffffffda RBX: 00007fd0bb988f60 RCX: 00007fd0bb875b19 [ 2511.484531] RDX: 000000002080d000 RSI: 0000000020000080 RDI: 0000000000002726 [ 2511.486053] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2511.487572] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000180 [ 2511.489086] R13: 000000002080d000 R14: 0000000020000100 R15: 0000000020ffc000 09:33:23 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50000000150023"], 0x50}}, 0x0) (fail_nth: 7) 09:33:23 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0xffffc90000000000}, 0x0) 09:33:23 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0xf00, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) 09:33:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195be945b99b06fab0609"], 0x14}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x185680, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r1, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:33:23 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0xffffff7f}, 0x0) [ 2511.566723] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2511.604168] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2511.604351] FAULT_INJECTION: forcing a failure. [ 2511.604351] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2511.608588] CPU: 1 PID: 12248 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 2511.609376] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2511.610324] Call Trace: [ 2511.610632] dump_stack+0x107/0x167 [ 2511.611060] should_fail.cold+0x5/0xa [ 2511.611498] _copy_from_iter_full+0x201/0xa60 [ 2511.612008] ? __virt_addr_valid+0x170/0x5d0 [ 2511.612509] ? __check_object_size+0x319/0x440 [ 2511.613039] netlink_sendmsg+0x879/0xe00 [ 2511.613511] ? netlink_unicast+0xa00/0xa00 [ 2511.613745] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2511.614004] ? netlink_unicast+0xa00/0xa00 [ 2511.614019] __sock_sendmsg+0x154/0x190 [ 2511.614041] ____sys_sendmsg+0x70d/0x870 [ 2511.617299] ? sock_write_iter+0x3d0/0x3d0 [ 2511.617773] ? do_recvmmsg+0x6d0/0x6d0 [ 2511.618221] ? SOFTIRQ_verbose+0x10/0x10 [ 2511.618688] ? lock_downgrade+0x6d0/0x6d0 [ 2511.619165] ? __lockdep_reset_lock+0x180/0x180 [ 2511.619714] ? SOFTIRQ_verbose+0x10/0x10 [ 2511.620177] ___sys_sendmsg+0xf3/0x170 [ 2511.620650] ? sendmsg_copy_msghdr+0x160/0x160 [ 2511.621195] ? __fget_files+0x2cf/0x520 [ 2511.621666] ? lock_downgrade+0x6d0/0x6d0 [ 2511.622156] ? find_held_lock+0x2c/0x110 [ 2511.622643] ? __fget_files+0x2f8/0x520 [ 2511.623128] ? __fget_light+0xea/0x290 [ 2511.623593] __sys_sendmsg+0xe5/0x1b0 [ 2511.624043] ? __sys_sendmsg_sock+0x40/0x40 [ 2511.624552] ? rcu_read_lock_any_held+0x75/0xa0 [ 2511.625106] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2511.625724] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2511.626327] ? trace_hardirqs_on+0x5b/0x180 [ 2511.626836] do_syscall_64+0x33/0x40 [ 2511.627285] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2511.627882] RIP: 0033:0x7ffbfb165b19 [ 2511.628315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2511.630469] RSP: 002b:00007ffbf86db188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2511.631371] RAX: ffffffffffffffda RBX: 00007ffbfb278f60 RCX: 00007ffbfb165b19 [ 2511.632203] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 2511.633040] RBP: 00007ffbf86db1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2511.633884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2511.634712] R13: 00007ffd61ec4e2f R14: 00007ffbf86db300 R15: 0000000000022000 [ 2511.924803] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2511.960141] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:33:40 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) (fail_nth: 31) syz_io_uring_setup(0x0, 0x0, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, 0x0, &(0x7f0000000680)) syz_io_uring_setup(0x208a, 0x0, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 09:33:40 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r2, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:33:40 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32, @ANYBLOB="0c0099000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r3, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r4, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:33:40 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x4800, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) [ 2528.674183] FAULT_INJECTION: forcing a failure. [ 2528.674183] name failslab, interval 1, probability 0, space 0, times 0 [ 2528.677005] CPU: 0 PID: 12253 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 2528.678486] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2528.680249] Call Trace: [ 2528.680819] dump_stack+0x107/0x167 [ 2528.681610] should_fail.cold+0x5/0xa [ 2528.682436] ? io_uring_alloc_task_context+0x4a3/0x6a0 [ 2528.683564] should_failslab+0x5/0x20 [ 2528.684376] kmem_cache_alloc_trace+0x55/0x320 [ 2528.685366] io_uring_alloc_task_context+0x4a3/0x6a0 [ 2528.686452] ? io_import_iovec+0x1120/0x1120 [ 2528.687398] ? lock_downgrade+0x6d0/0x6d0 [ 2528.688284] ? do_raw_spin_lock+0x121/0x260 [ 2528.689215] ? rwlock_bug.part.0+0x90/0x90 [ 2528.690135] __io_uring_add_tctx_node+0x2c6/0x520 [ 2528.691169] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2528.692292] ? alloc_fd+0x2e7/0x670 [ 2528.693099] io_uring_setup+0x1fbb/0x2980 [ 2528.694009] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2528.695056] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2528.695086] ? wait_for_completion_io+0x270/0x270 [ 2528.698370] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2528.699507] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2528.700629] do_syscall_64+0x33/0x40 [ 2528.701432] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2528.702531] RIP: 0033:0x7fd0bb875b19 [ 2528.703323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2528.707238] RSP: 002b:00007fd0b8deb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2528.708844] RAX: ffffffffffffffda RBX: 00007fd0bb988f60 RCX: 00007fd0bb875b19 [ 2528.710354] RDX: 000000002080d000 RSI: 0000000020000080 RDI: 0000000000002726 [ 2528.711870] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2528.713381] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000180 [ 2528.714885] R13: 000000002080d000 R14: 0000000020000100 R15: 0000000020ffc000 [ 2528.732980] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 09:33:40 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0xffffff9e}, 0x0) 09:33:40 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0xffffff7f00000000}, 0x0) 09:33:40 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195be945b99b06fab0609"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x185680, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r1, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:33:40 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50000000150023"], 0x50}}, 0x0) (fail_nth: 8) [ 2528.747478] FAULT_INJECTION: forcing a failure. [ 2528.747478] name failslab, interval 1, probability 0, space 0, times 0 [ 2528.749943] CPU: 0 PID: 12265 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 2528.751429] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2528.753182] Call Trace: [ 2528.753740] dump_stack+0x107/0x167 [ 2528.754520] should_fail.cold+0x5/0xa [ 2528.755341] ? __alloc_skb+0x6d/0x5b0 [ 2528.756149] should_failslab+0x5/0x20 [ 2528.756955] kmem_cache_alloc_node+0x55/0x330 [ 2528.757299] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2528.757910] __alloc_skb+0x6d/0x5b0 [ 2528.760469] netlink_ack+0x1ed/0xab0 [ 2528.761266] ? netlink_sendmsg+0xe00/0xe00 [ 2528.762161] ? __mutex_lock+0x4fe/0x10b0 [ 2528.763019] ? __lockdep_reset_lock+0x180/0x180 [ 2528.764012] netlink_rcv_skb+0x348/0x430 [ 2528.764874] ? copy_to_user_tmpl.part.0+0x610/0x610 [ 2528.765928] ? netlink_ack+0xab0/0xab0 [ 2528.766769] ? netlink_deliver_tap+0x1c4/0xcc0 [ 2528.767761] xfrm_netlink_rcv+0x70/0x90 [ 2528.768605] netlink_unicast+0x6ce/0xa00 [ 2528.769471] ? netlink_attachskb+0xab0/0xab0 [ 2528.770426] netlink_sendmsg+0x90f/0xe00 [ 2528.771311] ? netlink_unicast+0xa00/0xa00 [ 2528.772225] ? netlink_unicast+0xa00/0xa00 [ 2528.773127] __sock_sendmsg+0x154/0x190 [ 2528.773977] ____sys_sendmsg+0x70d/0x870 [ 2528.774838] ? sock_write_iter+0x3d0/0x3d0 [ 2528.775735] ? do_recvmmsg+0x6d0/0x6d0 [ 2528.776563] ? SOFTIRQ_verbose+0x10/0x10 [ 2528.777416] ? lock_downgrade+0x6d0/0x6d0 [ 2528.778299] ? __lockdep_reset_lock+0x180/0x180 [ 2528.779285] ? SOFTIRQ_verbose+0x10/0x10 [ 2528.780143] ___sys_sendmsg+0xf3/0x170 [ 2528.780966] ? sendmsg_copy_msghdr+0x160/0x160 [ 2528.781941] ? __fget_files+0x2cf/0x520 [ 2528.782788] ? lock_downgrade+0x6d0/0x6d0 [ 2528.783670] ? find_held_lock+0x2c/0x110 [ 2528.784552] ? __fget_files+0x2f8/0x520 [ 2528.785402] ? __fget_light+0xea/0x290 [ 2528.786232] __sys_sendmsg+0xe5/0x1b0 [ 2528.787033] ? __sys_sendmsg_sock+0x40/0x40 [ 2528.787953] ? rcu_read_lock_any_held+0x75/0xa0 [ 2528.788961] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2528.790070] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2528.791157] ? trace_hardirqs_on+0x5b/0x180 [ 2528.792079] do_syscall_64+0x33/0x40 [ 2528.792860] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2528.793941] RIP: 0033:0x7ffbfb165b19 [ 2528.794723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2528.798657] RSP: 002b:00007ffbf86db188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2528.800275] RAX: ffffffffffffffda RBX: 00007ffbfb278f60 RCX: 00007ffbfb165b19 [ 2528.801790] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 2528.803302] RBP: 00007ffbf86db1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2528.804814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2528.806324] R13: 00007ffd61ec4e2f R14: 00007ffbf86db300 R15: 0000000000022000 09:33:40 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x4c00, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) 09:33:40 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0xfffffff0}, 0x0) 09:33:40 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0xfffffffffffff000}, 0x0) [ 2528.867135] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. 09:33:40 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50000000150023"], 0x50}}, 0x0) (fail_nth: 9) 09:33:40 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) (fail_nth: 32) syz_io_uring_setup(0x0, 0x0, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, 0x0, &(0x7f0000000680)) syz_io_uring_setup(0x208a, 0x0, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 09:33:40 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x8000000000000}, 0x0) [ 2528.977383] FAULT_INJECTION: forcing a failure. [ 2528.977383] name failslab, interval 1, probability 0, space 0, times 0 [ 2528.979875] CPU: 0 PID: 12275 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 2528.981335] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2528.983077] Call Trace: [ 2528.983651] dump_stack+0x107/0x167 [ 2528.984427] should_fail.cold+0x5/0xa [ 2528.985233] ? create_object.isra.0+0x3a/0xa30 [ 2528.986205] should_failslab+0x5/0x20 [ 2528.987008] kmem_cache_alloc+0x5b/0x310 [ 2528.987887] create_object.isra.0+0x3a/0xa30 [ 2528.988823] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2528.989908] kmem_cache_alloc_node+0x169/0x330 [ 2528.990890] __alloc_skb+0x6d/0x5b0 [ 2528.991685] netlink_ack+0x1ed/0xab0 [ 2528.992482] ? netlink_sendmsg+0xe00/0xe00 [ 2528.993384] ? __mutex_lock+0x4fe/0x10b0 [ 2528.994242] ? __lockdep_reset_lock+0x180/0x180 [ 2528.995238] netlink_rcv_skb+0x348/0x430 [ 2528.996108] ? copy_to_user_tmpl.part.0+0x610/0x610 [ 2528.997157] ? netlink_ack+0xab0/0xab0 [ 2528.997995] ? netlink_deliver_tap+0x1c4/0xcc0 [ 2528.998965] xfrm_netlink_rcv+0x70/0x90 [ 2528.999824] netlink_unicast+0x6ce/0xa00 [ 2529.000697] ? netlink_attachskb+0xab0/0xab0 [ 2529.001644] netlink_sendmsg+0x90f/0xe00 [ 2529.002513] ? netlink_unicast+0xa00/0xa00 [ 2529.003433] ? netlink_unicast+0xa00/0xa00 [ 2529.004330] __sock_sendmsg+0x154/0x190 [ 2529.005175] ____sys_sendmsg+0x70d/0x870 [ 2529.006038] ? sock_write_iter+0x3d0/0x3d0 [ 2529.006934] ? do_recvmmsg+0x6d0/0x6d0 [ 2529.007773] ? SOFTIRQ_verbose+0x10/0x10 [ 2529.008627] ? lock_downgrade+0x6d0/0x6d0 [ 2529.009504] ? __lockdep_reset_lock+0x180/0x180 [ 2529.010486] ? SOFTIRQ_verbose+0x10/0x10 [ 2529.011352] ___sys_sendmsg+0xf3/0x170 [ 2529.012176] ? sendmsg_copy_msghdr+0x160/0x160 [ 2529.013150] ? __fget_files+0x2cf/0x520 [ 2529.013998] ? lock_downgrade+0x6d0/0x6d0 [ 2529.014872] ? find_held_lock+0x2c/0x110 [ 2529.015751] ? __fget_files+0x2f8/0x520 [ 2529.016609] ? __fget_light+0xea/0x290 [ 2529.017437] __sys_sendmsg+0xe5/0x1b0 [ 2529.018236] ? __sys_sendmsg_sock+0x40/0x40 [ 2529.019143] ? rcu_read_lock_any_held+0x75/0xa0 [ 2529.020155] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2529.021265] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2529.022347] ? trace_hardirqs_on+0x5b/0x180 [ 2529.023267] do_syscall_64+0x33/0x40 [ 2529.024060] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2529.025141] RIP: 0033:0x7ffbfb165b19 [ 2529.025930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2529.029814] RSP: 002b:00007ffbf86db188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2529.031435] RAX: ffffffffffffffda RBX: 00007ffbfb278f60 RCX: 00007ffbfb165b19 [ 2529.032945] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 2529.034458] RBP: 00007ffbf86db1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2529.035974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2529.037492] R13: 00007ffd61ec4e2f R14: 00007ffbf86db300 R15: 0000000000022000 [ 2529.083927] FAULT_INJECTION: forcing a failure. [ 2529.083927] name failslab, interval 1, probability 0, space 0, times 0 [ 2529.086361] CPU: 1 PID: 12279 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 2529.087841] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2529.089582] Call Trace: [ 2529.090145] dump_stack+0x107/0x167 [ 2529.090918] should_fail.cold+0x5/0xa [ 2529.091738] ? create_object.isra.0+0x3a/0xa30 [ 2529.092701] should_failslab+0x5/0x20 [ 2529.093505] kmem_cache_alloc+0x5b/0x310 [ 2529.094379] create_object.isra.0+0x3a/0xa30 [ 2529.095322] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2529.096401] kmem_cache_alloc_trace+0x151/0x320 [ 2529.097400] io_uring_alloc_task_context+0x4a3/0x6a0 [ 2529.098478] ? io_import_iovec+0x1120/0x1120 [ 2529.099419] ? lock_downgrade+0x6d0/0x6d0 [ 2529.100294] ? do_raw_spin_lock+0x121/0x260 [ 2529.101205] ? rwlock_bug.part.0+0x90/0x90 [ 2529.102105] __io_uring_add_tctx_node+0x2c6/0x520 [ 2529.103119] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2529.104224] ? alloc_fd+0x2e7/0x670 [ 2529.105005] io_uring_setup+0x1fbb/0x2980 [ 2529.105889] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2529.106960] ? wait_for_completion_io+0x270/0x270 [ 2529.108013] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2529.109122] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2529.110216] do_syscall_64+0x33/0x40 [ 2529.111003] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2529.112087] RIP: 0033:0x7fd0bb875b19 [ 2529.112871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2529.116741] RSP: 002b:00007fd0b8deb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2529.118348] RAX: ffffffffffffffda RBX: 00007fd0bb988f60 RCX: 00007fd0bb875b19 [ 2529.119854] RDX: 000000002080d000 RSI: 0000000020000080 RDI: 0000000000002726 [ 2529.121360] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2529.122861] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000180 [ 2529.124375] R13: 000000002080d000 R14: 0000000020000100 R15: 0000000020ffc000 [ 2529.494759] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2529.521876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:33:58 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195be945b99b06fab0609"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x185680, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r1, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:33:58 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x6800, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) [ 2547.092575] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2547.109386] FAULT_INJECTION: forcing a failure. [ 2547.109386] name failslab, interval 1, probability 0, space 0, times 0 [ 2547.111009] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2547.111831] CPU: 1 PID: 12294 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 2547.115469] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2547.117280] Call Trace: [ 2547.117850] dump_stack+0x107/0x167 [ 2547.118638] should_fail.cold+0x5/0xa [ 2547.119457] ? io_wq_create+0xeb/0xc00 [ 2547.120288] should_failslab+0x5/0x20 [ 2547.121089] __kmalloc+0x72/0x390 [ 2547.121836] io_wq_create+0xeb/0xc00 [ 2547.122638] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2547.123736] ? io_import_iovec+0x1120/0x1120 [ 2547.123989] FAULT_INJECTION: forcing a failure. [ 2547.123989] name failslab, interval 1, probability 0, space 0, times 0 [ 2547.124659] ? io_apoll_task_func+0x2d0/0x2d0 [ 2547.124676] ? __io_req_find_next+0x300/0x300 [ 2547.124693] ? do_raw_spin_lock+0x121/0x260 [ 2547.124719] ? rwlock_bug.part.0+0x90/0x90 [ 2547.131195] __io_uring_add_tctx_node+0x2c6/0x520 [ 2547.132213] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2547.133319] ? alloc_fd+0x2e7/0x670 [ 2547.134094] io_uring_setup+0x1fbb/0x2980 [ 2547.134969] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2547.136055] ? wait_for_completion_io+0x270/0x270 [ 2547.137100] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2547.138208] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2547.139286] do_syscall_64+0x33/0x40 [ 2547.140069] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2547.141161] RIP: 0033:0x7fd0bb875b19 [ 2547.141952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2547.145850] RSP: 002b:00007fd0b8deb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2547.147457] RAX: ffffffffffffffda RBX: 00007fd0bb988f60 RCX: 00007fd0bb875b19 [ 2547.148987] RDX: 000000002080d000 RSI: 0000000020000080 RDI: 0000000000002726 [ 2547.150485] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2547.151997] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000180 [ 2547.153512] R13: 000000002080d000 R14: 0000000020000100 R15: 0000000020ffc000 [ 2547.155068] CPU: 0 PID: 12297 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 2547.156603] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2547.158395] Call Trace: [ 2547.158963] dump_stack+0x107/0x167 [ 2547.159777] should_fail.cold+0x5/0xa [ 2547.160618] should_failslab+0x5/0x20 [ 2547.161452] __kmalloc_node_track_caller+0x74/0x3b0 [ 2547.162543] ? netlink_ack+0x1ed/0xab0 [ 2547.163399] __alloc_skb+0xb1/0x5b0 [ 2547.164216] netlink_ack+0x1ed/0xab0 [ 2547.165003] ? netlink_sendmsg+0xe00/0xe00 [ 2547.165917] ? __mutex_lock+0x4fe/0x10b0 [ 2547.166808] ? __lockdep_reset_lock+0x180/0x180 [ 2547.167845] netlink_rcv_skb+0x348/0x430 [ 2547.168731] ? copy_to_user_tmpl.part.0+0x610/0x610 [ 2547.169792] ? netlink_ack+0xab0/0xab0 [ 2547.170653] ? netlink_deliver_tap+0x1c4/0xcc0 [ 2547.171652] xfrm_netlink_rcv+0x70/0x90 [ 2547.172506] netlink_unicast+0x6ce/0xa00 [ 2547.173385] ? netlink_attachskb+0xab0/0xab0 [ 2547.174349] netlink_sendmsg+0x90f/0xe00 [ 2547.175238] ? netlink_unicast+0xa00/0xa00 [ 2547.176199] ? netlink_unicast+0xa00/0xa00 [ 2547.177112] __sock_sendmsg+0x154/0x190 [ 2547.177981] ____sys_sendmsg+0x70d/0x870 [ 2547.178858] ? sock_write_iter+0x3d0/0x3d0 [ 2547.179779] ? do_recvmmsg+0x6d0/0x6d0 [ 2547.180619] ? SOFTIRQ_verbose+0x10/0x10 [ 2547.181482] ? lock_downgrade+0x6d0/0x6d0 [ 2547.182392] ? __lockdep_reset_lock+0x180/0x180 [ 2547.183380] ? SOFTIRQ_verbose+0x10/0x10 [ 2547.184282] ___sys_sendmsg+0xf3/0x170 [ 2547.185118] ? sendmsg_copy_msghdr+0x160/0x160 [ 2547.186105] ? __fget_files+0x2cf/0x520 [ 2547.186984] ? lock_downgrade+0x6d0/0x6d0 [ 2547.187901] ? find_held_lock+0x2c/0x110 [ 2547.188783] ? __fget_files+0x2f8/0x520 [ 2547.189649] ? __fget_light+0xea/0x290 [ 2547.190503] __sys_sendmsg+0xe5/0x1b0 [ 2547.191322] ? __sys_sendmsg_sock+0x40/0x40 [ 2547.192249] ? rcu_read_lock_any_held+0x75/0xa0 [ 2547.193265] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2547.194392] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2547.195495] ? trace_hardirqs_on+0x5b/0x180 [ 2547.196425] do_syscall_64+0x33/0x40 [ 2547.197221] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2547.198330] RIP: 0033:0x7ffbfb165b19 [ 2547.199116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2547.203076] RSP: 002b:00007ffbf86db188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2547.204709] RAX: ffffffffffffffda RBX: 00007ffbfb278f60 RCX: 00007ffbfb165b19 [ 2547.206486] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 2547.208024] RBP: 00007ffbf86db1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2547.209562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2547.211084] R13: 00007ffd61ec4e2f R14: 00007ffbf86db300 R15: 0000000000022000 09:33:58 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32, @ANYBLOB="0c0099000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r3, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r4, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:33:58 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50000000150023"], 0x50}}, 0x0) (fail_nth: 10) 09:33:58 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0x2}, 0x0) 09:33:58 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0xf0ffffffffffff}, 0x0) 09:33:58 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) (fail_nth: 33) syz_io_uring_setup(0x0, 0x0, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, 0x0, &(0x7f0000000680)) syz_io_uring_setup(0x208a, 0x0, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 09:33:58 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r2, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:33:58 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0x8}, 0x0) 09:33:58 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x6c00, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) 09:33:58 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x100000000000000}, 0x0) [ 2547.235432] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 09:33:58 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) (fail_nth: 34) syz_io_uring_setup(0x0, 0x0, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, 0x0, &(0x7f0000000680)) syz_io_uring_setup(0x208a, 0x0, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 2547.288414] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. 09:33:58 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50000000150023"], 0x50}}, 0x0) (fail_nth: 11) 09:33:58 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0xf}, 0x0) 09:33:58 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x7400, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) [ 2547.381885] FAULT_INJECTION: forcing a failure. [ 2547.381885] name failslab, interval 1, probability 0, space 0, times 0 [ 2547.384429] CPU: 0 PID: 12307 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 2547.385932] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2547.387740] Call Trace: [ 2547.388335] dump_stack+0x107/0x167 [ 2547.389128] should_fail.cold+0x5/0xa [ 2547.389946] ? create_object.isra.0+0x3a/0xa30 [ 2547.390934] should_failslab+0x5/0x20 [ 2547.391776] kmem_cache_alloc+0x5b/0x310 [ 2547.392675] create_object.isra.0+0x3a/0xa30 [ 2547.393631] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2547.394743] __kmalloc+0x16e/0x390 [ 2547.395559] io_wq_create+0xeb/0xc00 [ 2547.396415] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2547.397553] ? io_import_iovec+0x1120/0x1120 [ 2547.398532] ? io_apoll_task_func+0x2d0/0x2d0 [ 2547.399516] ? __io_req_find_next+0x300/0x300 [ 2547.400489] ? do_raw_spin_lock+0x121/0x260 [ 2547.401428] ? rwlock_bug.part.0+0x90/0x90 [ 2547.402375] __io_uring_add_tctx_node+0x2c6/0x520 [ 2547.403427] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2547.404566] ? alloc_fd+0x2e7/0x670 [ 2547.405398] io_uring_setup+0x1fbb/0x2980 [ 2547.406320] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2547.407408] ? wait_for_completion_io+0x270/0x270 [ 2547.408531] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2547.409672] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2547.411011] do_syscall_64+0x33/0x40 [ 2547.411848] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2547.412969] RIP: 0033:0x7fd0bb875b19 [ 2547.413792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2547.417719] RSP: 002b:00007fd0b8deb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2547.419388] RAX: ffffffffffffffda RBX: 00007fd0bb988f60 RCX: 00007fd0bb875b19 [ 2547.420919] RDX: 000000002080d000 RSI: 0000000020000080 RDI: 0000000000002726 [ 2547.422485] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2547.424038] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000180 [ 2547.425567] R13: 000000002080d000 R14: 0000000020000100 R15: 0000000020ffc000 [ 2547.435770] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2547.441797] FAULT_INJECTION: forcing a failure. [ 2547.441797] name failslab, interval 1, probability 0, space 0, times 0 [ 2547.444262] CPU: 1 PID: 12313 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 2547.445719] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2547.447460] Call Trace: [ 2547.448050] dump_stack+0x107/0x167 [ 2547.448834] should_fail.cold+0x5/0xa [ 2547.449645] ? create_object.isra.0+0x3a/0xa30 [ 2547.450610] should_failslab+0x5/0x20 [ 2547.451421] kmem_cache_alloc+0x5b/0x310 [ 2547.452307] create_object.isra.0+0x3a/0xa30 [ 2547.453239] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2547.454322] __kmalloc_node_track_caller+0x1a6/0x3b0 [ 2547.455411] ? netlink_ack+0x1ed/0xab0 [ 2547.456281] __alloc_skb+0xb1/0x5b0 [ 2547.457068] netlink_ack+0x1ed/0xab0 [ 2547.457868] ? netlink_sendmsg+0xe00/0xe00 [ 2547.458781] ? __mutex_lock+0x4fe/0x10b0 [ 2547.459656] ? __lockdep_reset_lock+0x180/0x180 [ 2547.460651] netlink_rcv_skb+0x348/0x430 [ 2547.461519] ? copy_to_user_tmpl.part.0+0x610/0x610 [ 2547.462580] ? netlink_ack+0xab0/0xab0 [ 2547.463447] ? netlink_deliver_tap+0x1c4/0xcc0 [ 2547.464463] xfrm_netlink_rcv+0x70/0x90 [ 2547.465317] netlink_unicast+0x6ce/0xa00 [ 2547.466207] ? netlink_attachskb+0xab0/0xab0 [ 2547.467175] netlink_sendmsg+0x90f/0xe00 [ 2547.468095] ? netlink_unicast+0xa00/0xa00 [ 2547.469023] ? netlink_unicast+0xa00/0xa00 [ 2547.469958] __sock_sendmsg+0x154/0x190 [ 2547.470838] ____sys_sendmsg+0x70d/0x870 [ 2547.471745] ? sock_write_iter+0x3d0/0x3d0 [ 2547.472666] ? do_recvmmsg+0x6d0/0x6d0 [ 2547.473530] ? SOFTIRQ_verbose+0x10/0x10 [ 2547.474426] ? lock_downgrade+0x6d0/0x6d0 [ 2547.475332] ? __lockdep_reset_lock+0x180/0x180 [ 2547.476361] ? SOFTIRQ_verbose+0x10/0x10 [ 2547.477256] ___sys_sendmsg+0xf3/0x170 [ 2547.478123] ? sendmsg_copy_msghdr+0x160/0x160 [ 2547.479134] ? __fget_files+0x2cf/0x520 [ 2547.480030] ? lock_downgrade+0x6d0/0x6d0 [ 2547.480939] ? find_held_lock+0x2c/0x110 [ 2547.481838] ? __fget_files+0x2f8/0x520 [ 2547.482726] ? __fget_light+0xea/0x290 [ 2547.483595] __sys_sendmsg+0xe5/0x1b0 [ 2547.484457] ? __sys_sendmsg_sock+0x40/0x40 [ 2547.485393] ? rcu_read_lock_any_held+0x75/0xa0 [ 2547.486403] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2547.487538] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2547.488647] ? trace_hardirqs_on+0x5b/0x180 [ 2547.489580] do_syscall_64+0x33/0x40 [ 2547.490375] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2547.491487] RIP: 0033:0x7ffbfb165b19 [ 2547.492281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2547.496187] RSP: 002b:00007ffbf86db188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2547.497797] RAX: ffffffffffffffda RBX: 00007ffbfb278f60 RCX: 00007ffbfb165b19 [ 2547.499302] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 2547.500823] RBP: 00007ffbf86db1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2547.502322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2547.503811] R13: 00007ffd61ec4e2f R14: 00007ffbf86db300 R15: 0000000000022000 [ 2547.960181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2547.964953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:34:22 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x200000000000000}, 0x0) [ 2570.891231] FAULT_INJECTION: forcing a failure. [ 2570.891231] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2570.892686] CPU: 1 PID: 12327 Comm: syz-executor.1 Not tainted 5.10.247 #1 [ 2570.893480] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2570.894446] Call Trace: [ 2570.894766] dump_stack+0x107/0x167 [ 2570.895194] should_fail.cold+0x5/0xa [ 2570.895649] _copy_to_user+0x2e/0x180 [ 2570.896101] simple_read_from_buffer+0xcc/0x160 [ 2570.896651] proc_fail_nth_read+0x198/0x230 [ 2570.897161] ? proc_sessionid_read+0x230/0x230 [ 2570.897913] ? security_file_permission+0xb1/0xe0 [ 2570.898658] ? proc_sessionid_read+0x230/0x230 [ 2570.899311] vfs_read+0x228/0x620 [ 2570.899727] ksys_read+0x12d/0x260 [ 2570.900154] ? vfs_write+0xb10/0xb10 [ 2570.900586] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2570.901200] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2570.901799] do_syscall_64+0x33/0x40 [ 2570.902233] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2570.902821] RIP: 0033:0x7ffbfb11869c [ 2570.903249] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2570.904288] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2570.905387] RSP: 002b:00007ffbf86db170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2570.905401] RAX: ffffffffffffffda RBX: 0000000000000050 RCX: 00007ffbfb11869c [ 2570.905408] RDX: 000000000000000f RSI: 00007ffbf86db1e0 RDI: 0000000000000004 [ 2570.905427] RBP: 00007ffbf86db1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2570.910914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2570.911739] R13: 00007ffd61ec4e2f R14: 00007ffbf86db300 R15: 0000000000022000 09:34:22 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32, @ANYBLOB="0c0099000000000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r3, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r4, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:34:22 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195be945b99b06fab0609"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x185680, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r1, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:34:22 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0xf0}, 0x0) 09:34:22 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x7a00, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) 09:34:22 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) (fail_nth: 35) syz_io_uring_setup(0x0, 0x0, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, 0x0, &(0x7f0000000680)) syz_io_uring_setup(0x208a, 0x0, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 09:34:22 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50000000150023"], 0x50}}, 0x0) (fail_nth: 12) 09:34:22 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r2, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) [ 2570.922660] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2570.933142] FAULT_INJECTION: forcing a failure. [ 2570.933142] name failslab, interval 1, probability 0, space 0, times 0 [ 2570.936253] CPU: 0 PID: 12330 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 2570.937742] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2570.939534] Call Trace: [ 2570.940136] dump_stack+0x107/0x167 [ 2570.940938] should_fail.cold+0x5/0xa [ 2570.941777] ? io_wq_create+0x6ef/0xc00 [ 2570.942650] should_failslab+0x5/0x20 [ 2570.943475] kmem_cache_alloc_node_trace+0x59/0x340 [ 2570.944578] io_wq_create+0x6ef/0xc00 [ 2570.945440] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2570.946763] ? io_import_iovec+0x1120/0x1120 [ 2570.947723] ? io_apoll_task_func+0x2d0/0x2d0 [ 2570.948930] ? __io_req_find_next+0x300/0x300 [ 2570.949910] ? do_raw_spin_lock+0x121/0x260 [ 2570.951039] ? rwlock_bug.part.0+0x90/0x90 [ 2570.952073] __io_uring_add_tctx_node+0x2c6/0x520 [ 2570.953311] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2570.954459] ? alloc_fd+0x2e7/0x670 [ 2570.955458] io_uring_setup+0x1fbb/0x2980 [ 2570.956409] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2570.957735] ? wait_for_completion_io+0x270/0x270 [ 2570.958920] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2570.959255] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2570.960283] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2570.960321] do_syscall_64+0x33/0x40 [ 2570.963205] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2570.964366] RIP: 0033:0x7fd0bb875b19 [ 2570.965174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2570.969132] RSP: 002b:00007fd0b8deb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2570.970784] RAX: ffffffffffffffda RBX: 00007fd0bb988f60 RCX: 00007fd0bb875b19 [ 2570.972324] RDX: 000000002080d000 RSI: 0000000020000080 RDI: 0000000000002726 [ 2570.973859] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2570.975390] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000180 [ 2570.976935] R13: 000000002080d000 R14: 0000000020000100 R15: 0000000020ffc000 09:34:22 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0x2d1}, 0x0) 09:34:22 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50000000150023"], 0x50}}, 0x0) 09:34:22 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0xc00e, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) 09:34:22 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0xf00000000000000}, 0x0) [ 2571.033101] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. 