b, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

11:34:13 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), 0x0)

[ 1763.817900] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
11:34:13 executing program 1:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=<r2=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4(r3, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

[ 1763.905518] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1763.906396] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1763.908306] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:34:13 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), 0x0)

11:34:26 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x9)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x4000007ffffffc)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, 0x0, &(0x7f0000000240), 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:34:26 executing program 2:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x0)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:34:26 executing program 1:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4(0xffffffffffffffff, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:34:26 executing program 6:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x9)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r1, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r1, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(0xffffffffffffffff, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:34:26 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./fi'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

11:34:26 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x7895, 0x0, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100))

11:34:26 executing program 7:
openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x48080, 0x0)
r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r3, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:34:26 executing program 5:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(0x0, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

[ 1776.875110] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
11:34:26 executing program 6:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x9)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r1, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r1, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(0xffffffffffffffff, 0x14c4, 0x0, 0x0, 0x0, 0x0)

[ 1776.942634] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1776.943771] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1776.944710] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:34:26 executing program 6:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x9)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r1, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r1, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(0xffffffffffffffff, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:34:26 executing program 1:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4(0xffffffffffffffff, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:34:26 executing program 5:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(0x0, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:34:26 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2400000010000100000000ec0000009600000900050000000000000005000080480000006fe884b7f11ac8f1810d0dc930b7fbbdfe445812bd4e3ddf303ed73209364a02ef9768d0c54531c0e48e8b51a2f78d54f00d9cdd3a5569eaaaf9d57fd00fe7eff61a89507780518151ccc61d149f11066c74aac60fe6c088582777cddc52bd82c5ef927b1c475f2e339546488ff742ba361f30616ba6000013203bece0c63d63d44a2d8033a9f2319b5d7e75aed01f84fbba37b71774867fc770eb6690f7a3c3e0d63d75b35925d7980ce0513e1600a3b9b8634496ce235be6daabe6f870e770a7124542c63a0febe8281dfa46ca86343801a72702c3c16a"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

[ 1777.040806] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
11:34:26 executing program 4:
openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x9)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x4000007ffffffc)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, 0x0, &(0x7f0000000240), 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:34:26 executing program 5:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(0x0, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

[ 1777.074187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1777.075051] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1777.075911] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:34:26 executing program 6:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:34:43 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00')
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000000, 0x12, r0, 0x8000000)
mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x6, 0x10, r1, 0x10000000)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x2002, 0x0)
syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100))

11:34:43 executing program 5:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:34:43 executing program 6:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:34:43 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

11:34:43 executing program 1:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4(0xffffffffffffffff, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:34:43 executing program 7:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x48080, 0x0)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x0)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:34:43 executing program 3:
openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x9)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x4000007ffffffc)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, 0x0, &(0x7f0000000240), 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:34:43 executing program 2:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2400000010000100000000ec0000009600000900050000000000000005000080480000006fe884b7f11ac8f1810d0dc930b7fbbdfe445812bd4e3ddf303ed73209364a02ef9768d0c54531c0e48e8b51a2f78d54f00d9cdd3a5569eaaaf9d57fd00fe7eff61a89507780518151ccc61d149f11066c74aac60fe6c088582777cddc52bd82c5ef927b1c475f2e339546488ff742ba361f30616ba6000013203bece0c63d63d44a2d8033a9f2319b5d7e75aed01f84fbba37b71774867fc770eb6690f7a3c3e0d63d75b35925d7980ce0513e1600a3b9b8634496ce235be6daabe6f870e770a7124542c63a0febe8281dfa46ca86343801a72702c3c16a"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

11:34:43 executing program 5:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

[ 1794.075123] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1794.107400] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
11:34:43 executing program 4:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:34:43 executing program 7:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x48080, 0x0)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x0)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

[ 1794.185231] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
11:34:43 executing program 1:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:34:43 executing program 5:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

[ 1794.186992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1794.190422] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1794.198079] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1794.199642] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1794.210905] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:34:43 executing program 7:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x48080, 0x0)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x0)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:34:43 executing program 5:
openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r3, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r4, r2, 0x0, 0x8001)
io_uring_enter(r0, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:34:43 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

11:34:43 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:34:43 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x48080, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x9)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x4000007ffffffc)
r2 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
pread64(r5, &(0x7f0000000000)=""/193, 0xc1, 0x8)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r5)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0)
accept4(r6, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r7, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r2, 0x14c4, 0x0, 0x0, 0x0, 0x0)

[ 1794.395357] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1794.476074] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1794.477734] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1794.479418] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1806.799407] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
11:34:56 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

11:34:56 executing program 7:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x48080, 0x0)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(0xffffffffffffffff, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:34:56 executing program 5:
openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r3, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r4, r2, 0x0, 0x8001)
io_uring_enter(r0, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:34:56 executing program 4:
r0 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r0, 0x8000000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0xd69ae58aee24da26, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x1b}, @val={0x8, 0x3, r6}, @void}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000084}, 0x40000)
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r7 = perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r8 = creat(&(0x7f00000001c0)='./file0\x00', 0x0)
dup2(r8, r7)

11:34:56 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0)
ftruncate(r0, 0x1000004)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x110)
perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lseek(r1, 0x0, 0x4)

11:34:56 executing program 6:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:34:56 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x9)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x4000007ffffffc)
r2 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r5, 0x0, &(0x7f0000000240), 0x800)
syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x0)
io_uring_enter(r2, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:34:56 executing program 1:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:34:56 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0)
ftruncate(r0, 0x1000004)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000))
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000280)={0x3, 0x1, 0x12, 0x4, 0xa0, &(0x7f0000000480)})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x110)
r2 = epoll_create1(0x0)
r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000001c0))
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x8, 0x6, 0x1a, 0x6, 0x0, 0x3ff, 0x200, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x4, 0x400, 0x4, 0x6, 0x3, 0x1f, 0x5, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xf, r3, 0x0)
perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
copy_file_range(r0, 0x0, r1, 0x0, 0x200f5f4, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8102, 0x140)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00')
readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
r5 = syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100))
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000200)=ANY=[@ANYBLOB="01007d000100000018000000", @ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00./file0\x00'])
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r4, 0x40082102, &(0x7f0000000300))

11:34:56 executing program 7:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x48080, 0x0)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(0xffffffffffffffff, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:34:56 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x48080, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x9)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x4000007ffffffc)
r2 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
pread64(r5, &(0x7f0000000000)=""/193, 0xc1, 0x8)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r5)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r2, 0x14c4, 0x0, 0x0, 0x0, 0x0)

[ 1806.929363] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1806.930256] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1806.931200] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:34:56 executing program 5:
openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r3, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r4, r2, 0x0, 0x8001)
io_uring_enter(r0, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:34:56 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x9)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x4000007ffffffc)
r2 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r5, 0x0, &(0x7f0000000240), 0x800)
syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x0)
io_uring_enter(r2, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:34:56 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

[ 1807.032864] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
11:34:56 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

[ 1807.067403] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1807.128032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1807.129890] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1807.131730] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1807.179056] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1807.179981] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1807.180869] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1824.361385] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
11:35:13 executing program 2:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

11:35:13 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x9)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x4000007ffffffc)
r2 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r5, 0x0, &(0x7f0000000240), 0x800)
syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x0)
io_uring_enter(r2, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:35:13 executing program 6:
socket$netlink(0x10, 0x3, 0x9)
r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r3, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:35:13 executing program 4:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

11:35:13 executing program 7:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x48080, 0x0)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(0xffffffffffffffff, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:35:13 executing program 5:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:35:13 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

11:35:13 executing program 1:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

[ 1824.407151] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1824.433264] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1824.476559] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1824.478303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1824.481795] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:35:14 executing program 7:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x48080, 0x0)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 1824.494320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1824.496062] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1824.499062] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:35:14 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x9)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x4000007ffffffc)
r2 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r5, 0x0, &(0x7f0000000240), 0x800)
syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(0xffffffffffffffff, 0x14c4, 0x0, 0x0, 0x0, 0x0)

[ 1824.552340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1824.553963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1824.557546] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:35:14 executing program 5:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:35:14 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r2 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r2, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r3 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r3, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r3, 0x0, 0x14, &(0x7f0000000300)=""/85)

11:35:14 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0)
ftruncate(r0, 0x1000004)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000))
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000280)={0x3, 0x1, 0x12, 0x4, 0xa0, &(0x7f0000000480)})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x110)
r2 = epoll_create1(0x0)
r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000001c0))
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x8, 0x6, 0x1a, 0x6, 0x0, 0x3ff, 0x200, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x4, 0x400, 0x4, 0x6, 0x3, 0x1f, 0x5, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xf, r3, 0x0)
perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
copy_file_range(r0, 0x0, r1, 0x0, 0x200f5f4, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8102, 0x140)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00')
readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
r5 = syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100))
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000200)=ANY=[@ANYBLOB="01007d000100000018000000", @ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00./file0\x00'])
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r4, 0x40082102, &(0x7f0000000300))

11:35:14 executing program 7:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x48080, 0x0)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x0, 0x0, 0x0, 0x0, 0x0)

11:35:14 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x48080, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x9)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x4000007ffffffc)
r2 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
pread64(r5, &(0x7f0000000000)=""/193, 0xc1, 0x8)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r5)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r2, 0x14c4, 0x0, 0x0, 0x0, 0x0)

[ 1824.697029] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
11:35:14 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x9)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x4000007ffffffc)
r2 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r5, 0x0, &(0x7f0000000240), 0x800)
syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(0xffffffffffffffff, 0x14c4, 0x0, 0x0, 0x0, 0x0)

[ 1824.783261] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1824.785006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1824.788325] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:35:14 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x48080, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x9)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x4000007ffffffc)
r2 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
pread64(r5, &(0x7f0000000000)=""/193, 0xc1, 0x8)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r5)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r2, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:35:14 executing program 5:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:35:30 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x9)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x4000007ffffffc)
r2 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r5, 0x0, &(0x7f0000000240), 0x800)
syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(0xffffffffffffffff, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:35:30 executing program 7:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x48080, 0x0)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x0, 0x0, 0x0, 0x0, 0x0)

11:35:30 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0)
ftruncate(r0, 0x1000004)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000))
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000280)={0x3, 0x1, 0x12, 0x4, 0xa0, &(0x7f0000000480)})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x110)
r2 = epoll_create1(0x0)
r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000001c0))
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x8, 0x6, 0x1a, 0x6, 0x0, 0x3ff, 0x200, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x4, 0x400, 0x4, 0x6, 0x3, 0x1f, 0x5, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xf, r3, 0x0)
perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
copy_file_range(r0, 0x0, r1, 0x0, 0x200f5f4, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8102, 0x140)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00')
readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
r5 = syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100))
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000200)=ANY=[@ANYBLOB="01007d000100000018000000", @ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00./file0\x00'])
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r4, 0x40082102, &(0x7f0000000300))

11:35:30 executing program 2:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:35:30 executing program 5:
openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r3, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:35:30 executing program 6:
socket$netlink(0x10, 0x3, 0x9)
r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r3, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:35:30 executing program 1:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r1, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4(r1, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(0xffffffffffffffff, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:35:30 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2400000010000100000000ec0000009600000900050000000000000005000080480000006fe884b7f11ac8f1810d0dc930b7fbbdfe445812bd4e3ddf303ed73209364a02ef9768d0c54531c0e48e8b51a2f78d54f00d9cdd3a5569eaaaf9d57fd00fe7eff61a89507780518151ccc61d149f11066c74aac60fe6c088582777cddc52bd82c5ef927b1c475f2e339546488ff742ba361f30616ba6000013203bece0c63d63d44a2d8033a9f2319b5d7e75aed01f84fbba37b71774867fc770eb6690f7a3c3e0d63d75b35925d7980ce0513e1600a3b9b8634496ce235be6daabe6f870e770a7124542c63a0febe8281dfa46ca86343801a72702c3c16a"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r2 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r2, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r3 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r3, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r3, 0x0, 0x14, &(0x7f0000000300)=""/85)

[ 1840.968188] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1841.049504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1841.050885] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1841.052351] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:35:30 executing program 1:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r1, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4(r1, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(0xffffffffffffffff, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:35:30 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0)
ftruncate(r0, 0x1000004)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000))
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000280)={0x3, 0x1, 0x12, 0x4, 0xa0, &(0x7f0000000480)})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x110)
r2 = epoll_create1(0x0)
r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000001c0))
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x8, 0x6, 0x1a, 0x6, 0x0, 0x3ff, 0x200, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x4, 0x400, 0x4, 0x6, 0x3, 0x1f, 0x5, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xf, r3, 0x0)
perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lseek(r1, 0x0, 0x4)

11:35:30 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x9)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x4000007ffffffc)
r2 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r5, 0x0, &(0x7f0000000240), 0x800)
syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

11:35:30 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0)
ftruncate(r0, 0x1000004)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000))
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000280)={0x3, 0x1, 0x12, 0x4, 0xa0, &(0x7f0000000480)})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x110)
r2 = epoll_create1(0x0)
r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000001c0))
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x8, 0x6, 0x1a, 0x6, 0x0, 0x3ff, 0x200, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x4, 0x400, 0x4, 0x6, 0x3, 0x1f, 0x5, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xf, r3, 0x0)
perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lseek(r1, 0x0, 0x4)
copy_file_range(r0, 0x0, r1, 0x0, 0x200f5f4, 0x0)

11:35:30 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r2 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r2, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r3 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r3, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r3, 0x0, 0x14, &(0x7f0000000300)=""/85)

11:35:30 executing program 1:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r1, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4(r1, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(0xffffffffffffffff, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:35:30 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x48080, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x9)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x4000007ffffffc)
r2 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
pread64(r5, &(0x7f0000000000)=""/193, 0xc1, 0x8)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r5)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r2, 0x14c4, 0x0, 0x0, 0x0, 0x0)

[ 1841.218342] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
11:35:30 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x9)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x4000007ffffffc)
r2 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r5, 0x0, &(0x7f0000000240), 0x800)
syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

11:35:30 executing program 7:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0)
ftruncate(r0, 0x1000004)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000))
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000280)={0x3, 0x1, 0x12, 0x4, 0xa0, &(0x7f0000000480)})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x110)
r2 = epoll_create1(0x0)
r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000001c0))
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x8, 0x6, 0x1a, 0x6, 0x0, 0x3ff, 0x200, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x4, 0x400, 0x4, 0x6, 0x3, 0x1f, 0x5, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xf, r3, 0x0)
perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lseek(r1, 0x0, 0x4)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8102, 0x140)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00')
readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
r5 = syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100))
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000200)=ANY=[@ANYBLOB="01007d000100000018000000", @ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00./file0\x00'])
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r4, 0x40082102, &(0x7f0000000300))

[ 1841.294870] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1841.296208] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1841.297685] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:35:46 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=<r2=>0xffffffffffffffff, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

11:35:46 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x48080, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x9)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x4000007ffffffc)
r2 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
pread64(r5, &(0x7f0000000000)=""/193, 0xc1, 0x8)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r5)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r2, 0x14c4, 0x0, 0x0, 0x0, 0x0)

[ 1856.992317] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.7'.
11:35:46 executing program 6:
socket$netlink(0x10, 0x3, 0x9)
r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r3, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:35:46 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x9)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x4000007ffffffc)
r2 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r5, 0x0, &(0x7f0000000240), 0x800)
syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r2, 0x0, 0x0, 0x0, 0x0, 0x0)

11:35:46 executing program 7:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)

11:35:46 executing program 2:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x48080, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x9)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x4000007ffffffc)
r2 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
pread64(r5, &(0x7f0000000000)=""/193, 0xc1, 0x8)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r5)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r6, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r7, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r2, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:35:46 executing program 5:
openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r3, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:35:46 executing program 1:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

[ 1857.015811] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1857.084764] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1857.086364] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1857.088192] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1857.106263] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1857.107877] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1857.114348] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:35:46 executing program 7:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0)
ftruncate(r0, 0x1000004)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000))
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000280)={0x3, 0x1, 0x12, 0x4, 0xa0, &(0x7f0000000480)})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x110)
r2 = epoll_create1(0x0)
r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000001c0))
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x8, 0x6, 0x1a, 0x6, 0x0, 0x3ff, 0x200, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x4, 0x400, 0x4, 0x6, 0x3, 0x1f, 0x5, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xf, r3, 0x0)
perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lseek(r1, 0x0, 0x4)

11:35:46 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=<r2=>0xffffffffffffffff, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

11:35:46 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0)
ftruncate(r0, 0x1000004)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000))
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000280)={0x3, 0x1, 0x12, 0x4, 0xa0, &(0x7f0000000480)})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x110)
epoll_create1(0x0)
openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lseek(r1, 0x0, 0x4)