09:34:22 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0xec0}, 0x0) 09:34:22 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50000000150023"], 0x50}}, 0x0) 09:34:22 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0xd503, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) [ 2571.123202] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2571.613119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2571.693920] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:34:39 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x185680, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:34:39 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x6903000000000000}, 0x0) 09:34:39 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0xf000, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) 09:34:39 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x2, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50000000150023"], 0x50}}, 0x0) 09:34:39 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0xf00}, 0x0) 09:34:39 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) (fail_nth: 36) syz_io_uring_setup(0x0, 0x0, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, 0x0, &(0x7f0000000680)) syz_io_uring_setup(0x208a, 0x0, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 09:34:39 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32, @ANYBLOB="0c0099000000000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r3, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r4, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:34:39 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r3, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) [ 2587.583438] FAULT_INJECTION: forcing a failure. [ 2587.583438] name failslab, interval 1, probability 0, space 0, times 0 [ 2587.583630] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2587.586794] CPU: 0 PID: 12353 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 2587.586810] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2587.586819] Call Trace: [ 2587.586850] dump_stack+0x107/0x167 [ 2587.586882] should_fail.cold+0x5/0xa [ 2587.586911] ? create_object.isra.0+0x3a/0xa30 [ 2587.586936] should_failslab+0x5/0x20 [ 2587.586958] kmem_cache_alloc+0x5b/0x310 [ 2587.586984] ? io_wq_create+0x114/0xc00 [ 2587.587018] create_object.isra.0+0x3a/0xa30 [ 2587.587038] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2587.587075] kmem_cache_alloc_node_trace+0x16d/0x340 [ 2587.587117] io_wq_create+0x6ef/0xc00 [ 2587.587163] io_uring_alloc_task_context+0x1f1/0x6a0 [ 2587.587201] ? io_import_iovec+0x1120/0x1120 [ 2587.587228] ? io_apoll_task_func+0x2d0/0x2d0 [ 2587.587248] ? __io_req_find_next+0x300/0x300 [ 2587.587267] ? do_raw_spin_lock+0x121/0x260 [ 2587.587291] ? rwlock_bug.part.0+0x90/0x90 [ 2587.587330] __io_uring_add_tctx_node+0x2c6/0x520 [ 2587.587356] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2587.587376] ? alloc_fd+0x2e7/0x670 [ 2587.587426] io_uring_setup+0x1fbb/0x2980 [ 2587.587469] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2587.587489] ? wait_for_completion_io+0x270/0x270 [ 2587.587564] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2587.587589] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2587.587631] do_syscall_64+0x33/0x40 [ 2587.587665] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2587.587685] RIP: 0033:0x7fd0bb875b19 [ 2587.587707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2587.587720] RSP: 002b:00007fd0b8deb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2587.587746] RAX: ffffffffffffffda RBX: 00007fd0bb988f60 RCX: 00007fd0bb875b19 [ 2587.587760] RDX: 000000002080d000 RSI: 0000000020000080 RDI: 0000000000002726 [ 2587.587774] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2587.587788] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000180 [ 2587.587801] R13: 000000002080d000 R14: 0000000020000100 R15: 0000000020ffc000 [ 2587.602085] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 09:34:39 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0xc00e}, 0x0) 09:34:39 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x9effffff00000000}, 0x0) [ 2587.654394] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 09:34:39 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50000000150023"], 0x50}}, 0x0) 09:34:39 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x80000, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) 09:34:39 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) (fail_nth: 37) syz_io_uring_setup(0x0, 0x0, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, 0x0, &(0x7f0000000680)) syz_io_uring_setup(0x208a, 0x0, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 09:34:39 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0xc00e000000000000}, 0x0) 09:34:39 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0xd102}, 0x0) [ 2587.818542] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2587.841733] FAULT_INJECTION: forcing a failure. [ 2587.841733] name failslab, interval 1, probability 0, space 0, times 0 [ 2587.844283] CPU: 0 PID: 12378 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 2587.845846] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2587.847692] Call Trace: [ 2587.848297] dump_stack+0x107/0x167 [ 2587.849136] should_fail.cold+0x5/0xa [ 2587.849999] ? __io_uring_add_tctx_node+0x15c/0x520 [ 2587.851122] should_failslab+0x5/0x20 [ 2587.851981] kmem_cache_alloc_trace+0x55/0x320 [ 2587.853045] __io_uring_add_tctx_node+0x15c/0x520 [ 2587.854132] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2587.855300] ? alloc_fd+0x2e7/0x670 [ 2587.856160] io_uring_setup+0x1fbb/0x2980 [ 2587.857123] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2587.858313] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2587.859487] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2587.860679] do_syscall_64+0x33/0x40 [ 2587.861527] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2587.862683] RIP: 0033:0x7fd0bb875b19 [ 2587.863508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2587.867477] RSP: 002b:00007fd0b8deb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2587.869145] RAX: ffffffffffffffda RBX: 00007fd0bb988f60 RCX: 00007fd0bb875b19 [ 2587.870688] RDX: 000000002080d000 RSI: 0000000020000080 RDI: 0000000000002726 [ 2587.872237] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2587.873784] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000180 [ 2587.875336] R13: 000000002080d000 R14: 0000000020000100 R15: 0000000020ffc000 09:34:39 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0xf0ffff, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) [ 2587.972506] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2588.412437] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2588.440028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:34:56 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) (fail_nth: 38) syz_io_uring_setup(0x0, 0x0, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, 0x0, &(0x7f0000000680)) syz_io_uring_setup(0x208a, 0x0, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 2604.542813] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2604.555110] FAULT_INJECTION: forcing a failure. [ 2604.555110] name failslab, interval 1, probability 0, space 0, times 0 09:34:56 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32, @ANYBLOB="0c0099000000000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r3, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r4, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:34:56 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0xf000}, 0x0) 09:34:56 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r3, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:34:56 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x8, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50000000150023"], 0x50}}, 0x0) 09:34:56 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0xf0ffffff00000000}, 0x0) 09:34:56 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x1000000, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) 09:34:56 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x185680, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) [ 2604.558268] CPU: 1 PID: 12389 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 2604.560556] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2604.562810] Call Trace: [ 2604.563550] dump_stack+0x107/0x167 [ 2604.564582] should_fail.cold+0x5/0xa [ 2604.565624] ? create_object.isra.0+0x3a/0xa30 [ 2604.565666] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2604.566860] should_failslab+0x5/0x20 [ 2604.566890] kmem_cache_alloc+0x5b/0x310 [ 2604.569966] create_object.isra.0+0x3a/0xa30 [ 2604.571165] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2604.572567] kmem_cache_alloc_trace+0x151/0x320 [ 2604.573855] __io_uring_add_tctx_node+0x15c/0x520 [ 2604.575172] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2604.576591] ? alloc_fd+0x2e7/0x670 [ 2604.577590] io_uring_setup+0x1fbb/0x2980 [ 2604.578715] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2604.580073] ? wait_for_completion_io+0x270/0x270 [ 2604.581415] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2604.582829] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2604.584201] do_syscall_64+0x33/0x40 [ 2604.585207] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2604.586564] RIP: 0033:0x7fd0bb875b19 [ 2604.587557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2604.592384] RSP: 002b:00007fd0b8deb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2604.594373] RAX: ffffffffffffffda RBX: 00007fd0bb988f60 RCX: 00007fd0bb875b19 [ 2604.596248] RDX: 000000002080d000 RSI: 0000000020000080 RDI: 0000000000002726 [ 2604.597943] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2604.599568] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000180 [ 2604.601197] R13: 000000002080d000 R14: 0000000020000100 R15: 0000000020ffc000 [ 2604.633703] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. 09:34:56 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x9, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50000000150023"], 0x50}}, 0x0) 09:34:56 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x2000000, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) 09:34:56 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0x80000}, 0x0) 09:34:56 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0xffffc90000000000}, 0x0) [ 2604.721179] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. 09:34:56 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x3000000, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) 09:34:56 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) (fail_nth: 39) syz_io_uring_setup(0x0, 0x0, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, 0x0, &(0x7f0000000680)) syz_io_uring_setup(0x208a, 0x0, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 09:34:56 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0xc9ffff}, 0x0) [ 2604.837945] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. 09:34:56 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0xffffff7f00000000}, 0x0) 09:34:56 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0xa, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50000000150023"], 0x50}}, 0x0) [ 2604.885773] FAULT_INJECTION: forcing a failure. [ 2604.885773] name failslab, interval 1, probability 0, space 0, times 0 [ 2604.888745] CPU: 1 PID: 12419 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 2604.890325] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2604.892196] Call Trace: [ 2604.892814] dump_stack+0x107/0x167 [ 2604.893645] should_fail.cold+0x5/0xa [ 2604.894536] ? xas_alloc+0x336/0x440 [ 2604.895374] should_failslab+0x5/0x20 [ 2604.896237] kmem_cache_alloc+0x5b/0x310 [ 2604.897166] ? stack_trace_consume_entry+0x160/0x160 [ 2604.898310] xas_alloc+0x336/0x440 [ 2604.899097] xas_create+0x34a/0x10d0 [ 2604.899960] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2604.901166] xas_store+0x8c/0x1c40 [ 2604.902001] __xa_store+0x164/0x2d0 [ 2604.902827] ? xa_delete_node+0x280/0x280 [ 2604.903774] ? trace_hardirqs_on+0x5b/0x180 [ 2604.904771] xa_store+0x31/0x50 [ 2604.905527] __io_uring_add_tctx_node+0x1cf/0x520 [ 2604.906617] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2604.907790] ? alloc_fd+0x2e7/0x670 [ 2604.908640] io_uring_setup+0x1fbb/0x2980 [ 2604.909591] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2604.910733] ? wait_for_completion_io+0x270/0x270 [ 2604.911852] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2604.913042] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2604.914207] do_syscall_64+0x33/0x40 [ 2604.915050] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2604.916203] RIP: 0033:0x7fd0bb875b19 [ 2604.917046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2604.921187] RSP: 002b:00007fd0b8deb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2604.922914] RAX: ffffffffffffffda RBX: 00007fd0bb988f60 RCX: 00007fd0bb875b19 [ 2604.924518] RDX: 000000002080d000 RSI: 0000000020000080 RDI: 0000000000002726 [ 2604.926111] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2604.927705] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000180 [ 2604.929326] R13: 000000002080d000 R14: 0000000020000100 R15: 0000000020ffc000 [ 2605.377371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2605.391077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:35:11 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32, @ANYBLOB="0c0099000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r3, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r4, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:35:11 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x4000000, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) 09:35:11 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r3, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:35:11 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0xfffffffffffff000}, 0x0) 09:35:11 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0xf0ffff}, 0x0) 09:35:11 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0xf, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50000000150023"], 0x50}}, 0x0) 09:35:11 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) (fail_nth: 40) syz_io_uring_setup(0x0, 0x0, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, 0x0, &(0x7f0000000680)) syz_io_uring_setup(0x208a, 0x0, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 09:35:11 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x185680, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) [ 2619.795737] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2619.797839] FAULT_INJECTION: forcing a failure. [ 2619.797839] name failslab, interval 1, probability 0, space 0, times 0 [ 2619.799546] CPU: 0 PID: 12437 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 2619.800550] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2619.801534] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2619.801756] Call Trace: [ 2619.803913] dump_stack+0x107/0x167 [ 2619.804450] should_fail.cold+0x5/0xa [ 2619.805016] ? create_object.isra.0+0x3a/0xa30 [ 2619.805678] should_failslab+0x5/0x20 [ 2619.806232] kmem_cache_alloc+0x5b/0x310 [ 2619.806830] create_object.isra.0+0x3a/0xa30 [ 2619.806977] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2619.807463] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2619.807498] kmem_cache_alloc+0x159/0x310 [ 2619.810611] xas_alloc+0x336/0x440 [ 2619.811136] xas_create+0x34a/0x10d0 [ 2619.811696] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2619.812460] xas_store+0x8c/0x1c40 [ 2619.813012] __xa_store+0x164/0x2d0 [ 2619.813547] ? xa_delete_node+0x280/0x280 [ 2619.814161] ? trace_hardirqs_on+0x5b/0x180 [ 2619.814804] xa_store+0x31/0x50 [ 2619.815288] __io_uring_add_tctx_node+0x1cf/0x520 [ 2619.815985] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2619.816759] ? alloc_fd+0x2e7/0x670 [ 2619.817318] io_uring_setup+0x1fbb/0x2980 [ 2619.817937] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2619.818678] ? wait_for_completion_io+0x270/0x270 [ 2619.819401] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2619.820175] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2619.820927] do_syscall_64+0x33/0x40 [ 2619.821462] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2619.822205] RIP: 0033:0x7fd0bb875b19 [ 2619.822737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2619.825352] RSP: 002b:00007fd0b8deb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2619.826445] RAX: ffffffffffffffda RBX: 00007fd0bb988f60 RCX: 00007fd0bb875b19 [ 2619.827462] RDX: 000000002080d000 RSI: 0000000020000080 RDI: 0000000000002726 [ 2619.828473] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2619.829489] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000180 [ 2619.830514] R13: 000000002080d000 R14: 0000000020000100 R15: 0000000020ffc000 09:35:11 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0xf0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50000000150023"], 0x50}}, 0x0) 09:35:11 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0x2}, 0x0) 09:35:11 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x300, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50000000150023"], 0x50}}, 0x0) 09:35:11 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0x1000000}, 0x0) 09:35:11 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x5000000, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) 09:35:11 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) (fail_nth: 41) syz_io_uring_setup(0x0, 0x0, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, 0x0, &(0x7f0000000680)) syz_io_uring_setup(0x208a, 0x0, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 2619.983842] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. 09:35:11 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x348, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50000000150023"], 0x50}}, 0x0) 09:35:11 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0x8}, 0x0) [ 2620.017114] FAULT_INJECTION: forcing a failure. [ 2620.017114] name failslab, interval 1, probability 0, space 0, times 0 [ 2620.018731] CPU: 0 PID: 12459 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 2620.019647] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2620.020742] Call Trace: [ 2620.021099] dump_stack+0x107/0x167 [ 2620.021584] should_fail.cold+0x5/0xa [ 2620.022093] ? xas_alloc+0x336/0x440 [ 2620.022590] should_failslab+0x5/0x20 [ 2620.023093] kmem_cache_alloc+0x5b/0x310 [ 2620.023644] xas_alloc+0x336/0x440 [ 2620.024119] xas_create+0x34a/0x10d0 [ 2620.024641] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2620.025336] xas_store+0x8c/0x1c40 [ 2620.025826] __xa_store+0x164/0x2d0 [ 2620.026312] ? xa_delete_node+0x280/0x280 [ 2620.026871] ? trace_hardirqs_on+0x5b/0x180 [ 2620.027452] xa_store+0x31/0x50 [ 2620.027894] __io_uring_add_tctx_node+0x1cf/0x520 [ 2620.028545] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2620.029236] ? alloc_fd+0x2e7/0x670 [ 2620.029736] io_uring_setup+0x1fbb/0x2980 [ 2620.030299] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2620.030964] ? wait_for_completion_io+0x270/0x270 [ 2620.031631] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2620.032318] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2620.033012] do_syscall_64+0x33/0x40 [ 2620.033502] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2620.034180] RIP: 0033:0x7fd0bb875b19 [ 2620.034677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2620.037075] RSP: 002b:00007fd0b8deb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2620.038070] RAX: ffffffffffffffda RBX: 00007fd0bb988f60 RCX: 00007fd0bb875b19 [ 2620.039003] RDX: 000000002080d000 RSI: 0000000020000080 RDI: 0000000000002726 [ 2620.039933] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2620.040868] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000180 [ 2620.041793] R13: 000000002080d000 R14: 0000000020000100 R15: 0000000020ffc000 [ 2620.391723] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2620.526589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:35:27 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x185680, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:35:27 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0xf}, 0x0) 09:35:27 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r3, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:35:27 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x6000000, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) [ 2635.501590] FAULT_INJECTION: forcing a failure. [ 2635.501590] name failslab, interval 1, probability 0, space 0, times 0 [ 2635.503212] CPU: 1 PID: 12473 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 2635.504121] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2635.505216] Call Trace: [ 2635.505584] dump_stack+0x107/0x167 [ 2635.506087] should_fail.cold+0x5/0xa [ 2635.506615] ? create_object.isra.0+0x3a/0xa30 [ 2635.507259] should_failslab+0x5/0x20 [ 2635.507782] kmem_cache_alloc+0x5b/0x310 [ 2635.508344] ? mark_held_locks+0x9e/0xe0 [ 2635.508914] create_object.isra.0+0x3a/0xa30 [ 2635.509525] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2635.510231] kmem_cache_alloc+0x159/0x310 [ 2635.510780] xas_alloc+0x336/0x440 [ 2635.511272] xas_create+0x34a/0x10d0 [ 2635.511792] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2635.512514] xas_store+0x8c/0x1c40 [ 2635.513021] __xa_store+0x164/0x2d0 [ 2635.513524] ? xa_delete_node+0x280/0x280 [ 2635.514098] ? trace_hardirqs_on+0x5b/0x180 [ 2635.514695] xa_store+0x31/0x50 [ 2635.515151] __io_uring_add_tctx_node+0x1cf/0x520 [ 2635.515813] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2635.516527] ? alloc_fd+0x2e7/0x670 [ 2635.517026] io_uring_setup+0x1fbb/0x2980 [ 2635.517604] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2635.518297] ? wait_for_completion_io+0x270/0x270 [ 2635.518979] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2635.519701] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2635.520415] do_syscall_64+0x33/0x40 [ 2635.520932] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2635.521641] RIP: 0033:0x7fd0bb875b19 [ 2635.522163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2635.524716] RSP: 002b:00007fd0b8deb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2635.525771] RAX: ffffffffffffffda RBX: 00007fd0bb988f60 RCX: 00007fd0bb875b19 [ 2635.526761] RDX: 000000002080d000 RSI: 0000000020000080 RDI: 0000000000002726 [ 2635.527733] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2635.528673] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000180 09:35:27 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x900, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50000000150023"], 0x50}}, 0x0) 09:35:27 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0x2000000}, 0x0) 09:35:27 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) (fail_nth: 42) syz_io_uring_setup(0x0, 0x0, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, 0x0, &(0x7f0000000680)) syz_io_uring_setup(0x208a, 0x0, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 09:35:27 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32, @ANYBLOB="0c0099"], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r3, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r4, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) [ 2635.529662] R13: 000000002080d000 R14: 0000000020000100 R15: 0000000020ffc000 [ 2635.536316] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2635.542981] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2635.545015] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 09:35:27 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0xf000000}, 0x0) 09:35:27 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0xf0}, 0x0) 09:35:27 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0xa00, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50000000150023"], 0x50}}, 0x0) 09:35:27 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x7000000, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) 09:35:27 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0x369}, 0x0) [ 2635.709695] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. 09:35:27 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0x9effffff}, 0x0) 09:35:27 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) (fail_nth: 43) syz_io_uring_setup(0x0, 0x0, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, 0x0, &(0x7f0000000680)) syz_io_uring_setup(0x208a, 0x0, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 09:35:27 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0xec0}, 0x0) [ 2635.795807] FAULT_INJECTION: forcing a failure. [ 2635.795807] name failslab, interval 1, probability 0, space 0, times 0 [ 2635.797275] CPU: 1 PID: 12495 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 2635.798126] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2635.799135] Call Trace: [ 2635.799462] dump_stack+0x107/0x167 [ 2635.799908] should_fail.cold+0x5/0xa [ 2635.800372] ? xas_alloc+0x336/0x440 [ 2635.800835] should_failslab+0x5/0x20 [ 2635.801302] kmem_cache_alloc+0x5b/0x310 [ 2635.801805] xas_alloc+0x336/0x440 [ 2635.802242] xas_create+0x34a/0x10d0 [ 2635.802709] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2635.803347] xas_store+0x8c/0x1c40 [ 2635.803791] __xa_store+0x164/0x2d0 [ 2635.804235] ? xa_delete_node+0x280/0x280 [ 2635.804742] ? trace_hardirqs_on+0x5b/0x180 [ 2635.805283] xa_store+0x31/0x50 [ 2635.805703] __io_uring_add_tctx_node+0x1cf/0x520 [ 2635.806289] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2635.806919] ? alloc_fd+0x2e7/0x670 [ 2635.807370] io_uring_setup+0x1fbb/0x2980 [ 2635.807880] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2635.808496] ? wait_for_completion_io+0x270/0x270 [ 2635.809107] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2635.809743] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2635.810372] do_syscall_64+0x33/0x40 [ 2635.810826] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2635.811444] RIP: 0033:0x7fd0bb875b19 [ 2635.811904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2635.814126] RSP: 002b:00007fd0b8deb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2635.815048] RAX: ffffffffffffffda RBX: 00007fd0bb988f60 RCX: 00007fd0bb875b19 [ 2635.815906] RDX: 000000002080d000 RSI: 0000000020000080 RDI: 0000000000002726 [ 2635.816769] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2635.817631] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000180 [ 2635.818476] R13: 000000002080d000 R14: 0000000020000100 R15: 0000000020ffc000 [ 2636.232869] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2636.340128] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:35:42 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x185680, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:35:42 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x9000000, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) 09:35:42 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r3, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) [ 2650.800069] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. 09:35:42 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0xf00, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50000000150023"], 0x50}}, 0x0) 09:35:42 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0xf00}, 0x0) 09:35:42 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0xc00e0000}, 0x0) 09:35:42 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) (fail_nth: 44) syz_io_uring_setup(0x0, 0x0, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, 0x0, &(0x7f0000000680)) syz_io_uring_setup(0x208a, 0x0, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 09:35:42 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32, @ANYBLOB="0c0099"], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r3, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r4, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:35:42 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0xd1020000}, 0x0) [ 2650.840521] FAULT_INJECTION: forcing a failure. [ 2650.840521] name failslab, interval 1, probability 0, space 0, times 0 [ 2650.842094] CPU: 0 PID: 12517 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 2650.843030] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2650.844152] Call Trace: [ 2650.844410] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2650.844523] dump_stack+0x107/0x167 [ 2650.846781] should_fail.cold+0x5/0xa [ 2650.847314] ? create_object.isra.0+0x3a/0xa30 [ 2650.847945] should_failslab+0x5/0x20 [ 2650.848470] kmem_cache_alloc+0x5b/0x310 [ 2650.849038] ? mark_held_locks+0x9e/0xe0 [ 2650.849606] create_object.isra.0+0x3a/0xa30 [ 2650.850203] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2650.850908] kmem_cache_alloc+0x159/0x310 [ 2650.851495] xas_alloc+0x336/0x440 [ 2650.851990] xas_create+0x34a/0x10d0 [ 2650.852516] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2650.853263] xas_store+0x8c/0x1c40 [ 2650.853774] __xa_store+0x164/0x2d0 [ 2650.854286] ? xa_delete_node+0x280/0x280 [ 2650.854869] ? trace_hardirqs_on+0x5b/0x180 [ 2650.855480] xa_store+0x31/0x50 [ 2650.855938] __io_uring_add_tctx_node+0x1cf/0x520 [ 2650.856596] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2650.857321] ? alloc_fd+0x2e7/0x670 [ 2650.857838] io_uring_setup+0x1fbb/0x2980 [ 2650.858430] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2650.859124] ? wait_for_completion_io+0x270/0x270 [ 2650.859821] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2650.860543] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2650.861269] do_syscall_64+0x33/0x40 [ 2650.861775] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2650.862479] RIP: 0033:0x7fd0bb875b19 [ 2650.862983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2650.865487] RSP: 002b:00007fd0b8deb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2650.866529] RAX: ffffffffffffffda RBX: 00007fd0bb988f60 RCX: 00007fd0bb875b19 [ 2650.867495] RDX: 000000002080d000 RSI: 0000000020000080 RDI: 0000000000002726 [ 2650.868461] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2650.869437] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000180 [ 2650.870404] R13: 000000002080d000 R14: 0000000020000100 R15: 0000000020ffc000 [ 2650.878736] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 09:35:42 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x4803, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50000000150023"], 0x50}}, 0x0) 09:35:42 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0x6903}, 0x0) 09:35:42 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0xf000000, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) 09:35:42 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0xf0ffffff}, 0x0) [ 2650.970040] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. 09:35:42 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0xf000, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50000000150023"], 0x50}}, 0x0) 09:35:42 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0xfffff000}, 0x0) [ 2651.438634] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2651.554482] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:36:00 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0xffffff7f}, 0x0) 09:36:00 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x48000000, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) 09:36:00 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0xc00e}, 0x0) 09:36:00 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) (fail_nth: 45) syz_io_uring_setup(0x0, 0x0, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, 0x0, &(0x7f0000000680)) syz_io_uring_setup(0x208a, 0x0, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 09:36:00 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x80000, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50000000150023"], 0x50}}, 0x0) [ 2669.284902] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. 09:36:00 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r3, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:36:00 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32, @ANYBLOB="0c0099"], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r3, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r4, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:36:00 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x185680, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) [ 2669.305849] FAULT_INJECTION: forcing a failure. [ 2669.305849] name failslab, interval 1, probability 0, space 0, times 0 [ 2669.308509] CPU: 0 PID: 12544 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 2669.310117] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2669.312017] Call Trace: [ 2669.312637] dump_stack+0x107/0x167 [ 2669.313498] should_fail.cold+0x5/0xa [ 2669.314386] ? xas_alloc+0x336/0x440 [ 2669.315254] should_failslab+0x5/0x20 [ 2669.316139] kmem_cache_alloc+0x5b/0x310 [ 2669.317097] xas_alloc+0x336/0x440 [ 2669.317943] xas_create+0x34a/0x10d0 [ 2669.318836] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2669.320057] xas_store+0x8c/0x1c40 [ 2669.320927] __xa_store+0x164/0x2d0 [ 2669.321798] ? xa_delete_node+0x280/0x280 [ 2669.322786] ? trace_hardirqs_on+0x5b/0x180 [ 2669.323811] xa_store+0x31/0x50 [ 2669.324590] __io_uring_add_tctx_node+0x1cf/0x520 [ 2669.325730] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2669.326939] ? alloc_fd+0x2e7/0x670 [ 2669.327817] io_uring_setup+0x1fbb/0x2980 [ 2669.328806] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2669.329988] ? wait_for_completion_io+0x270/0x270 [ 2669.331161] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2669.332369] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2669.333579] do_syscall_64+0x33/0x40 [ 2669.334449] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2669.335642] RIP: 0033:0x7fd0bb875b19 [ 2669.336508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2669.340755] RSP: 002b:00007fd0b8deb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2669.342534] RAX: ffffffffffffffda RBX: 00007fd0bb988f60 RCX: 00007fd0bb875b19 [ 2669.344176] RDX: 000000002080d000 RSI: 0000000020000080 RDI: 0000000000002726 [ 2669.345821] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2669.347455] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000180 [ 2669.349090] R13: 000000002080d000 R14: 0000000020000100 R15: 0000000020ffc000 [ 2669.365605] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 09:36:01 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0xffffff9e}, 0x0) 09:36:01 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0xf000}, 0x0) 09:36:01 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0xf0ffff, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50000000150023"], 0x50}}, 0x0) 09:36:01 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x4c000000, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) 09:36:01 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0x80000}, 0x0) 09:36:01 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x1000000, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50000000150023"], 0x50}}, 0x0) [ 2669.512474] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. 