[ 1857.276799] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1857.353196] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1857.354419] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1857.355721] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:36:01 executing program 3:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x48080, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x9)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x4000007ffffffc)
r2 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
pread64(r5, &(0x7f0000000000)=""/193, 0xc1, 0x8)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r5)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r6, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r7, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r2, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:36:01 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0)
ftruncate(r0, 0x1000004)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000))
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000280)={0x3, 0x1, 0x12, 0x4, 0xa0, &(0x7f0000000480)})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x110)
r2 = epoll_create1(0x0)
r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000001c0))
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x8, 0x6, 0x1a, 0x6, 0x0, 0x3ff, 0x200, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x4, 0x400, 0x4, 0x6, 0x3, 0x1f, 0x5, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xf, r3, 0x0)
perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lseek(r1, 0x0, 0x4)
copy_file_range(r0, 0x0, r1, 0x0, 0x200f5f4, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00')
readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
r5 = syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100))
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000200)=ANY=[@ANYBLOB="01007d000100000018000000", @ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00./file0\x00'])
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r4, 0x40082102, &(0x7f0000000300))

11:36:01 executing program 6:
r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:36:01 executing program 2:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)

11:36:01 executing program 7:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0)
ftruncate(r0, 0x1000004)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000))
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000280)={0x3, 0x1, 0x12, 0x4, 0xa0, &(0x7f0000000480)})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x110)
r2 = epoll_create1(0x0)
r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000001c0))
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x8, 0x6, 0x1a, 0x6, 0x0, 0x3ff, 0x200, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x4, 0x400, 0x4, 0x6, 0x3, 0x1f, 0x5, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xf, r3, 0x0)
perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lseek(r1, 0x0, 0x4)
copy_file_range(r0, 0x0, r1, 0x0, 0x200f5f4, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8102, 0x140)

11:36:01 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2400000010000100000000ec0000009600000900050000000000000005000080480000006fe884b7f11ac8f1810d0dc930b7fbbdfe445812bd4e3ddf303ed73209364a02ef9768d0c54531c0e48e8b51a2f78d54f00d9cdd3a5569eaaaf9d57fd00fe7eff61a89507780518151ccc61d149f11066c74aac60fe6c088582777cddc52bd82c5ef927b1c475f2e339546488ff742ba361f30616ba6000013203bece0c63d63d44a2d8033a9f2319b5d7e75aed01f84fbba37b71774867fc770eb6690f7a3c3e0d63d75b35925d7980ce0513e1600a3b9b8634496ce235be6daabe6f870e770a7124542c63a0febe8281dfa46ca86343801a72702c3c16a"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=<r2=>0xffffffffffffffff, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

11:36:01 executing program 5:
openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r3, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:36:01 executing program 1:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

[ 1872.378185] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1872.403007] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
11:36:01 executing program 7:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0)
ftruncate(r0, 0x1000004)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000))
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000280)={0x3, 0x1, 0x12, 0x4, 0xa0, &(0x7f0000000480)})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x110)
r2 = epoll_create1(0x0)
r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000001c0))
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x8, 0x6, 0x1a, 0x6, 0x0, 0x3ff, 0x200, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x4, 0x400, 0x4, 0x6, 0x3, 0x1f, 0x5, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xf, r3, 0x0)
perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lseek(r1, 0x0, 0x4)
copy_file_range(r0, 0x0, r1, 0x0, 0x200f5f4, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00')
readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
r5 = syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100))
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000200)=ANY=[@ANYBLOB="01007d000100000018000000", @ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00./file0\x00'])
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r4, 0x40082102, &(0x7f0000000300))

[ 1872.442848] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1872.443878] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1872.444976] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1872.448014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1872.449020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1872.450375] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:36:02 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0)
ftruncate(r0, 0x1000004)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000))
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000280)={0x3, 0x1, 0x12, 0x4, 0xa0, &(0x7f0000000480)})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x110)
r2 = epoll_create1(0x0)
r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000001c0))
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x8, 0x6, 0x1a, 0x6, 0x0, 0x3ff, 0x200, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x4, 0x400, 0x4, 0x6, 0x3, 0x1f, 0x5, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xf, r3, 0x0)
perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lseek(r1, 0x0, 0x4)
copy_file_range(r0, 0x0, r1, 0x0, 0x200f5f4, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8102, 0x140)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00')
readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)

11:36:02 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2400000010000100000000ec0000009600000900050000000000000005000080480000006fe884b7f11ac8f1810d0dc930b7fbbdfe445812bd4e3ddf303ed73209364a02ef9768d0c54531c0e48e8b51a2f78d54f00d9cdd3a5569eaaaf9d57fd00fe7eff61a89507780518151ccc61d149f11066c74aac60fe6c088582777cddc52bd82c5ef927b1c475f2e339546488ff742ba361f30616ba6000013203bece0c63d63d44a2d8033a9f2319b5d7e75aed01f84fbba37b71774867fc770eb6690f7a3c3e0d63d75b35925d7980ce0513e1600a3b9b8634496ce235be6daabe6f870e770a7124542c63a0febe8281dfa46ca86343801a72702c3c16a"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

11:36:02 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0)
ftruncate(r0, 0x1000004)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000))
ioctl$KDFONTOP_COPY(r0, 0x4b72, &(0x7f0000000280)={0x3, 0x1, 0x12, 0x4, 0xa0, &(0x7f0000000480)})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x110)
r2 = epoll_create1(0x0)
r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000001c0))
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x8, 0x6, 0x1a, 0x6, 0x0, 0x3ff, 0x200, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000}, 0x4, 0x400, 0x4, 0x6, 0x3, 0x1f, 0x5, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xf, r3, 0x0)
perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0)}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lseek(r1, 0x0, 0x4)
copy_file_range(r0, 0x0, r1, 0x0, 0x200f5f4, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00')
readv(r4, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
r5 = syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100))
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r4, 0xc0189378, &(0x7f0000000200)=ANY=[@ANYBLOB="01007d000100000018000000", @ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00./file0\x00'])
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r4, 0x40082102, &(0x7f0000000300))

[ 1872.558804] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
11:36:02 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x9)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x4000007ffffffc)
r2 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r5, 0x0, &(0x7f0000000240), 0x800)
syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r2, 0x14c4, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1)

11:36:02 executing program 7:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x48080, 0x0)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1)

[ 1872.623577] FAULT_INJECTION: forcing a failure.
[ 1872.623577] name failslab, interval 1, probability 0, space 0, times 0
[ 1872.625579] CPU: 0 PID: 9051 Comm: syz-executor.7 Not tainted 5.10.261 #1
[ 1872.626439] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1872.627481] Call Trace:
[ 1872.627827]  dump_stack+0x107/0x167
[ 1872.628289]  should_fail.cold+0x5/0xa
[ 1872.628769]  should_failslab+0x5/0x20
[ 1872.629251]  kmem_cache_alloc_bulk+0x4b/0x320
[ 1872.629816]  io_submit_sqes+0x713e/0x8780
[ 1872.630341]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 1872.630962]  ? __do_sys_io_uring_enter+0x6b2/0x1890
[ 1872.631595]  __do_sys_io_uring_enter+0x6b2/0x1890
[ 1872.632212]  ? find_held_lock+0x2c/0x110
[ 1872.632731]  ? io_submit_sqes+0x8780/0x8780
[ 1872.633276]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1872.633893]  ? wait_for_completion_io+0x270/0x270
[ 1872.634512]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1872.635105]  ? vfs_write+0x354/0xb10
[ 1872.635580]  ? fput_many+0x2f/0x1a0
[ 1872.636044]  ? ksys_write+0x1a9/0x260
[ 1872.636642]  ? __ia32_sys_read+0xb0/0xb0
[ 1872.637222]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1872.638053]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1872.638853]  do_syscall_64+0x33/0x40
[ 1872.639326]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1872.640012] RIP: 0033:0x7f2160c74b19
[ 1872.640499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1872.642909] RSP: 002b:00007f215e1ea188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1872.643899] RAX: ffffffffffffffda RBX: 00007f2160d87f60 RCX: 00007f2160c74b19
[ 1872.644500] FAULT_INJECTION: forcing a failure.
[ 1872.644500] name failslab, interval 1, probability 0, space 0, times 0
[ 1872.644791] RDX: 0000000000000000 RSI: 00000000000014c4 RDI: 0000000000000003
[ 1872.644798] RBP: 00007f215e1ea1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1872.644804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1872.644810] R13: 00007fff4f29e7af R14: 00007f215e1ea300 R15: 0000000000022000
[ 1872.649978] CPU: 1 PID: 9053 Comm: syz-executor.4 Not tainted 5.10.261 #1
[ 1872.650817] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1872.651842] Call Trace:
[ 1872.652171]  dump_stack+0x107/0x167
[ 1872.652624]  should_fail.cold+0x5/0xa
[ 1872.653095]  should_failslab+0x5/0x20
[ 1872.653561]  kmem_cache_alloc_bulk+0x4b/0x320
[ 1872.654128]  io_submit_sqes+0x713e/0x8780
[ 1872.654647]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 1872.655259]  ? __do_sys_io_uring_enter+0x6b2/0x1890
[ 1872.655877]  __do_sys_io_uring_enter+0x6b2/0x1890
[ 1872.656467]  ? find_held_lock+0x2c/0x110
[ 1872.656974]  ? io_submit_sqes+0x8780/0x8780
[ 1872.657532]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1872.658132]  ? wait_for_completion_io+0x270/0x270
[ 1872.658731]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1872.659304]  ? vfs_write+0x354/0xb10
[ 1872.659768]  ? fput_many+0x2f/0x1a0
[ 1872.660209]  ? ksys_write+0x1a9/0x260
[ 1872.660676]  ? __ia32_sys_read+0xb0/0xb0
[ 1872.661176]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1872.661819]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1872.662458]  do_syscall_64+0x33/0x40
[ 1872.662925]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1872.663564] RIP: 0033:0x7f5b8baa1b19
[ 1872.664022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1872.666275] RSP: 002b:00007f5b89017188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1872.667198] RAX: ffffffffffffffda RBX: 00007f5b8bbb4f60 RCX: 00007f5b8baa1b19
[ 1872.668152] RDX: 0000000000000000 RSI: 00000000000014c4 RDI: 0000000000000004
[ 1872.669027] RBP: 00007f5b890171d0 R08: 0000000000000000 R09: 0000000000000000
[ 1872.669905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1872.670791] R13: 00007ffc733bf47f R14: 00007f5b89017300 R15: 0000000000022000
11:36:02 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 1)

[ 1872.684125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1872.685088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1872.686076] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:36:02 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

[ 1872.748308] FAULT_INJECTION: forcing a failure.
[ 1872.748308] name fail_usercopy, interval 1, probability 0, space 0, times 1
[ 1872.749811] CPU: 0 PID: 9055 Comm: syz-executor.2 Not tainted 5.10.261 #1
[ 1872.750642] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1872.751652] Call Trace:
[ 1872.751977]  dump_stack+0x107/0x167
[ 1872.752425]  should_fail.cold+0x5/0xa
[ 1872.752889]  _copy_from_user+0x2e/0x1b0
[ 1872.753380]  io_uring_setup+0x9b/0x2980
[ 1872.753864]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1872.754458]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 1872.755069]  ? wait_for_completion_io+0x270/0x270
[ 1872.755671]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1872.756230]  ? vfs_write+0x354/0xb10
[ 1872.756685]  ? fput_many+0x2f/0x1a0
[ 1872.757123]  ? ksys_write+0x1a9/0x260
[ 1872.757582]  ? __ia32_sys_read+0xb0/0xb0
[ 1872.758071]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1872.758706]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1872.759326]  do_syscall_64+0x33/0x40
[ 1872.759788]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1872.760401] RIP: 0033:0x7f5d125b0b19
[ 1872.760874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1872.763095] RSP: 002b:00007f5d0fb26108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 1872.764031] RAX: ffffffffffffffda RBX: 00007f5d126c3f60 RCX: 00007f5d125b0b19
[ 1872.764931] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895
[ 1872.765805] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100
[ 1872.766675] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100
[ 1872.767558] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000
[ 1872.769942] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1872.846578] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1872.847510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1872.848478] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:36:15 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x9)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x4000007ffffffc)
r2 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r5, 0x0, &(0x7f0000000240), 0x800)
syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r2, 0x14c4, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2)

11:36:15 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

11:36:15 executing program 7:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x48080, 0x0)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2)

11:36:15 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 2)

[ 1886.386061] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1886.393245] FAULT_INJECTION: forcing a failure.
[ 1886.393245] name failslab, interval 1, probability 0, space 0, times 0
[ 1886.395050] CPU: 0 PID: 9068 Comm: syz-executor.7 Not tainted 5.10.261 #1
[ 1886.395867] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1886.396804] Call Trace:
[ 1886.397117]  dump_stack+0x107/0x167
[ 1886.397545]  should_fail.cold+0x5/0xa
[ 1886.397982]  ? create_object.isra.0+0x3a/0xa30
[ 1886.398505]  should_failslab+0x5/0x20
[ 1886.398953]  kmem_cache_alloc+0x5b/0x310
[ 1886.399436]  create_object.isra.0+0x3a/0xa30
[ 1886.399962]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1886.400541]  kmem_cache_alloc_bulk+0x168/0x320
[ 1886.401083]  io_submit_sqes+0x713e/0x8780
[ 1886.401568]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 1886.402143]  ? __do_sys_io_uring_enter+0x6b2/0x1890
[ 1886.402728]  __do_sys_io_uring_enter+0x6b2/0x1890
[ 1886.403295]  ? find_held_lock+0x2c/0x110
[ 1886.403784]  ? io_submit_sqes+0x8780/0x8780
[ 1886.404153] FAULT_INJECTION: forcing a failure.
[ 1886.404153] name failslab, interval 1, probability 0, space 0, times 0
[ 1886.404300]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1886.407689]  ? wait_for_completion_io+0x270/0x270
[ 1886.408257]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1886.408796]  ? vfs_write+0x354/0xb10
[ 1886.409235]  ? fput_many+0x2f/0x1a0
[ 1886.409661]  ? ksys_write+0x1a9/0x260
[ 1886.410108]  ? __ia32_sys_read+0xb0/0xb0
[ 1886.410586]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1886.411201]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1886.411815]  do_syscall_64+0x33/0x40
[ 1886.412255]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1886.412843] RIP: 0033:0x7f2160c74b19
[ 1886.413280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1886.415433] RSP: 002b:00007f215e1ea188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1886.416334] RAX: ffffffffffffffda RBX: 00007f2160d87f60 RCX: 00007f2160c74b19
[ 1886.417142] RDX: 0000000000000000 RSI: 00000000000014c4 RDI: 0000000000000003
[ 1886.417971] RBP: 00007f215e1ea1d0 R08: 0000000000000000 R09: 0000000000000000
[ 1886.418783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1886.419616] R13: 00007fff4f29e7af R14: 00007f215e1ea300 R15: 0000000000022000
11:36:15 executing program 6:
r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:36:15 executing program 1:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:36:15 executing program 5:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x0)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:36:15 executing program 3:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

[ 1886.420497] CPU: 1 PID: 9063 Comm: syz-executor.4 Not tainted 5.10.261 #1
[ 1886.422445] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1886.424379] Call Trace:
[ 1886.424991]  dump_stack+0x107/0x167
[ 1886.425836]  should_fail.cold+0x5/0xa
[ 1886.426724]  ? create_object.isra.0+0x3a/0xa30
[ 1886.427797]  should_failslab+0x5/0x20
[ 1886.428678]  kmem_cache_alloc+0x5b/0x310
[ 1886.429627]  create_object.isra.0+0x3a/0xa30
[ 1886.430645]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1886.431835]  kmem_cache_alloc_bulk+0x168/0x320
[ 1886.432901]  io_submit_sqes+0x713e/0x8780
[ 1886.433868]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 1886.435009]  ? __do_sys_io_uring_enter+0x6b2/0x1890
[ 1886.436172]  __do_sys_io_uring_enter+0x6b2/0x1890
[ 1886.437288]  ? find_held_lock+0x2c/0x110
[ 1886.438233]  ? io_submit_sqes+0x8780/0x8780
[ 1886.439241]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1886.440374]  ? wait_for_completion_io+0x270/0x270
[ 1886.441491]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1886.442562]  ? vfs_write+0x354/0xb10
[ 1886.443423]  ? fput_many+0x2f/0x1a0
[ 1886.444271]  ? ksys_write+0x1a9/0x260
[ 1886.445148]  ? __ia32_sys_read+0xb0/0xb0
[ 1886.446093]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1886.447312]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1886.448518]  do_syscall_64+0x33/0x40
[ 1886.449380]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1886.450569] RIP: 0033:0x7f5b8baa1b19
[ 1886.451428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1886.455695] RSP: 002b:00007f5b89017188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1886.457464] RAX: ffffffffffffffda RBX: 00007f5b8bbb4f60 RCX: 00007f5b8baa1b19
[ 1886.459115] RDX: 0000000000000000 RSI: 00000000000014c4 RDI: 0000000000000004
[ 1886.460773] RBP: 00007f5b890171d0 R08: 0000000000000000 R09: 0000000000000000
[ 1886.462423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1886.464082] R13: 00007ffc733bf47f R14: 00007f5b89017300 R15: 0000000000022000
11:36:15 executing program 5:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x0)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