09:36:01 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0xfffffff0}, 0x0) 09:36:01 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x68000000, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) [ 2669.664669] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2670.115685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2670.143956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2686.623410] FAULT_INJECTION: forcing a failure. [ 2686.623410] name failslab, interval 1, probability 0, space 0, times 0 [ 2686.625074] CPU: 1 PID: 12576 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 2686.626020] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2686.627141] Call Trace: [ 2686.627504] dump_stack+0x107/0x167 [ 2686.627998] should_fail.cold+0x5/0xa [ 2686.628521] ? create_object.isra.0+0x3a/0xa30 [ 2686.629139] should_failslab+0x5/0x20 [ 2686.629701] kmem_cache_alloc+0x5b/0x310 [ 2686.630252] ? mark_held_locks+0x9e/0xe0 [ 2686.630803] create_object.isra.0+0x3a/0xa30 [ 2686.631400] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2686.632089] kmem_cache_alloc+0x159/0x310 [ 2686.632657] xas_alloc+0x336/0x440 [ 2686.633141] xas_create+0x34a/0x10d0 [ 2686.633664] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2686.634372] xas_store+0x8c/0x1c40 [ 2686.634867] __xa_store+0x164/0x2d0 [ 2686.635402] ? xa_delete_node+0x280/0x280 09:36:18 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0xc9ffff}, 0x0) 09:36:18 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x185680, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:36:18 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32, @ANYBLOB="0c00990000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r3, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r4, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:36:18 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0x8000000000000}, 0x0) 09:36:18 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x2000000, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50000000150023"], 0x50}}, 0x0) 09:36:18 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) (fail_nth: 46) syz_io_uring_setup(0x0, 0x0, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, 0x0, &(0x7f0000000680)) syz_io_uring_setup(0x208a, 0x0, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 2686.636266] ? trace_hardirqs_on+0x5b/0x180 [ 2686.637084] xa_store+0x31/0x50 [ 2686.637648] __io_uring_add_tctx_node+0x1cf/0x520 [ 2686.638394] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2686.639170] ? alloc_fd+0x2e7/0x670 [ 2686.639739] io_uring_setup+0x1fbb/0x2980 [ 2686.640369] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2686.641116] ? wait_for_completion_io+0x270/0x270 [ 2686.641860] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2686.642633] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2686.643401] do_syscall_64+0x33/0x40 [ 2686.643950] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2686.644709] RIP: 0033:0x7fd0bb875b19 [ 2686.645254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2686.647925] RSP: 002b:00007fd0b8deb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2686.649039] RAX: ffffffffffffffda RBX: 00007fd0bb988f60 RCX: 00007fd0bb875b19 [ 2686.650097] RDX: 000000002080d000 RSI: 0000000020000080 RDI: 0000000000002726 [ 2686.651138] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 09:36:18 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x6c000000, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) 09:36:18 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r3, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) [ 2686.652178] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000180 [ 2686.653345] R13: 000000002080d000 R14: 0000000020000100 R15: 0000000020ffc000 [ 2686.660306] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2686.676425] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2686.680619] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 09:36:18 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0xf0ffff}, 0x0) 09:36:18 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x3000000, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50000000150023"], 0x50}}, 0x0) 09:36:18 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x74000000, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) 09:36:18 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0x1000000}, 0x0) 09:36:18 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0xf0ffffffffffff}, 0x0) 09:36:18 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) (fail_nth: 47) syz_io_uring_setup(0x0, 0x0, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, 0x0, &(0x7f0000000680)) syz_io_uring_setup(0x208a, 0x0, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 09:36:18 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x8000000, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50000000150023"], 0x50}}, 0x0) [ 2686.843166] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. 09:36:18 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0x2000000}, 0x0) [ 2686.864492] FAULT_INJECTION: forcing a failure. [ 2686.864492] name failslab, interval 1, probability 0, space 0, times 0 [ 2686.866042] CPU: 1 PID: 12601 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 2686.866959] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2686.868063] Call Trace: [ 2686.868428] dump_stack+0x107/0x167 [ 2686.868917] should_fail.cold+0x5/0xa [ 2686.869429] ? xas_alloc+0x336/0x440 [ 2686.869942] should_failslab+0x5/0x20 [ 2686.870450] kmem_cache_alloc+0x5b/0x310 [ 2686.871001] xas_alloc+0x336/0x440 [ 2686.871481] xas_create+0x34a/0x10d0 [ 2686.871993] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2686.872691] xas_store+0x8c/0x1c40 [ 2686.873262] __xa_store+0x164/0x2d0 [ 2686.873768] ? xa_delete_node+0x280/0x280 [ 2686.874348] ? trace_hardirqs_on+0x5b/0x180 [ 2686.874925] xa_store+0x31/0x50 [ 2686.875368] __io_uring_add_tctx_node+0x1cf/0x520 [ 2686.876020] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2686.876709] ? alloc_fd+0x2e7/0x670 [ 2686.877206] io_uring_setup+0x1fbb/0x2980 [ 2686.877775] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2686.878443] ? wait_for_completion_io+0x270/0x270 [ 2686.879104] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2686.879795] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2686.880602] do_syscall_64+0x33/0x40 [ 2686.881134] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2686.881955] RIP: 0033:0x7fd0bb875b19 [ 2686.882539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2686.885400] RSP: 002b:00007fd0b8deb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2686.886606] RAX: ffffffffffffffda RBX: 00007fd0bb988f60 RCX: 00007fd0bb875b19 [ 2686.887737] RDX: 000000002080d000 RSI: 0000000020000080 RDI: 0000000000002726 [ 2686.888843] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2686.889978] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000180 [ 2686.891089] R13: 000000002080d000 R14: 0000000020000100 R15: 0000000020ffc000 [ 2687.152105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2687.491330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:36:33 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0x100000000000000}, 0x0) 09:36:33 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x7a000000, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) 09:36:33 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x9000000, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50000000150023"], 0x50}}, 0x0) 09:36:33 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) (fail_nth: 48) syz_io_uring_setup(0x0, 0x0, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, 0x0, &(0x7f0000000680)) syz_io_uring_setup(0x208a, 0x0, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 09:36:33 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0xf000000}, 0x0) 09:36:33 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r3, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) [ 2701.581619] FAULT_INJECTION: forcing a failure. [ 2701.581619] name failslab, interval 1, probability 0, space 0, times 0 [ 2701.584572] CPU: 0 PID: 12610 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 2701.586372] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2701.587597] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2701.588444] Call Trace: [ 2701.588481] dump_stack+0x107/0x167 [ 2701.588521] should_fail.cold+0x5/0xa [ 2701.592128] ? create_object.isra.0+0x3a/0xa30 [ 2701.593289] should_failslab+0x5/0x20 [ 2701.594275] kmem_cache_alloc+0x5b/0x310 [ 2701.595298] ? mark_held_locks+0x9e/0xe0 [ 2701.596336] create_object.isra.0+0x3a/0xa30 [ 2701.597454] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2701.598784] kmem_cache_alloc+0x159/0x310 [ 2701.599888] xas_alloc+0x336/0x440 [ 2701.600830] xas_create+0x34a/0x10d0 [ 2701.601842] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2701.603215] xas_store+0x8c/0x1c40 [ 2701.604189] __xa_store+0x164/0x2d0 [ 2701.605129] ? xa_delete_node+0x280/0x280 [ 2701.606216] ? trace_hardirqs_on+0x5b/0x180 [ 2701.607340] xa_store+0x31/0x50 [ 2701.608194] __io_uring_add_tctx_node+0x1cf/0x520 [ 2701.609418] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2701.610772] ? alloc_fd+0x2e7/0x670 [ 2701.611920] io_uring_setup+0x1fbb/0x2980 [ 2701.613004] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2701.614297] ? wait_for_completion_io+0x270/0x270 [ 2701.615623] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2701.616942] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2701.618263] do_syscall_64+0x33/0x40 [ 2701.619118] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2701.620212] RIP: 0033:0x7fd0bb875b19 [ 2701.621003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2701.625047] RSP: 002b:00007fd0b8deb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2701.626728] RAX: ffffffffffffffda RBX: 00007fd0bb988f60 RCX: 00007fd0bb875b19 [ 2701.628298] RDX: 000000002080d000 RSI: 0000000020000080 RDI: 0000000000002726 [ 2701.629865] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2701.631421] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000180 [ 2701.632923] R13: 000000002080d000 R14: 0000000020000100 R15: 0000000020ffc000 09:36:33 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32, @ANYBLOB="0c00990000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r3, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r4, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:36:33 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x185680, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:36:33 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0x69030000}, 0x0) [ 2701.654150] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. 09:36:33 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0x9effffff}, 0x0) [ 2701.681757] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 09:36:33 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0xa000000, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50000000150023"], 0x50}}, 0x0) 09:36:33 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0x200000000000000}, 0x0) 09:36:33 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x9effffff, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) 09:36:33 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) (fail_nth: 49) syz_io_uring_setup(0x0, 0x0, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, 0x0, &(0x7f0000000680)) syz_io_uring_setup(0x208a, 0x0, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 09:36:33 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0xc00e0000}, 0x0) [ 2701.792574] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2701.813428] FAULT_INJECTION: forcing a failure. [ 2701.813428] name failslab, interval 1, probability 0, space 0, times 0 [ 2701.815003] CPU: 1 PID: 12637 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 2701.815879] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2701.816906] Call Trace: [ 2701.817220] dump_stack+0x107/0x167 [ 2701.817669] should_fail.cold+0x5/0xa [ 2701.818206] ? xas_alloc+0x336/0x440 [ 2701.818676] should_failslab+0x5/0x20 [ 2701.819202] kmem_cache_alloc+0x5b/0x310 [ 2701.819770] xas_alloc+0x336/0x440 [ 2701.820284] xas_create+0x34a/0x10d0 [ 2701.820806] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2701.821535] xas_store+0x8c/0x1c40 [ 2701.822007] __xa_store+0x164/0x2d0 [ 2701.822481] ? xa_delete_node+0x280/0x280 [ 2701.822983] ? trace_hardirqs_on+0x5b/0x180 [ 2701.823582] xa_store+0x31/0x50 [ 2701.824010] __io_uring_add_tctx_node+0x1cf/0x520 [ 2701.824630] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2701.825340] ? alloc_fd+0x2e7/0x670 [ 2701.825853] io_uring_setup+0x1fbb/0x2980 [ 2701.826424] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2701.827136] ? wait_for_completion_io+0x270/0x270 [ 2701.827765] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2701.828387] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2701.829028] do_syscall_64+0x33/0x40 [ 2701.829529] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2701.830137] RIP: 0033:0x7fd0bb875b19 [ 2701.830583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2701.833046] RSP: 002b:00007fd0b8deb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2701.834082] RAX: ffffffffffffffda RBX: 00007fd0bb988f60 RCX: 00007fd0bb875b19 [ 2701.835074] RDX: 000000002080d000 RSI: 0000000020000080 RDI: 0000000000002726 [ 2701.836000] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2701.837004] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000180 [ 2701.838000] R13: 000000002080d000 R14: 0000000020000100 R15: 0000000020ffc000 09:36:33 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0xf00000000000000}, 0x0) [ 2702.301755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2702.471684] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:36:48 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0xc00e0000, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) 09:36:48 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x185680, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:36:48 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32, @ANYBLOB="0c009900"], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r3, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r4, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:36:49 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0xf0ffffff}, 0x0) 09:36:49 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0xf000000, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50000000150023"], 0x50}}, 0x0) [ 2717.395441] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. 09:36:49 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) (fail_nth: 50) syz_io_uring_setup(0x0, 0x0, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, 0x0, &(0x7f0000000680)) syz_io_uring_setup(0x208a, 0x0, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 09:36:49 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0x9effffff00000000}, 0x0) 09:36:49 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r3, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) [ 2717.416414] FAULT_INJECTION: forcing a failure. [ 2717.416414] name failslab, interval 1, probability 0, space 0, times 0 [ 2717.418251] CPU: 0 PID: 12657 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 2717.419221] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2717.420378] Call Trace: [ 2717.420755] dump_stack+0x107/0x167 [ 2717.421272] should_fail.cold+0x5/0xa [ 2717.421810] ? create_object.isra.0+0x3a/0xa30 [ 2717.422464] should_failslab+0x5/0x20 [ 2717.422995] kmem_cache_alloc+0x5b/0x310 [ 2717.423567] ? mark_held_locks+0x9e/0xe0 [ 2717.424140] create_object.isra.0+0x3a/0xa30 [ 2717.424753] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2717.425474] kmem_cache_alloc+0x159/0x310 [ 2717.426067] xas_alloc+0x336/0x440 [ 2717.426566] xas_create+0x34a/0x10d0 [ 2717.427098] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2717.427831] xas_store+0x8c/0x1c40 [ 2717.428348] __xa_store+0x164/0x2d0 [ 2717.428856] ? xa_delete_node+0x280/0x280 [ 2717.429447] ? trace_hardirqs_on+0x5b/0x180 [ 2717.430066] xa_store+0x31/0x50 [ 2717.430530] __io_uring_add_tctx_node+0x1cf/0x520 [ 2717.431200] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2717.431927] ? alloc_fd+0x2e7/0x670 [ 2717.432449] io_uring_setup+0x1fbb/0x2980 [ 2717.433035] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2717.433732] ? wait_for_completion_io+0x270/0x270 [ 2717.434447] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2717.435069] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2717.435179] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2717.438079] do_syscall_64+0x33/0x40 [ 2717.438599] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2717.439307] RIP: 0033:0x7fd0bb875b19 [ 2717.439824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2717.442347] RSP: 002b:00007fd0b8deb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2717.443365] RAX: ffffffffffffffda RBX: 00007fd0bb988f60 RCX: 00007fd0bb875b19 [ 2717.444318] RDX: 000000002080d000 RSI: 0000000020000080 RDI: 0000000000002726 [ 2717.445264] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2717.446224] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000180 [ 2717.447157] R13: 000000002080d000 R14: 0000000020000100 R15: 0000000020ffc000 [ 2717.468160] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 09:36:49 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0xd5030000, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) 09:36:49 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0xc00e000000000000}, 0x0) 09:36:49 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x48030000, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50000000150023"], 0x50}}, 0x0) 09:36:49 