[ 1886.475940] FAULT_INJECTION: forcing a failure.
[ 1886.475940] name failslab, interval 1, probability 0, space 0, times 0
[ 1886.477344] CPU: 0 PID: 9072 Comm: syz-executor.2 Not tainted 5.10.261 #1
[ 1886.478157] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1886.479138] Call Trace:
[ 1886.479452]  dump_stack+0x107/0x167
[ 1886.479901]  should_fail.cold+0x5/0xa
[ 1886.480363]  ? io_uring_setup+0x258/0x2980
[ 1886.480864]  should_failslab+0x5/0x20
[ 1886.481317]  kmem_cache_alloc_trace+0x55/0x320
[ 1886.481862]  io_uring_setup+0x258/0x2980
[ 1886.482351]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1886.482923]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 1886.483522]  ? wait_for_completion_io+0x270/0x270
[ 1886.484112]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1886.484734]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1886.485347]  do_syscall_64+0x33/0x40
[ 1886.485787]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1886.486396] RIP: 0033:0x7f5d125b0b19
[ 1886.486836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1886.489040] RSP: 002b:00007f5d0fb26108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 1886.489052] RAX: ffffffffffffffda RBX: 00007f5d126c3f60 RCX: 00007f5d125b0b19
[ 1886.489057] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895
11:36:16 executing program 5:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x0)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

[ 1886.489062] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100
[ 1886.489068] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100
[ 1886.489073] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000
[ 1886.563082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1886.563097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
11:36:16 executing program 5:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(0xffffffffffffffff, 0x14c4, 0x0, 0x0, 0x0, 0x0)

[ 1886.563398] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:36:16 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 3)

11:36:16 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

11:36:16 executing program 5:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(0xffffffffffffffff, 0x14c4, 0x0, 0x0, 0x0, 0x0)

[ 1886.745750] FAULT_INJECTION: forcing a failure.
[ 1886.745750] name failslab, interval 1, probability 0, space 0, times 0
[ 1886.747309] CPU: 0 PID: 9086 Comm: syz-executor.2 Not tainted 5.10.261 #1
[ 1886.747877] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1886.748127] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1886.748131] Call Trace:
[ 1886.748148]  dump_stack+0x107/0x167
[ 1886.748166]  should_fail.cold+0x5/0xa
[ 1886.752247]  ? create_object.isra.0+0x3a/0xa30
[ 1886.752789]  should_failslab+0x5/0x20
[ 1886.753236]  kmem_cache_alloc+0x5b/0x310
[ 1886.753714]  create_object.isra.0+0x3a/0xa30
[ 1886.754228]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1886.754828]  kmem_cache_alloc_trace+0x151/0x320
[ 1886.755379]  io_uring_setup+0x258/0x2980
[ 1886.755866]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1886.756437]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 1886.757031]  ? wait_for_completion_io+0x270/0x270
[ 1886.757610]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1886.758226]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1886.758836]  do_syscall_64+0x33/0x40
[ 1886.759274]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1886.759882] RIP: 0033:0x7f5d125b0b19
[ 1886.760321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1886.762481] RSP: 002b:00007f5d0fb26108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 1886.763377] RAX: ffffffffffffffda RBX: 00007f5d126c3f60 RCX: 00007f5d125b0b19
[ 1886.764223] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895
[ 1886.765062] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100
[ 1886.765905] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100
[ 1886.766742] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000
[ 1886.859424] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1886.861201] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1886.863046] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:36:16 executing program 5:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(0xffffffffffffffff, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:36:16 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

[ 1887.056863] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1887.127016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1887.128830] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1887.130516] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:36:28 executing program 6:
r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:36:28 executing program 3:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:36:28 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

11:36:28 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 4)

11:36:28 executing program 5:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x0, 0x0, 0x0, 0x0, 0x0)

11:36:28 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x9)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x4000007ffffffc)
r2 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r5, 0x0, &(0x7f0000000240), 0x800)
syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r2, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:36:28 executing program 7:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x48080, 0x0)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:36:28 executing program 1:
socket$netlink(0x10, 0x3, 0x9)
r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4(r3, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x14c4, 0x0, 0x0, 0x0, 0x0)

[ 1898.956143] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1898.984013] FAULT_INJECTION: forcing a failure.
[ 1898.984013] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[ 1898.986654] CPU: 1 PID: 9112 Comm: syz-executor.2 Not tainted 5.10.261 #1
[ 1898.988114] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1898.989871] Call Trace:
[ 1898.990435]  dump_stack+0x107/0x167
[ 1898.991215]  should_fail.cold+0x5/0xa
[ 1898.992047]  __alloc_pages_nodemask+0x182/0x600
[ 1898.993039]  ? lock_release+0x680/0x680
[ 1898.993880]  ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320
[ 1898.995157]  ? lock_downgrade+0x6d0/0x6d0
[ 1898.996057]  alloc_pages_current+0x187/0x280
[ 1898.996991]  kmalloc_order+0x35/0x160
[ 1898.997799]  kmalloc_order_trace+0x14/0xa0
[ 1898.998692]  io_uring_setup+0x33c/0x2980
[ 1898.999561]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1899.000591]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 1899.001664]  ? wait_for_completion_io+0x270/0x270
[ 1899.002704]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1899.003826]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1899.004916]  do_syscall_64+0x33/0x40
[ 1899.005713]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1899.006801] RIP: 0033:0x7f5d125b0b19
[ 1899.007584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1899.011476] RSP: 002b:00007f5d0fb26108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 1899.013103] RAX: ffffffffffffffda RBX: 00007f5d126c3f60 RCX: 00007f5d125b0b19
[ 1899.014613] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895
[ 1899.016156] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100
[ 1899.017669] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100
[ 1899.019175] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000
11:36:28 executing program 5:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 1899.069181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1899.070090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1899.071024] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:36:28 executing program 5:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x0, 0x0, 0x0, 0x0, 0x0)

11:36:28 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

[ 1899.212466] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1899.291424] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1899.293451] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1899.295100] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:36:28 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 5)

[ 1899.408319] FAULT_INJECTION: forcing a failure.
[ 1899.408319] name failslab, interval 1, probability 0, space 0, times 0
[ 1899.410808] CPU: 1 PID: 9122 Comm: syz-executor.2 Not tainted 5.10.261 #1
[ 1899.412265] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1899.414030] Call Trace:
[ 1899.414597]  dump_stack+0x107/0x167
[ 1899.415369]  should_fail.cold+0x5/0xa
[ 1899.416196]  ? create_object.isra.0+0x3a/0xa30
[ 1899.417168]  should_failslab+0x5/0x20
[ 1899.417988]  kmem_cache_alloc+0x5b/0x310
[ 1899.418859]  create_object.isra.0+0x3a/0xa30
[ 1899.419806]  ? kasan_unpoison_shadow+0x33/0x50
[ 1899.420780]  kmalloc_order+0xfe/0x160
[ 1899.421590]  kmalloc_order_trace+0x14/0xa0
[ 1899.422498]  io_uring_setup+0x33c/0x2980
[ 1899.423366]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1899.424407]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 1899.425479]  ? wait_for_completion_io+0x270/0x270
[ 1899.426525]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1899.427644]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1899.428754]  do_syscall_64+0x33/0x40
[ 1899.429548]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1899.430638] RIP: 0033:0x7f5d125b0b19
[ 1899.431425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1899.435370] RSP: 002b:00007f5d0fb26108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 1899.436989] RAX: ffffffffffffffda RBX: 00007f5d126c3f60 RCX: 00007f5d125b0b19
[ 1899.438508] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895
[ 1899.440028] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100
[ 1899.441549] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100
[ 1899.443062] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000
11:36:29 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2400000010000100000000ec0000009600000900050000000000000005000080480000006fe884b7f11ac8f1810d0dc930b7fbbdfe445812bd4e3ddf303ed73209364a02ef9768d0c54531c0e48e8b51a2f78d54f00d9cdd3a5569eaaaf9d57fd00fe7eff61a89507780518151ccc61d149f11066c74aac60fe6c088582777cddc52bd82c5ef927b1c475f2e339546488ff742ba361f30616ba6000013203bece0c63d63d44a2d8033a9f2319b5d7e75aed01f84fbba37b71774867fc770eb6690f7a3c3e0d63d75b35925d7980ce0513e1600a3b9b8634496ce235be6daabe6f870e770a7124542c63a0febe8281dfa46ca86343801a72702c3c16a"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

[ 1899.534048] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
11:36:29 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 6)

[ 1899.649218] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1899.650809] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1899.652693] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1899.739060] FAULT_INJECTION: forcing a failure.
[ 1899.739060] name failslab, interval 1, probability 0, space 0, times 0
[ 1899.741450] CPU: 1 PID: 9127 Comm: syz-executor.2 Not tainted 5.10.261 #1
[ 1899.742870] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1899.744608] Call Trace:
[ 1899.745176]  dump_stack+0x107/0x167
[ 1899.745939]  should_fail.cold+0x5/0xa
[ 1899.746734]  ? io_uring_setup+0x40b/0x2980
[ 1899.747616]  should_failslab+0x5/0x20
[ 1899.748420]  kmem_cache_alloc_trace+0x55/0x320
[ 1899.749371]  io_uring_setup+0x40b/0x2980
[ 1899.750216]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1899.751215]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 1899.752272]  ? wait_for_completion_io+0x270/0x270
[ 1899.753292]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1899.754390]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1899.755471]  do_syscall_64+0x33/0x40
[ 1899.756251]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1899.757319] RIP: 0033:0x7f5d125b0b19
[ 1899.758092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1899.761937] RSP: 002b:00007f5d0fb26108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 1899.763510] RAX: ffffffffffffffda RBX: 00007f5d126c3f60 RCX: 00007f5d125b0b19
[ 1899.764998] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895
[ 1899.766490] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100
[ 1899.767987] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100
[ 1899.769468] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000
11:36:29 executing program 5:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1)

11:36:29 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2400000010000100000000ec0000009600000900050000000000000005000080480000006fe884b7f11ac8f1810d0dc930b7fbbdfe445812bd4e3ddf303ed73209364a02ef9768d0c54531c0e48e8b51a2f78d54f00d9cdd3a5569eaaaf9d57fd00fe7eff61a89507780518151ccc61d149f11066c74aac60fe6c088582777cddc52bd82c5ef927b1c475f2e339546488ff742ba361f30616ba6000013203bece0c63d63d44a2d8033a9f2319b5d7e75aed01f84fbba37b71774867fc770eb6690f7a3c3e0d63d75b35925d7980ce0513e1600a3b9b8634496ce235be6daabe6f870e770a7124542c63a0febe8281dfa46ca86343801a72702c3c16a"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

[ 1899.843427] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1899.850162] FAULT_INJECTION: forcing a failure.
[ 1899.850162] name failslab, interval 1, probability 0, space 0, times 0
[ 1899.852852] CPU: 0 PID: 9130 Comm: syz-executor.5 Not tainted 5.10.261 #1
[ 1899.854307] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1899.856051] Call Trace:
[ 1899.856617]  dump_stack+0x107/0x167
[ 1899.857405]  should_fail.cold+0x5/0xa
[ 1899.858210]  should_failslab+0x5/0x20
[ 1899.859018]  kmem_cache_alloc_bulk+0x4b/0x320
[ 1899.859976]  io_submit_sqes+0x713e/0x8780
[ 1899.860845]  ? percpu_ref_tryget_many+0x166/0x2d0
[ 1899.861877]  ? __do_sys_io_uring_enter+0x6b2/0x1890
[ 1899.862930]  __do_sys_io_uring_enter+0x6b2/0x1890
[ 1899.863963]  ? find_held_lock+0x2c/0x110
[ 1899.864824]  ? io_submit_sqes+0x8780/0x8780
[ 1899.865734]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1899.866771]  ? wait_for_completion_io+0x270/0x270
[ 1899.867796]  ? rcu_read_lock_any_held+0x75/0xa0
[ 1899.868758]  ? vfs_write+0x354/0xb10
[ 1899.869528]  ? fput_many+0x2f/0x1a0
[ 1899.870282]  ? ksys_write+0x1a9/0x260
[ 1899.871084]  ? __ia32_sys_read+0xb0/0xb0
[ 1899.871951]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1899.873058]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1899.874149]  do_syscall_64+0x33/0x40
[ 1899.874941]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1899.876046] RIP: 0033:0x7f31a63adb19
[ 1899.876848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1899.880759] RSP: 002b:00007f31a3923188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa
[ 1899.882377] RAX: ffffffffffffffda RBX: 00007f31a64c0f60 RCX: 00007f31a63adb19
[ 1899.883896] RDX: 0000000000000000 RSI: 00000000000014c4 RDI: 0000000000000004
[ 1899.885404] RBP: 00007f31a39231d0 R08: 0000000000000000 R09: 0000000000000000
[ 1899.886908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1899.888426] R13: 00007fffd5df8b1f R14: 00007f31a3923300 R15: 0000000000022000
11:36:29 executing program 7:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x48080, 0x0)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

[ 1899.967401] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1899.968972] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1899.971315] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:36:29 executing program 3:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:36:29 executing program 1:
socket$netlink(0x10, 0x3, 0x9)
r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4(r3, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:36:29 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x9)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x4000007ffffffc)
r2 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r5, 0x0, &(0x7f0000000240), 0x800)
syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r2, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:36:29 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 7)

11:36:29 executing program 6:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

[ 1900.068611] FAULT_INJECTION: forcing a failure.
[ 1900.068611] name failslab, interval 1, probability 0, space 0, times 0
[ 1900.071026] CPU: 1 PID: 9142 Comm: syz-executor.2 Not tainted 5.10.261 #1
[ 1900.072500] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1900.074275] Call Trace:
[ 1900.074854]  dump_stack+0x107/0x167
[ 1900.075638]  should_fail.cold+0x5/0xa
[ 1900.076463]  ? create_object.isra.0+0x3a/0xa30
[ 1900.077445]  should_failslab+0x5/0x20
[ 1900.078261]  kmem_cache_alloc+0x5b/0x310
[ 1900.079136]  create_object.isra.0+0x3a/0xa30
[ 1900.080124]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1900.081222]  kmem_cache_alloc_trace+0x151/0x320
[ 1900.082223]  io_uring_setup+0x40b/0x2980
[ 1900.083101]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1900.084147]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 1900.085231]  ? wait_for_completion_io+0x270/0x270
[ 1900.086287]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1900.087418]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1900.088537]  do_syscall_64+0x33/0x40
[ 1900.089341]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1900.090438] RIP: 0033:0x7f5d125b0b19
[ 1900.091238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1900.095194] RSP: 002b:00007f5d0fb26108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 1900.096838] RAX: ffffffffffffffda RBX: 00007f5d126c3f60 RCX: 00007f5d125b0b19
[ 1900.098369] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895
[ 1900.099909] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100
[ 1900.101398] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100
[ 1900.102874] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000
11:36:43 executing program 5:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:36:43 executing program 3:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

11:36:43 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x9)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x4000007ffffffc)
r2 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r5, 0x0, &(0x7f0000000240), 0x800)
syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r2, 0x14c4, 0x2, 0x0, 0x0, 0x0)

11:36:43 executing program 7:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x48080, 0x0)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x2, 0x0, 0x0, 0x0)

11:36:43 executing program 6:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:36:43 executing program 1:
socket$netlink(0x10, 0x3, 0x9)
r0 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4(r3, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:36:43 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 8)

[ 1914.000098] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 1914.016922] FAULT_INJECTION: forcing a failure.
[ 1914.016922] name failslab, interval 1, probability 0, space 0, times 0
[ 1914.018196] CPU: 1 PID: 9160 Comm: syz-executor.2 Not tainted 5.10.261 #1
[ 1914.018926] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1914.019819] Call Trace:
[ 1914.020123]  dump_stack+0x107/0x167
[ 1914.020514]  should_fail.cold+0x5/0xa
[ 1914.020928]  ? create_object.isra.0+0x3a/0xa30
[ 1914.021415]  should_failslab+0x5/0x20
[ 1914.021825]  kmem_cache_alloc+0x5b/0x310
[ 1914.022262]  create_object.isra.0+0x3a/0xa30
[ 1914.022737]  kmemleak_alloc_percpu+0xa0/0x100
[ 1914.023218]  pcpu_alloc+0x4e2/0x1240
[ 1914.023623]  ? io_tctx_exit_cb+0xf0/0xf0
[ 1914.024065]  percpu_ref_init+0x31/0x3d0
[ 1914.024496]  io_uring_setup+0x47a/0x2980
[ 1914.024930]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1914.025444]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 1914.025982]  ? wait_for_completion_io+0x270/0x270
[ 1914.026511]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1914.027070]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1914.027623]  do_syscall_64+0x33/0x40
[ 1914.028035]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1914.028605] RIP: 0033:0x7f5d125b0b19
[ 1914.029019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1914.031005] RSP: 002b:00007f5d0fb26108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 1914.031852] RAX: ffffffffffffffda RBX: 00007f5d126c3f60 RCX: 00007f5d125b0b19
[ 1914.032646] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895
[ 1914.033422] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100
[ 1914.034201] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100
[ 1914.034978] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000
11:36:43 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