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) (fail_nth: 51) syz_io_uring_setup(0x0, 0x0, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, 0x0, &(0x7f0000000680)) syz_io_uring_setup(0x208a, 0x0, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 09:36:49 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0xfffff000}, 0x0) [ 2717.540004] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2717.579902] FAULT_INJECTION: forcing a failure. [ 2717.579902] name failslab, interval 1, probability 0, space 0, times 0 [ 2717.581379] CPU: 0 PID: 12672 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 2717.582249] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2717.583279] Call Trace: [ 2717.583616] dump_stack+0x107/0x167 [ 2717.584078] should_fail.cold+0x5/0xa [ 2717.584561] ? xas_alloc+0x336/0x440 [ 2717.585034] should_failslab+0x5/0x20 [ 2717.585530] kmem_cache_alloc+0x5b/0x310 [ 2717.586055] xas_alloc+0x336/0x440 [ 2717.586525] xas_create+0x34a/0x10d0 [ 2717.587012] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2717.587671] xas_store+0x8c/0x1c40 [ 2717.588142] __xa_store+0x164/0x2d0 [ 2717.588603] ? xa_delete_node+0x280/0x280 [ 2717.589140] ? trace_hardirqs_on+0x5b/0x180 [ 2717.589696] xa_store+0x31/0x50 [ 2717.590127] __io_uring_add_tctx_node+0x1cf/0x520 [ 2717.590735] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2717.591392] ? alloc_fd+0x2e7/0x670 [ 2717.591870] io_uring_setup+0x1fbb/0x2980 [ 2717.592399] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2717.593031] ? wait_for_completion_io+0x270/0x270 [ 2717.593666] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2717.594325] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2717.594973] do_syscall_64+0x33/0x40 [ 2717.595444] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2717.596080] RIP: 0033:0x7fd0bb875b19 [ 2717.596546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2717.598826] RSP: 002b:00007fd0b8deb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2717.599767] RAX: ffffffffffffffda RBX: 00007fd0bb988f60 RCX: 00007fd0bb875b19 [ 2717.600649] RDX: 000000002080d000 RSI: 0000000020000080 RDI: 0000000000002726 [ 2717.601535] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2717.602427] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000180 [ 2717.603314] R13: 000000002080d000 R14: 0000000020000100 R15: 0000000020ffc000 09:36:49 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) 09:36:49 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x9effffff, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50000000150023"], 0x50}}, 0x0) 09:36:49 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0xd102000000000000}, 0x0) [ 2717.647844] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2718.047121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2718.205684] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:37:05 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x185680, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:37:05 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0xffffff7f}, 0x0) 09:37:05 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32, @ANYBLOB="0c009900"], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r3, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r4, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:37:05 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) (fail_nth: 52) syz_io_uring_setup(0x0, 0x0, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, 0x0, &(0x7f0000000680)) syz_io_uring_setup(0x208a, 0x0, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 09:37:05 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0xfffff000, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) 09:37:05 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50000000150023"], 0x50}}, 0x0) 09:37:05 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0xf0ffffff00000000}, 0x0) 09:37:05 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r3, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) [ 2733.463971] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2733.485966] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2733.488061] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2733.509997] FAULT_INJECTION: forcing a failure. [ 2733.509997] name failslab, interval 1, probability 0, space 0, times 0 [ 2733.512503] CPU: 1 PID: 12695 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 2733.513980] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2733.515747] Call Trace: [ 2733.516315] dump_stack+0x107/0x167 [ 2733.517095] should_fail.cold+0x5/0xa [ 2733.517907] ? create_object.isra.0+0x3a/0xa30 [ 2733.518891] should_failslab+0x5/0x20 [ 2733.519692] kmem_cache_alloc+0x5b/0x310 [ 2733.520550] ? mark_held_locks+0x9e/0xe0 [ 2733.521415] create_object.isra.0+0x3a/0xa30 [ 2733.522351] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2733.523431] kmem_cache_alloc+0x159/0x310 [ 2733.524323] xas_alloc+0x336/0x440 [ 2733.525085] xas_create+0x34a/0x10d0 [ 2733.525894] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2733.527023] xas_store+0x8c/0x1c40 [ 2733.527796] __xa_store+0x164/0x2d0 [ 2733.528578] ? xa_delete_node+0x280/0x280 [ 2733.529477] ? trace_hardirqs_on+0x5b/0x180 [ 2733.530419] xa_store+0x31/0x50 [ 2733.531136] __io_uring_add_tctx_node+0x1cf/0x520 [ 2733.532157] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2733.533270] ? alloc_fd+0x2e7/0x670 [ 2733.534057] io_uring_setup+0x1fbb/0x2980 [ 2733.534959] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2733.536024] ? wait_for_completion_io+0x270/0x270 [ 2733.537076] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2733.538185] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2733.539291] do_syscall_64+0x33/0x40 [ 2733.540083] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2733.541175] RIP: 0033:0x7fd0bb875b19 [ 2733.541961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2733.545879] RSP: 002b:00007fd0b8deb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2733.547523] RAX: ffffffffffffffda RBX: 00007fd0bb988f60 RCX: 00007fd0bb875b19 [ 2733.549044] RDX: 000000002080d000 RSI: 0000000020000080 RDI: 0000000000002726 [ 2733.550577] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2733.552098] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000180 [ 2733.553614] R13: 000000002080d000 R14: 0000000020000100 R15: 0000000020ffc000 09:37:05 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0xffffff7f, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) 09:37:05 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0xfffff000, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50000000150023"], 0x50}}, 0x0) [ 2733.591730] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. 09:37:05 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0xffffff9e}, 0x0) 09:37:05 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0xffffff9e, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) 09:37:05 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0xffffc90000000000}, 0x0) [ 2733.669013] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. 09:37:05 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0xfffffff0}, 0x0) 09:37:05 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0xffffff7f, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50000000150023"], 0x50}}, 0x0) 09:37:05 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0xfffffff0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) [ 2733.808369] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2734.293023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2734.298225] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:37:24 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0x8000000000000}, 0x0) 09:37:24 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) 09:37:24 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32, @ANYBLOB="0c009900"], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r3, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r4, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:37:24 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x185680, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:37:24 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0xffffff9e, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50000000150023"], 0x50}}, 0x0) 09:37:24 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0xffffffff, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000012002302"], 0x50}}, 0x0) 09:37:24 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r3, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:37:24 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) (fail_nth: 53) syz_io_uring_setup(0x0, 0x0, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, 0x0, &(0x7f0000000680)) syz_io_uring_setup(0x208a, 0x0, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 2752.600921] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2752.611915] FAULT_INJECTION: forcing a failure. [ 2752.611915] name failslab, interval 1, probability 0, space 0, times 0 [ 2752.614821] CPU: 0 PID: 12732 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 2752.616604] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2752.618747] Call Trace: [ 2752.619319] dump_stack+0x107/0x167 [ 2752.620118] should_fail.cold+0x5/0xa [ 2752.620937] ? xas_alloc+0x336/0x440 [ 2752.621737] should_failslab+0x5/0x20 [ 2752.622563] kmem_cache_alloc+0x5b/0x310 [ 2752.623450] xas_alloc+0x336/0x440 [ 2752.624225] xas_create+0x34a/0x10d0 [ 2752.625051] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2752.626178] xas_store+0x8c/0x1c40 [ 2752.626991] __xa_store+0x164/0x2d0 [ 2752.627782] ? xa_delete_node+0x280/0x280 [ 2752.628699] ? trace_hardirqs_on+0x5b/0x180 [ 2752.629652] xa_store+0x31/0x50 [ 2752.630370] __io_uring_add_tctx_node+0x1cf/0x520 [ 2752.631423] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2752.632545] ? alloc_fd+0x2e7/0x670 [ 2752.633358] io_uring_setup+0x1fbb/0x2980 [ 2752.634270] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2752.635366] ? wait_for_completion_io+0x270/0x270 [ 2752.636444] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2752.637563] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2752.638688] do_syscall_64+0x33/0x40 [ 2752.639496] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2752.640592] RIP: 0033:0x7fd0bb875b19 [ 2752.641396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2752.645347] RSP: 002b:00007fd0b8deb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2752.646982] RAX: ffffffffffffffda RBX: 00007fd0bb988f60 RCX: 00007fd0bb875b19 [ 2752.648520] RDX: 000000002080d000 RSI: 0000000020000080 RDI: 0000000000002726 [ 2752.650045] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2752.651568] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000180 [ 2752.653123] R13: 000000002080d000 R14: 0000000020000100 R15: 0000000020ffc000 [ 2752.675129] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 09:37:24 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0xfffffffffffff000}, 0x0) 09:37:24 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0xfffffff0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50000000150023"], 0x50}}, 0x0) 09:37:24 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0xf0ffffffffffff}, 0x0) 09:37:24 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="0f00000012002302"], 0x50}}, 0x0) 09:37:24 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}}, 0x0) 09:37:24 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0xffffffff, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50000000150023"], 0x50}}, 0x0) 09:37:24 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="6000000012002302"], 0x50}}, 0x0) 09:37:24 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0x100000000000000}, 0x0) 09:37:24 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) (fail_nth: 54) syz_io_uring_setup(0x0, 0x0, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, 0x0, &(0x7f0000000680)) syz_io_uring_setup(0x208a, 0x0, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 09:37:24 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="c000000012002302"], 0x50}}, 0x0) [ 2752.981796] FAULT_INJECTION: forcing a failure. [ 2752.981796] name failslab, interval 1, probability 0, space 0, times 0 [ 2752.984371] CPU: 0 PID: 12753 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 2752.985840] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2752.987614] Call Trace: [ 2752.988191] dump_stack+0x107/0x167 [ 2752.988974] should_fail.cold+0x5/0xa [ 2752.989795] ? create_object.isra.0+0x3a/0xa30 [ 2752.990775] should_failslab+0x5/0x20 [ 2752.991591] kmem_cache_alloc+0x5b/0x310 [ 2752.992473] ? mark_held_locks+0x9e/0xe0 [ 2752.993351] create_object.isra.0+0x3a/0xa30 [ 2752.994294] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2752.995414] kmem_cache_alloc+0x159/0x310 [ 2752.996325] xas_alloc+0x336/0x440 [ 2752.997099] xas_create+0x34a/0x10d0 [ 2752.997918] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2752.999053] xas_store+0x8c/0x1c40 [ 2752.999863] __xa_store+0x164/0x2d0 [ 2753.000658] ? xa_delete_node+0x280/0x280 [ 2753.001571] ? trace_hardirqs_on+0x5b/0x180 [ 2753.002515] xa_store+0x31/0x50 [ 2753.003243] __io_uring_add_tctx_node+0x1cf/0x520 [ 2753.004283] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2753.005401] ? alloc_fd+0x2e7/0x670 [ 2753.006203] io_uring_setup+0x1fbb/0x2980 [ 2753.007124] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2753.008207] ? wait_for_completion_io+0x270/0x270 [ 2753.009291] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2753.010431] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2753.011560] do_syscall_64+0x33/0x40 [ 2753.012368] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2753.013437] RIP: 0033:0x7fd0bb875b19 [ 2753.014247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2753.018160] RSP: 002b:00007fd0b8deb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2753.019831] RAX: ffffffffffffffda RBX: 00007fd0bb988f60 RCX: 00007fd0bb875b19 [ 2753.021341] RDX: 000000002080d000 RSI: 0000000020000080 RDI: 0000000000002726 [ 2753.022879] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2753.024407] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000180 [ 2753.025926] R13: 000000002080d000 R14: 0000000020000100 R15: 0000000020ffc000 [ 2753.430080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2753.435571] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:37:42 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0x0, 0x2}, 0x0) 09:37:42 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0x200000000000000}, 0x0) 09:37:42 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYBLOB="0c00990000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r3, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r4, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:37:42 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x185680, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:37:42 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="c00e000012002302"], 0x50}}, 0x0) 09:37:42 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) (fail_nth: 55) syz_io_uring_setup(0x0, 0x0, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, 0x0, &(0x7f0000000680)) syz_io_uring_setup(0x208a, 0x0, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 09:37:42 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r3, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:37:42 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="0f000000150023"], 0x50}}, 0x0) [ 2770.561509] FAULT_INJECTION: forcing a failure. [ 2770.561509] name failslab, interval 1, probability 0, space 0, times 0 [ 2770.563991] CPU: 0 PID: 12765 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 2770.565495] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2770.567312] Call Trace: [ 2770.567896] dump_stack+0x107/0x167 [ 2770.568698] should_fail.cold+0x5/0xa [ 2770.569534] ? xas_alloc+0x336/0x440 [ 2770.570349] should_failslab+0x5/0x20 [ 2770.571193] kmem_cache_alloc+0x5b/0x310 [ 2770.572094] xas_alloc+0x336/0x440 [ 2770.572879] xas_create+0x34a/0x10d0 [ 2770.573718] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2770.574871] xas_store+0x8c/0x1c40 [ 2770.575682] __xa_store+0x164/0x2d0 [ 2770.576485] ? xa_delete_node+0x280/0x280 [ 2770.577405] ? trace_hardirqs_on+0x5b/0x180 [ 2770.578364] xa_store+0x31/0x50 [ 2770.579103] __io_uring_add_tctx_node+0x1cf/0x520 [ 2770.580151] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2770.581287] ? alloc_fd+0x2e7/0x670 [ 2770.582107] io_uring_setup+0x1fbb/0x2980 [ 2770.583038] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2770.584137] ? wait_for_completion_io+0x270/0x270 [ 2770.585232] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2770.586368] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2770.587506] do_syscall_64+0x33/0x40 [ 2770.588318] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2770.589427] RIP: 0033:0x7fd0bb875b19 [ 2770.590238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2770.594202] RSP: 002b:00007fd0b8deb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2770.595834] RAX: ffffffffffffffda RBX: 00007fd0bb988f60 RCX: 00007fd0bb875b19 [ 2770.597352] RDX: 000000002080d000 RSI: 0000000020000080 RDI: 0000000000002726 [ 2770.598893] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2770.600413] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000180 [ 2770.601921] R13: 000000002080d000 R14: 0000000020000100 R15: 0000000020ffc000 [ 2770.616723] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2770.625821] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2770.634434] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 09:37:42 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0xf00000000000000}, 0x0) 09:37:42 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="e03f030012002302"], 0x50}}, 0x0) 09:37:42 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0x0, 0x8}, 0x0) 09:37:42 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="c0000000150023"], 0x50}}, 0x0) 09:37:42 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r3, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:37:42 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="1037002012002302"], 0x50}}, 0x0) 09:37:42 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0x6903000000000000}, 0x0) [ 2770.822090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:37:42 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) (fail_nth: 56) syz_io_uring_setup(0x0, 0x0, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, 0x0, &(0x7f0000000680)) syz_io_uring_setup(0x208a, 0x0, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 2770.930020] FAULT_INJECTION: forcing a failure. [ 2770.930020] name failslab, interval 1, probability 0, space 0, times 0 [ 2770.932639] CPU: 0 PID: 12792 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 2770.934134] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2770.935919] Call Trace: [ 2770.936493] dump_stack+0x107/0x167 [ 2770.937288] should_fail.cold+0x5/0xa [ 2770.938116] ? create_object.isra.0+0x3a/0xa30 [ 2770.939115] should_failslab+0x5/0x20 [ 2770.939940] kmem_cache_alloc+0x5b/0x310 [ 2770.940847] ? mark_held_locks+0x9e/0xe0 [ 2770.941743] create_object.isra.0+0x3a/0xa30 [ 2770.942703] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2770.943813] kmem_cache_alloc+0x159/0x310 [ 2770.944728] xas_alloc+0x336/0x440 [ 2770.945509] xas_create+0x34a/0x10d0 [ 2770.946342] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2770.947501] xas_store+0x8c/0x1c40 [ 2770.948307] __xa_store+0x164/0x2d0 [ 2770.949105] ? xa_delete_node+0x280/0x280 [ 2770.950026] ? trace_hardirqs_on+0x5b/0x180 [ 2770.950991] xa_store+0x31/0x50 [ 2770.951716] __io_uring_add_tctx_node+0x1cf/0x520 [ 2770.952762] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2770.953898] ? alloc_fd+0x2e7/0x670 [ 2770.954728] io_uring_setup+0x1fbb/0x2980 [ 2770.955646] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2770.956749] ? wait_for_completion_io+0x270/0x270 [ 2770.957842] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2770.958988] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2770.960131] do_syscall_64+0x33/0x40 [ 2770.960939] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2770.962050] RIP: 0033:0x7fd0bb875b19 [ 2770.962871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2770.966845] RSP: 002b:00007fd0b8deb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2770.968496] RAX: ffffffffffffffda RBX: 00007fd0bb988f60 RCX: 00007fd0bb875b19 [ 2770.970036] RDX: 000000002080d000 RSI: 0000000020000080 RDI: 0000000000002726 [ 2770.971583] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2770.973115] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000180 [ 2770.974667] R13: 000000002080d000 R14: 0000000020000100 R15: 0000000020ffc000 [ 2771.448816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:37:57 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0x0, 0xf}, 0x0) 09:37:57 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x185680, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:37:57 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYBLOB="0c00990000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r3, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r4, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:37:57 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="c00e0000150023"], 0x50}}, 0x0) [ 2786.257133] FAULT_INJECTION: forcing a failure. [ 2786.257133] name failslab, interval 1, probability 0, space 0, times 0 [ 2786.258828] CPU: 0 PID: 12801 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 2786.259827] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2786.261021] Call Trace: [ 2786.261409] dump_stack+0x107/0x167 [ 2786.261938] should_fail.cold+0x5/0xa [ 2786.262493] ? xas_alloc+0x336/0x440 [ 2786.263035] should_failslab+0x5/0x20 [ 2786.263591] kmem_cache_alloc+0x5b/0x310 [ 2786.264191] xas_alloc+0x336/0x440 [ 2786.264705] xas_create+0x34a/0x10d0 [ 2786.265257] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2786.266016] xas_store+0x8c/0x1c40 [ 2786.266559] __xa_store+0x164/0x2d0 [ 2786.267097] ? xa_delete_node+0x280/0x280 [ 2786.267709] ? trace_hardirqs_on+0x5b/0x180 [ 2786.268339] xa_store+0x31/0x50 [ 2786.268817] __io_uring_add_tctx_node+0x1cf/0x520 [ 2786.269505] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2786.270252] ? alloc_fd+0x2e7/0x670 [ 2786.270793] io_uring_setup+0x1fbb/0x2980 [ 2786.271411] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2786.272135] ? wait_for_completion_io+0x270/0x270 [ 2786.272860] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2786.273608] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2786.274350] do_syscall_64+0x33/0x40 [ 2786.274909] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2786.275641] RIP: 0033:0x7fd0bb875b19 [ 2786.276177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2786.278654] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2786.278777] RSP: 002b:00007fd0b8deb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2786.281705] RAX: ffffffffffffffda RBX: 00007fd0bb988f60 RCX: 00007fd0bb875b19 [ 2786.282724] RDX: 000000002080d000 RSI: 0000000020000080 RDI: 0000000000002726 [ 2786.283746] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2786.284755] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000180 [ 2786.285761] R13: 000000002080d000 R14: 0000000020000100 R15: 0000000020ffc000 [ 2786.299028] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. 09:37:57 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r3, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:37:57 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0x9effffff00000000}, 0x0) 09:37:57 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="00f0ff7f12002302"], 0x50}}, 0x0) 09:37:57 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) (fail_nth: 57) syz_io_uring_setup(0x0, 0x0, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, 0x0, &(0x7f0000000680)) syz_io_uring_setup(0x208a, 0x0, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 2786.308434] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:37:57 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0xc00e000000000000}, 0x0) 09:37:57 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0x0, 0xf0}, 0x0) 09:37:57 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="effdffff12002302"], 0x50}}, 0x0) 09:37:58 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="e03f0300150023"], 0x50}}, 0x0) 09:37:58 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r1, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r2, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:37:58 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0xf0ffffff00000000}, 0x0) 09:37:58 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) (fail_nth: 58) syz_io_uring_setup(0x0, 0x0, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, 0x0, &(0x7f0000000680)) syz_io_uring_setup(0x208a, 0x0, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 09:37:58 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0x0, 0x2d1}, 0x0) [ 2786.574503] FAULT_INJECTION: forcing a failure. [ 2786.574503] name failslab, interval 1, probability 0, space 0, times 0 [ 2786.577255] CPU: 0 PID: 12826 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 2786.578726] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2786.580484] Call Trace: [ 2786.581102] dump_stack+0x107/0x167 [ 2786.581928] should_fail.cold+0x5/0xa [ 2786.582777] ? xas_alloc+0x336/0x440 [ 2786.583582] should_failslab+0x5/0x20 [ 2786.584396] kmem_cache_alloc+0x5b/0x310 [ 2786.585276] xas_alloc+0x336/0x440 [ 2786.586044] xas_create+0x34a/0x10d0 [ 2786.586916] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2786.588114] xas_store+0x8c/0x1c40 [ 2786.588911] __xa_store+0x164/0x2d0 [ 2786.589693] ? xa_delete_node+0x280/0x280 [ 2786.590587] ? trace_hardirqs_on+0x5b/0x180 [ 2786.591545] xa_store+0x31/0x50 [ 2786.592255] __io_uring_add_tctx_node+0x1cf/0x520 [ 2786.593287] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2786.594400] ? alloc_fd+0x2e7/0x670 [ 2786.595213] io_uring_setup+0x1fbb/0x2980 [ 2786.596111] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2786.597185] ? wait_for_completion_io+0x270/0x270 [ 2786.598260] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2786.599430] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2786.600604] do_syscall_64+0x33/0x40 [ 2786.601399] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2786.602487] RIP: 0033:0x7fd0bb875b19 [ 2786.603325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2786.607379] RSP: 002b:00007fd0b8deb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2786.608996] RAX: ffffffffffffffda RBX: 00007fd0bb988f60 RCX: 00007fd0bb875b19 [ 2786.610513] RDX: 000000002080d000 RSI: 0000000020000080 RDI: 0000000000002726 [ 2786.612147] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2786.613656] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000180 [ 2786.615279] R13: 000000002080d000 R14: 0000000020000100 R15: 0000000020ffc000 [ 2787.126586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2801.840521] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=15 sclass=netlink_xfrm_socket pid=12836 comm=syz-executor.4 09:38:13 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="500000000f002302"], 0x50}}, 0x0) 09:38:13 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0xffffc90000000000}, 0x0) [ 2801.856164] FAULT_INJECTION: forcing a failure. [ 2801.856164] name failslab, interval 1, probability 0, space 0, times 0 [ 2801.858892] CPU: 0 PID: 12838 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 2801.860456] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2801.862312] Call Trace: [ 2801.862915] dump_stack+0x107/0x167 [ 2801.863773] should_fail.cold+0x5/0xa [ 2801.864669] ? xas_alloc+0x336/0x440 [ 2801.865546] should_failslab+0x5/0x20 [ 2801.866437] kmem_cache_alloc+0x5b/0x310 [ 2801.867414] xas_alloc+0x336/0x440 [ 2801.868255] xas_create+0x34a/0x10d0 [ 2801.869158] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2801.870393] xas_store+0x8c/0x1c40 [ 2801.871263] __xa_store+0x164/0x2d0 [ 2801.872113] ? xa_delete_node+0x280/0x280 [ 2801.873093] ? trace_hardirqs_on+0x5b/0x180 [ 2801.874112] xa_store+0x31/0x50 [ 2801.874886] __io_uring_add_tctx_node+0x1cf/0x520 [ 2801.876020] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2801.877232] ? alloc_fd+0x2e7/0x670 [ 2801.878106] io_uring_setup+0x1fbb/0x2980 [ 2801.878756] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2801.879092] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2801.881352] ? wait_for_completion_io+0x270/0x270 [ 2801.882528] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2801.883749] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2801.884958] do_syscall_64+0x33/0x40 [ 2801.885822] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2801.887007] RIP: 0033:0x7fd0bb875b19 [ 2801.887878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2801.892100] RSP: 002b:00007fd0b8deb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2801.893838] RAX: ffffffffffffffda RBX: 00007fd0bb988f60 RCX: 00007fd0bb875b19 [ 2801.895478] RDX: 000000002080d000 RSI: 0000000020000080 RDI: 0000000000002726 [ 2801.897110] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2801.898736] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000180 [ 2801.900365] R13: 000000002080d000 R14: 0000000020000100 R15: 0000000020ffc000 09:38:13 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYBLOB="0c00990000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r3, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r4, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:38:13 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r1, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r2, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:38:13 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0x0, 0xec0}, 0x0) 09:38:13 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) (fail_nth: 59) syz_io_uring_setup(0x0, 0x0, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, 0x0, &(0x7f0000000680)) syz_io_uring_setup(0x208a, 0x0, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 09:38:13 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x185680, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:38:13 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="10370020150023"], 0x50}}, 0x0) 09:38:13 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) 09:38:13 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0x0, 0xf00}, 0x0) [ 2801.932922] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 09:38:13 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000010002302"], 0x50}}, 0x0) 09:38:13 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0x0, 0xc00e}, 0x0) 09:38:13 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="00f0ff7f150023"], 0x50}}, 0x0) 09:38:13 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0xfffffffffffff000}, 0x0) 09:38:13 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0x0, 0xd102}, 0x0) 09:38:13 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}}, 0x0) [ 2802.610892] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:38:30 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0x0, 0xf000}, 0x0) 09:38:30 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000011002302"], 0x50}}, 0x0) 09:38:30 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYBLOB], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r3, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r4, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:38:30 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r1, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r2, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:38:30 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0x0, 0x2}, 0x0) 09:38:30 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) (fail_nth: 60) syz_io_uring_setup(0x0, 0x0, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, 0x0, &(0x7f0000000680)) syz_io_uring_setup(0x208a, 0x0, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 09:38:30 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x185680, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:38:30 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="effdffff150023"], 0x50}}, 0x0) [ 2818.686903] FAULT_INJECTION: forcing a failure. [ 2818.686903] name failslab, interval 1, probability 0, space 0, times 0 [ 2818.689090] CPU: 0 PID: 12871 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 2818.690284] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2818.691712] Call Trace: [ 2818.692170] dump_stack+0x107/0x167 [ 2818.692806] should_fail.cold+0x5/0xa [ 2818.693472] ? xas_alloc+0x336/0x440 [ 2818.694121] should_failslab+0x5/0x20 [ 2818.694786] kmem_cache_alloc+0x5b/0x310 [ 2818.695522] xas_alloc+0x336/0x440 [ 2818.696154] xas_create+0x34a/0x10d0 [ 2818.696822] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 2818.697737] xas_store+0x8c/0x1c40 [ 2818.698388] __xa_store+0x164/0x2d0 [ 2818.699014] ? xa_delete_node+0x280/0x280 [ 2818.699118] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2818.699761] ? trace_hardirqs_on+0x5b/0x180 [ 2818.699802] xa_store+0x31/0x50 [ 2818.703060] __io_uring_add_tctx_node+0x1cf/0x520 [ 2818.703905] ? io_uring_alloc_task_context+0x6a0/0x6a0 [ 2818.704793] ? alloc_fd+0x2e7/0x670 [ 2818.705435] io_uring_setup+0x1fbb/0x2980 [ 2818.706160] ? __do_sys_io_uring_enter+0x1890/0x1890 [ 2818.707038] ? wait_for_completion_io+0x270/0x270 [ 2818.707933] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2818.708853] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2818.709753] do_syscall_64+0x33/0x40 [ 2818.710390] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2818.711296] RIP: 0033:0x7fd0bb875b19 [ 2818.711950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2818.715097] RSP: 002b:00007fd0b8deb108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 2818.716437] RAX: ffffffffffffffda RBX: 00007fd0bb988f60 RCX: 00007fd0bb875b19 [ 2818.717674] RDX: 000000002080d000 RSI: 0000000020000080 RDI: 0000000000002726 [ 2818.718904] RBP: 0000000020000080 R08: 0000000020000180 R09: 0000000020000180 [ 2818.720152] R10: 0000000020000100 R11: 0000000000000202 R12: 0000000020000180 [ 2818.721371] R13: 000000002080d000 R14: 0000000020000100 R15: 0000000020ffc000 [ 2818.741239] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2818.744266] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 09:38:30 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="500000000f0023"], 0x50}}, 0x0) 09:38:30 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0x0, 0x8}, 0x0) 09:38:30 