[ 1914.056900] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1914.109836] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1914.110691] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1914.111611] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1914.133116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1914.134174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1914.135160] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:36:43 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 9)

11:36:43 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2400000010000100000000ec0000009600000900050000000000000005000080480000006fe884b7f11ac8f1810d0dc930b7fbbdfe445812bd4e3ddf303ed73209364a02ef9768d0c54531c0e48e8b51a2f78d54f00d9cdd3a5569eaaaf9d57fd00fe7eff61a89507780518151ccc61d149f11066c74aac60fe6c088582777cddc52bd82c5ef927b1c475f2e339546488ff742ba361f30616ba6000013203bece0c63d63d44a2d8033a9f2319b5d7e75aed01f84fbba37b71774867fc770eb6690f7a3c3e0d63d75b35925d7980ce0513e1600a3b9b8634496ce235be6daabe6f870e770a7124542c63a0febe8281dfa46ca86343801a72702c3c16a"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

[ 1914.199637] FAULT_INJECTION: forcing a failure.
[ 1914.199637] name failslab, interval 1, probability 0, space 0, times 0
[ 1914.201227] CPU: 1 PID: 9170 Comm: syz-executor.2 Not tainted 5.10.261 #1
[ 1914.202128] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1914.203037] Call Trace:
[ 1914.203328]  dump_stack+0x107/0x167
[ 1914.203724]  should_fail.cold+0x5/0xa
[ 1914.204142]  ? create_object.isra.0+0x3a/0xa30
[ 1914.204638]  should_failslab+0x5/0x20
[ 1914.205047]  kmem_cache_alloc+0x5b/0x310
[ 1914.205491]  create_object.isra.0+0x3a/0xa30
[ 1914.205967]  kmemleak_alloc_percpu+0xa0/0x100
[ 1914.206449]  pcpu_alloc+0x4e2/0x1240
[ 1914.206858]  ? io_tctx_exit_cb+0xf0/0xf0
[ 1914.207293]  percpu_ref_init+0x31/0x3d0
[ 1914.207720]  io_uring_setup+0x47a/0x2980
[ 1914.208165]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1914.208682]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 1914.209223]  ? wait_for_completion_io+0x270/0x270
[ 1914.209751]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1914.210315]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1914.210877]  do_syscall_64+0x33/0x40
[ 1914.211277]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1914.211852] RIP: 0033:0x7f5d125b0b19
[ 1914.212253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1914.214538] RSP: 002b:00007f5d0fb26108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 1914.215438] RAX: ffffffffffffffda RBX: 00007f5d126c3f60 RCX: 00007f5d125b0b19
[ 1914.216223] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895
[ 1914.216992] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100
[ 1914.217773] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100
[ 1914.218771] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000
11:36:43 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000) (fail_nth: 1)

[ 1914.265752] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1914.272878] FAULT_INJECTION: forcing a failure.
[ 1914.272878] name failslab, interval 1, probability 0, space 0, times 0
[ 1914.275855] CPU: 0 PID: 9174 Comm: syz-executor.3 Not tainted 5.10.261 #1
[ 1914.277336] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1914.279150] Call Trace:
[ 1914.279739]  dump_stack+0x107/0x167
[ 1914.280568]  should_fail.cold+0x5/0xa
[ 1914.281430]  ? vm_area_dup+0x78/0x290
[ 1914.282262]  should_failslab+0x5/0x20
[ 1914.283115]  kmem_cache_alloc+0x5b/0x310
[ 1914.284038]  vm_area_dup+0x78/0x290
[ 1914.284864]  ? mark_lock+0xf5/0x2df0
[ 1914.285684]  ? mark_lock+0xf5/0x2df0
[ 1914.286521]  ? lock_chain_count+0x20/0x20
[ 1914.287450]  ? avc_has_extended_perms+0xf40/0xf40
[ 1914.288545]  ? avc_has_perm_noaudit+0x1c9/0x3e0
[ 1914.289599]  ? lock_downgrade+0x6d0/0x6d0
[ 1914.290536]  ? __lock_acquire+0x1657/0x5b00
[ 1914.291504]  ? vm_area_alloc+0x110/0x110
[ 1914.292438]  ? __lock_acquire+0x1657/0x5b00
[ 1914.293428]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1914.294608]  ? vmacache_find+0x55/0x2a0
[ 1914.295509]  __split_vma+0xa8/0x4e0
[ 1914.296341]  __do_munmap+0x365/0x1260
[ 1914.297198]  ? arch_get_unmapped_area+0x450/0x450
[ 1914.298300]  mmap_region+0x7cc/0x1500
[ 1914.299176]  do_mmap+0x868/0x1370
[ 1914.299984]  vm_mmap_pgoff+0x198/0x1f0
[ 1914.300872]  ? randomize_page+0xb0/0xb0
[ 1914.301784]  ksys_mmap_pgoff+0x41c/0x560
[ 1914.302705]  ? find_mergeable_anon_vma+0x250/0x250
[ 1914.303796]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1914.304995]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1914.306168]  do_syscall_64+0x33/0x40
[ 1914.307016]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1914.308197] RIP: 0033:0x7f7166e85b19
[ 1914.309043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1914.313242] RSP: 002b:00007f71643fb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 1914.314969] RAX: ffffffffffffffda RBX: 00007f7166f98f60 RCX: 00007f7166e85b19
[ 1914.316613] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000
[ 1914.318252] RBP: 00007f71643fb1d0 R08: 0000000000000003 R09: 0000000008000000
[ 1914.319894] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001
[ 1914.321547] R13: 00007ffe19ee982f R14: 00007f71643fb300 R15: 0000000000022000
[ 1914.339054] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1914.339955] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1914.341034] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:36:55 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000) (fail_nth: 2)

11:36:55 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

11:36:55 executing program 7:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x48080, 0x0)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x3, 0x0, 0x0, 0x0)

11:36:55 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x9)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x4000007ffffffc)
r2 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r5, 0x0, &(0x7f0000000240), 0x800)
syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r2, 0x14c4, 0x3, 0x0, 0x0, 0x0)

11:36:55 executing program 6:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:36:55 executing program 1:
r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:36:55 executing program 5:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:36:55 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 10)