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0x0, 0x80000}, 0x0) 09:38:30 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5002000012002302"], 0x50}}, 0x0) [ 2818.837737] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=15 sclass=netlink_xfrm_socket pid=12885 comm=syz-executor.1 [ 2819.515953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:38:46 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0x0, 0xf0ffff}, 0x0) 09:38:46 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0x0, 0xf}, 0x0) 09:38:46 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYBLOB], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r3, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r4, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:38:46 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x185680, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:38:46 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5003000012002302"], 0x50}}, 0x0) 09:38:46 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50000000100023"], 0x50}}, 0x0) 09:38:46 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r3, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:38:46 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) (fail_nth: 61) syz_io_uring_setup(0x0, 0x0, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, 0x0, &(0x7f0000000680)) syz_io_uring_setup(0x208a, 0x0, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 2834.631369] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2834.648940] FAULT_INJECTION: forcing a failure. [ 2834.648940] name failslab, interval 1, probability 0, space 0, times 0 [ 2834.651364] CPU: 0 PID: 12903 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 2834.652742] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2834.654380] Call Trace: [ 2834.654922] dump_stack+0x107/0x167 [ 2834.655878] should_fail.cold+0x5/0xa [ 2834.656924] ? vm_area_alloc+0x1c/0x110 [ 2834.658010] should_failslab+0x5/0x20 [ 2834.659034] kmem_cache_alloc+0x5b/0x310 [ 2834.660184] vm_area_alloc+0x1c/0x110 [ 2834.661107] mmap_region+0x982/0x1500 [ 2834.661907] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2834.662068] do_mmap+0x868/0x1370 [ 2834.664773] vm_mmap_pgoff+0x198/0x1f0 [ 2834.665746] ? randomize_page+0xb0/0xb0 [ 2834.666764] ksys_mmap_pgoff+0x41c/0x560 [ 2834.667778] ? find_mergeable_anon_vma+0x250/0x250 [ 2834.668996] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2834.670284] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2834.671572] do_syscall_64+0x33/0x40 [ 2834.672490] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2834.673738] RIP: 0033:0x7fd0bb875b62 [ 2834.674633] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2834.678600] RSP: 002b:00007fd0b8deb0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2834.680210] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fd0bb875b62 [ 2834.681717] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 0000000020ffc000 [ 2834.683206] RBP: 0000000020ffc000 R08: 0000000000000005 R09: 0000000000000000 [ 2834.684709] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000180 [ 2834.686203] R13: 000000002080d000 R14: 0000000020000100 R15: 0000000020ffc000 09:38:46 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5004000012002302"], 0x50}}, 0x0) 09:38:46 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) 09:38:46 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0x0, 0xf0}, 0x0) 09:38:46 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50000000110023"], 0x50}}, 0x0) [ 2834.809565] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. 09:38:46 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5005000012002302"], 0x50}}, 0x0) 09:38:46 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 09:38:46 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0x0, 0x369}, 0x0) 09:38:46 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50000000120023"], 0x50}}, 0x0) 09:38:46 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) (fail_nth: 62) syz_io_uring_setup(0x0, 0x0, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, 0x0, &(0x7f0000000680)) syz_io_uring_setup(0x208a, 0x0, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 2834.980013] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2835.010042] FAULT_INJECTION: forcing a failure. [ 2835.010042] name failslab, interval 1, probability 0, space 0, times 0 [ 2835.012735] CPU: 0 PID: 12927 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 2835.014382] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2835.016373] Call Trace: [ 2835.017010] dump_stack+0x107/0x167 [ 2835.017895] should_fail.cold+0x5/0xa [ 2835.018828] ? create_object.isra.0+0x3a/0xa30 [ 2835.019938] should_failslab+0x5/0x20 [ 2835.020862] kmem_cache_alloc+0x5b/0x310 [ 2835.021865] create_object.isra.0+0x3a/0xa30 [ 2835.022918] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2835.024125] kmem_cache_alloc+0x159/0x310 [ 2835.025113] vm_area_alloc+0x1c/0x110 [ 2835.026001] mmap_region+0x982/0x1500 [ 2835.026937] do_mmap+0x868/0x1370 [ 2835.027808] vm_mmap_pgoff+0x198/0x1f0 [ 2835.028748] ? randomize_page+0xb0/0xb0 [ 2835.029727] ksys_mmap_pgoff+0x41c/0x560 [ 2835.030691] ? find_mergeable_anon_vma+0x250/0x250 [ 2835.031885] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2835.033146] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2835.034399] do_syscall_64+0x33/0x40 [ 2835.035304] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2835.036552] RIP: 0033:0x7fd0bb875b62 [ 2835.037449] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2835.041898] RSP: 002b:00007fd0b8deb0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2835.043795] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fd0bb875b62 [ 2835.045549] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 0000000020ffc000 [ 2835.047307] RBP: 0000000020ffc000 R08: 0000000000000005 R09: 0000000000000000 [ 2835.049072] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000180 [ 2835.050846] R13: 000000002080d000 R14: 0000000020000100 R15: 0000000020ffc000 [ 2835.444660] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2835.469248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2835.485844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 09:39:03 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0x0, 0xf000000}, 0x0) 09:39:03 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0x0, 0xec0}, 0x0) 09:39:03 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYBLOB], 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r3, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r4, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:39:03 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x185680, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000055437b40e9b02a00", @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000"], 0x28}}, 0x0) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x409becb7bdfc1d3, 0x1, 0x0, 0x0, 0x9db}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:39:03 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50000000130023"], 0x50}}, 0x0) 09:39:03 executing program 0: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12418, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}, 0x0, 0x1000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) syz_io_uring_setup(0x2726, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f000080d000/0x2000)=nil, &(0x7f0000000100), &(0x7f0000000180)) (fail_nth: 63) syz_io_uring_setup(0x0, 0x0, &(0x7f0000211000/0x4000)=nil, &(0x7f00009e5000/0x2000)=nil, 0x0, &(0x7f0000000680)) syz_io_uring_setup(0x208a, 0x0, &(0x7f0000240000/0x2000)=nil, &(0x7f0000ac4000/0x1000)=nil, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 09:39:03 executing program 6: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001d0021eaff000000fbdbe7250100020058e1f427ac228a56bc00c90f3fe6d8040000000000005ae2c0158ab966c0f846bab3690419306c10c4dbc57d0b91a0a89005ee18c339bf30575625bcfd9b5dcd52c532e97ffe59c32f0c7e67beee90fe9408fa96bf8d737b747035e19b0df6874fe61a7e8ece1898de5c236a4a943bb195"], 0x14}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8, @mcast2, 0x5}, 0x1c) openat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(0xffffffffffffffff, 0x40046629, &(0x7f00000003c0)) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r2, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x65}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x47}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20048004) pipe2(&(0x7f0000000380)={0x0, 0x0}, 0x80800) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x6f, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x800000, 0xfffffffc}, 0x0, 0x0, r3, 0x0) sendmmsg$inet6(r0, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)='K', 0x1}], 0x1}}], 0x7ffff000, 0x0) 09:39:03 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5006000012002302"], 0x50}}, 0x0) [ 2851.571677] FAULT_INJECTION: forcing a failure. [ 2851.571677] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2851.573630] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2851.575433] CPU: 1 PID: 12943 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 2851.576259] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2851.577215] Call Trace: [ 2851.577532] dump_stack+0x107/0x167 [ 2851.577953] should_fail.cold+0x5/0xa [ 2851.578403] __alloc_pages_nodemask+0x182/0x600 [ 2851.578945] ? __alloc_pages_slowpath.constprop.0+0x2310/0x2310 [ 2851.579644] ? walk_mem_res+0x170/0x170 [ 2851.580125] alloc_pages_current+0x187/0x280 [ 2851.580636] pte_alloc_one+0x16/0x1a0 [ 2851.581079] __pte_alloc+0x1d/0x330 [ 2851.581501] remap_pfn_range_internal+0x9a3/0xf60 [ 2851.582068] ? lookup_memtype+0x5b/0x200 [ 2851.582550] ? apply_to_existing_page_range+0x40/0x40 [ 2851.583156] remap_pfn_range+0xcd/0x160 [ 2851.583618] ? remap_pfn_range_notrack+0x70/0x70 [ 2851.584175] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 2851.584772] io_uring_mmap+0x398/0x530 [ 2851.585226] mmap_file+0x5e/0xe0 [ 2851.585621] mmap_region+0xc4d/0x1500 [ 2851.586074] do_mmap+0x868/0x1370 [ 2851.586487] vm_mmap_pgoff+0x198/0x1f0 [ 2851.586939] ? randomize_page+0xb0/0xb0 [ 2851.587409] ksys_mmap_pgoff+0x41c/0x560 [ 2851.587887] ? find_mergeable_anon_vma+0x250/0x250 [ 2851.588455] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2851.589066] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2851.589661] do_syscall_64+0x33/0x40 [ 2851.590093] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2851.590681] RIP: 0033:0x7fd0bb875b62 [ 2851.591111] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2851.593251] RSP: 002b:00007fd0b8deb0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2851.594160] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fd0bb875b62 [ 2851.594979] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 0000000020ffc000 [ 2851.595813] RBP: 0000000020ffc000 R08: 0000000000000005 R09: 0000000000000000 [ 2851.596631] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000180 [ 2851.597457] R13: 000000002080d000 R14: 0000000020000100 R15: 0000000020ffc000 [ 2851.607131] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2851.617297] ------------[ cut here ]------------ [ 2851.618281] WARNING: CPU: 0 PID: 12943 at arch/x86/mm/pat/memtype.c:1019 get_pat_info+0x216/0x270 [ 2851.619780] Modules linked in: [ 2851.620347] CPU: 0 PID: 12943 Comm: syz-executor.0 Not tainted 5.10.247 #1 [ 2851.621511] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2851.622926] RIP: 0010:get_pat_info+0x216/0x270 [ 2851.623713] Code: c1 ea 03 80 3c 02 00 75 71 49 89 1e eb 8e e8 31 89 2e 00 0f 0b e9 97 fe ff ff 41 bc ea ff ff ff e9 77 ff ff ff e8 1a 89 2e 00 <0f> 0b 41 bc ea ff ff ff e9 65 ff ff ff 4c 89 ff e8 f5 a2 5a 00 e9 [ 2851.626748] RSP: 0018:ffff888049a2f890 EFLAGS: 00010212 [ 2851.627661] RAX: 00000000000139d6 RBX: ffff88800d68d400 RCX: ffffc900007df000 [ 2851.628866] RDX: 0000000000040000 RSI: ffffffff81124466 RDI: 0000000000000007 [ 2851.630041] RBP: ffff888049a2f948 R08: 0000000000000000 R09: ffff888049a2f818 [ 2851.631207] R10: 0000000000000020 R11: 0000000000000001 R12: 0000000000000028 [ 2851.632402] R13: 1ffff11009345f12 R14: 0000000000000000 R15: ffff88800d68d450 [ 2851.633596] FS: 00007fd0b8deb700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 2851.637569] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2851.641255] CR2: 0000000020005038 CR3: 000000004774e000 CR4: 0000000000350ef0 [ 2851.642401] Call Trace: [ 2851.642818] ? pgprot_writethrough+0xc0/0xc0 [ 2851.643538] ? finish_task_switch+0x1a4/0x5d0 [ 2851.644297] untrack_pfn+0xdc/0x240 [ 2851.644873] ? track_pfn_insert+0x150/0x150 [ 2851.645585] ? lock_downgrade+0x6d0/0x6d0 [ 2851.646264] ? uprobe_munmap+0x1c/0x560 [ 2851.646920] unmap_single_vma+0x1bc/0x300 [ 2851.647650] zap_page_range_single+0x2ce/0x450 [ 2851.648477] ? unmap_single_vma+0x300/0x300 [ 2851.649229] ? remap_pfn_range_internal+0xc56/0xf60 [ 2851.650059] ? lookup_memtype+0x5b/0x200 [ 2851.650794] ? apply_to_existing_page_range+0x40/0x40 [ 2851.651697] remap_pfn_range+0x139/0x160 [ 2851.652401] ? remap_pfn_range_notrack+0x70/0x70 [ 2851.653227] ? memcg_slab_post_alloc_hook+0x17a/0x430 [ 2851.654073] io_uring_mmap+0x398/0x530 [ 2851.654723] mmap_file+0x5e/0xe0 [ 2851.655301] mmap_region+0xc4d/0x1500 [ 2851.655975] do_mmap+0x868/0x1370 [ 2851.656595] vm_mmap_pgoff+0x198/0x1f0 [ 2851.657267] ? randomize_page+0xb0/0xb0 [ 2851.657928] ksys_mmap_pgoff+0x41c/0x560 [ 2851.658608] ? find_mergeable_anon_vma+0x250/0x250 [ 2851.659455] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 2851.660335] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2851.661165] do_syscall_64+0x33/0x40 [ 2851.661816] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 2851.662675] RIP: 0033:0x7fd0bb875b62 [ 2851.663307] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64 [ 2851.666337] RSP: 002b:00007fd0b8deb0f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 2851.667627] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007fd0bb875b62 [ 2851.668828] RDX: 0000000000000003 RSI: 0000000000090140 RDI: 0000000020ffc000 [ 2851.669952] RBP: 0000000020ffc000 R08: 0000000000000005 R09: 0000000000000000 [ 2851.671133] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000180 [ 2851.672322] R13: 000000002080d000 R14: 0000000020000100 R15: 0000000020ffc000 [ 2851.673517] irq event stamp: 1707 [ 2851.674102] hardirqs last enabled at (1715): [] console_unlock+0x92d/0xb40 [ 2851.675831] hardirqs last disabled at (1770): [] console_unlock+0x839/0xb40 [ 2851.677303] softirqs last enabled at (1768): [] asm_call_irq_on_stack+0x12/0x20 [ 2851.678849] softirqs last disabled at (1723): [] asm_call_irq_on_stack+0x12/0x20 [ 2851.680331] ---[ end trace 7ca7c848ab7b94da ]--- 09:39:03 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0x0, 0x9effffff}, 0x0) 09:39:03 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5007000012002302"], 0x50}}, 0x0) 09:39:03 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0x0, 0xf00}, 0x0) 09:39:03 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50000000140023"], 0x50}}, 0x0) 09:39:03 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5008000012002302"], 0x50}}, 0x0) 09:39:03 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0x0, 0x6903}, 0x0) 09:39:03 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0x0, 0xc00e0000}, 0x0) 09:39:03 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="50020000150023"], 0x50}}, 0x0) 09:39:03 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5009000012002302"], 0x50}}, 0x0) 09:39:03 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000036c0)=ANY=[@ANYBLOB="5000000015002302"], 0x50}, 0x1, 0x0, 0x0, 0xd1020000}, 0x0) [ 2852.230750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2852.301921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2852.363343] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium VM DIAGNOSIS: 09:39:03 Registers: info registers vcpu 0 RAX=000000000000005b RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff822e5dd1 RDI=ffffffff879f8240 RBP=ffffffff879f8200 RSP=ffff888049a2f2a8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000000 R11=0000000000000001 R12=000000000000005b R13=000000000000005b R14=ffffffff879f8200 R15=dffffc0000000000 RIP=ffffffff822e5e28 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007fd0b8deb700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000020005038 CR3=000000004774e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000002 RCX=ffffffff85d4a3ce RDX=1ffffffff0ba947a RSI=ffffffff85d4a39e RDI=ffffffff85948cf4 RBP=ffff88806cf096cd RSP=ffff88806cf095c0 R8 =ffffffff85d4a39e R9 =ffffffff85d4a446 R10=0000000000032047 R11=1ffff1100d9e12c0 R12=ffff88806cf096e0 R13=ffff88806cf09698 R14=1ffff1100d9e12c0 R15=ffffffff85d4a3d2 RIP=ffffffff8110838b RFL=00000012 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f90fb022700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000020005038 CR3=0000000047728000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00ff0000000000000000000000000000 XMM01=000100000000000000000000000000ff XMM02=7463656a6e695f31313230385f7a7973 XMM03=bc25565730bf39c318ee0590a8a0910b XMM04=25e7dbfb000000ffea21001d00000014 XMM05=95b13b944a6a235cde9818ce8e7e1ae6 XMM06=4f87f60d9be13570747b738dbf96fa08 XMM07=94fe90eebe677e0c2fc359fe7fe932c5 XMM08=52cd5d9bfdbc25565730bf39c318ee05 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000