[ 1926.400120] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1926.406741] FAULT_INJECTION: forcing a failure.
[ 1926.406741] name failslab, interval 1, probability 0, space 0, times 0
[ 1926.408269] CPU: 0 PID: 9191 Comm: syz-executor.2 Not tainted 5.10.261 #1
[ 1926.409219] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1926.410375] Call Trace:
[ 1926.410746]  dump_stack+0x107/0x167
[ 1926.411253]  should_fail.cold+0x5/0xa
[ 1926.411782]  ? percpu_ref_init+0xd8/0x3d0
[ 1926.412363]  should_failslab+0x5/0x20
[ 1926.412889]  kmem_cache_alloc_trace+0x55/0x320
[ 1926.413537]  ? io_tctx_exit_cb+0xf0/0xf0
[ 1926.414108]  percpu_ref_init+0xd8/0x3d0
[ 1926.414663]  io_uring_setup+0x47a/0x2980
[ 1926.415237]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1926.415913]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 1926.416630]  ? wait_for_completion_io+0x270/0x270
[ 1926.417305]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1926.418041]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1926.418770]  do_syscall_64+0x33/0x40
[ 1926.419297]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1926.420013] RIP: 0033:0x7f5d125b0b19
[ 1926.420531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1926.423087] RSP: 002b:00007f5d0fb26108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 1926.424160] RAX: ffffffffffffffda RBX: 00007f5d126c3f60 RCX: 00007f5d125b0b19
[ 1926.425152] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895
[ 1926.426143] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100
[ 1926.427121] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100
[ 1926.428129] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000
[ 1926.437528] FAULT_INJECTION: forcing a failure.
[ 1926.437528] name failslab, interval 1, probability 0, space 0, times 0
[ 1926.440112] CPU: 1 PID: 9199 Comm: syz-executor.3 Not tainted 5.10.261 #1
[ 1926.441598] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1926.443402] Call Trace:
[ 1926.443993]  dump_stack+0x107/0x167
[ 1926.444788]  should_fail.cold+0x5/0xa
[ 1926.445612]  ? create_object.isra.0+0x3a/0xa30
[ 1926.446600]  should_failslab+0x5/0x20
[ 1926.447437]  kmem_cache_alloc+0x5b/0x310
[ 1926.448343]  create_object.isra.0+0x3a/0xa30
[ 1926.449296]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1926.450409]  kmem_cache_alloc+0x159/0x310
[ 1926.451320]  vm_area_dup+0x78/0x290
[ 1926.452124]  ? mark_lock+0xf5/0x2df0
[ 1926.452984]  ? mark_lock+0xf5/0x2df0
[ 1926.453106]  ? lock_chain_count+0x20/0x20
[ 1926.454590]  ? avc_has_extended_perms+0xf40/0xf40
[ 1926.455907]  ? avc_has_perm_noaudit+0x1c9/0x3e0
[ 1926.457190]  ? lock_downgrade+0x6d0/0x6d0
[ 1926.458328]  ? __lock_acquire+0x1657/0x5b00
[ 1926.459530]  ? vm_area_alloc+0x110/0x110
[ 1926.460644]  ? __lock_acquire+0x1657/0x5b00
[ 1926.461753]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 1926.463015]  ? vmacache_find+0x55/0x2a0
[ 1926.463964]  __split_vma+0xa8/0x4e0
[ 1926.464770]  __do_munmap+0x365/0x1260
[ 1926.465593]  ? arch_get_unmapped_area+0x450/0x450
[ 1926.466636]  mmap_region+0x7cc/0x1500
[ 1926.467469]  do_mmap+0x868/0x1370
[ 1926.468232]  vm_mmap_pgoff+0x198/0x1f0
[ 1926.469064]  ? randomize_page+0xb0/0xb0
[ 1926.469923]  ksys_mmap_pgoff+0x41c/0x560
[ 1926.470786]  ? find_mergeable_anon_vma+0x250/0x250
[ 1926.471821]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1926.472944]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1926.474043]  do_syscall_64+0x33/0x40
[ 1926.474842]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1926.475940] RIP: 0033:0x7f7166e85b19
[ 1926.476728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1926.480600] RSP: 002b:00007f71643fb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 1926.482208] RAX: ffffffffffffffda RBX: 00007f7166f98f60 RCX: 00007f7166e85b19
[ 1926.483701] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000
[ 1926.485212] RBP: 00007f71643fb1d0 R08: 0000000000000003 R09: 0000000008000000
[ 1926.486722] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001
[ 1926.488231] R13: 00007ffe19ee982f R14: 00007f71643fb300 R15: 0000000000022000
[ 1926.503997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1926.505589] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1926.508947] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:36:56 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

11:36:56 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000) (fail_nth: 3)

11:36:56 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 11)

[ 1926.592753] FAULT_INJECTION: forcing a failure.
[ 1926.592753] name failslab, interval 1, probability 0, space 0, times 0
[ 1926.594139] CPU: 0 PID: 9207 Comm: syz-executor.3 Not tainted 5.10.261 #1
[ 1926.594926] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1926.595837] Call Trace:
[ 1926.596155]  dump_stack+0x107/0x167
[ 1926.596577]  should_fail.cold+0x5/0xa
[ 1926.597023]  ? anon_vma_clone+0xdc/0x590
[ 1926.597466]  should_failslab+0x5/0x20
[ 1926.597906]  kmem_cache_alloc+0x5b/0x310
[ 1926.598257] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1926.598386]  anon_vma_clone+0xdc/0x590
[ 1926.600674]  __split_vma+0x17c/0x4e0
[ 1926.601107]  __do_munmap+0x365/0x1260
[ 1926.601547]  ? arch_get_unmapped_area+0x450/0x450
[ 1926.602116]  mmap_region+0x7cc/0x1500
[ 1926.602557]  do_mmap+0x868/0x1370
[ 1926.602967]  vm_mmap_pgoff+0x198/0x1f0
[ 1926.603421]  ? randomize_page+0xb0/0xb0
[ 1926.603889]  ksys_mmap_pgoff+0x41c/0x560
[ 1926.604365]  ? find_mergeable_anon_vma+0x250/0x250
[ 1926.604934]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1926.605543]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1926.606140]  do_syscall_64+0x33/0x40
[ 1926.606569]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1926.607165] RIP: 0033:0x7f7166e85b19
[ 1926.607581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1926.609712] RSP: 002b:00007f71643fb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 1926.610536] RAX: ffffffffffffffda RBX: 00007f7166f98f60 RCX: 00007f7166e85b19
[ 1926.611306] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000
[ 1926.612082] RBP: 00007f71643fb1d0 R08: 0000000000000003 R09: 0000000008000000
[ 1926.612854] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001
[ 1926.613630] R13: 00007ffe19ee982f R14: 00007f71643fb300 R15: 0000000000022000
11:36:56 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x9)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x4000007ffffffc)
r2 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r5, 0x0, &(0x7f0000000240), 0x800)
syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r2, 0x14c4, 0x4, 0x0, 0x0, 0x0)

[ 1926.695681] FAULT_INJECTION: forcing a failure.
[ 1926.695681] name failslab, interval 1, probability 0, space 0, times 0
[ 1926.696996] CPU: 0 PID: 9213 Comm: syz-executor.2 Not tainted 5.10.261 #1
[ 1926.697778] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1926.698740] Call Trace:
[ 1926.699055]  dump_stack+0x107/0x167
[ 1926.699478]  should_fail.cold+0x5/0xa
[ 1926.699894]  ? create_object.isra.0+0x3a/0xa30
[ 1926.700423]  should_failslab+0x5/0x20
[ 1926.700843]  kmem_cache_alloc+0x5b/0x310
[ 1926.701311]  create_object.isra.0+0x3a/0xa30
[ 1926.701816]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1926.702376]  kmem_cache_alloc_trace+0x151/0x320
[ 1926.702915]  ? io_tctx_exit_cb+0xf0/0xf0
[ 1926.703382]  percpu_ref_init+0xd8/0x3d0
[ 1926.703825]  io_uring_setup+0x47a/0x2980
[ 1926.704303]  ? __mutex_unlock_slowpath+0xe1/0x600
[ 1926.704863]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 1926.705416]  ? wait_for_completion_io+0x270/0x270
[ 1926.705989]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1926.706558]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1926.707162]  do_syscall_64+0x33/0x40
[ 1926.707587]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1926.708158] RIP: 0033:0x7f5d125b0b19
[ 1926.708587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1926.710598] RSP: 002b:00007f5d0fb05108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 1926.711471] RAX: ffffffffffffffda RBX: 00007f5d126c4020 RCX: 00007f5d125b0b19
[ 1926.712260] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895
[ 1926.713023] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100
[ 1926.713788] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100
[ 1926.714550] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000
[ 1926.715419] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1926.716245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1926.717124] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:36:56 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000) (fail_nth: 4)

[ 1926.786630] FAULT_INJECTION: forcing a failure.
[ 1926.786630] name failslab, interval 1, probability 0, space 0, times 0
[ 1926.787872] CPU: 0 PID: 9216 Comm: syz-executor.3 Not tainted 5.10.261 #1
[ 1926.788611] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1926.789497] Call Trace:
[ 1926.789786]  dump_stack+0x107/0x167
[ 1926.790178]  should_fail.cold+0x5/0xa
[ 1926.790588]  ? create_object.isra.0+0x3a/0xa30
[ 1926.791086]  should_failslab+0x5/0x20
[ 1926.791493]  kmem_cache_alloc+0x5b/0x310
[ 1926.791943]  create_object.isra.0+0x3a/0xa30
[ 1926.792449]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1926.793044]  kmem_cache_alloc+0x159/0x310
[ 1926.793493]  anon_vma_clone+0xdc/0x590
[ 1926.793915]  __split_vma+0x17c/0x4e0
[ 1926.794315]  __do_munmap+0x365/0x1260
[ 1926.794740]  ? arch_get_unmapped_area+0x450/0x450
[ 1926.795258]  mmap_region+0x7cc/0x1500
[ 1926.795674]  do_mmap+0x868/0x1370
[ 1926.796059]  vm_mmap_pgoff+0x198/0x1f0
[ 1926.796478]  ? randomize_page+0xb0/0xb0
[ 1926.796913]  ? ksys_mmap_pgoff+0x308/0x560
[ 1926.797374]  ksys_mmap_pgoff+0x41c/0x560
[ 1926.797814]  ? find_mergeable_anon_vma+0x250/0x250
[ 1926.798350]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1926.798917]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1926.799473]  do_syscall_64+0x33/0x40
[ 1926.799872]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1926.800427] RIP: 0033:0x7f7166e85b19
[ 1926.800825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1926.802794] RSP: 002b:00007f71643fb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 1926.803610] RAX: ffffffffffffffda RBX: 00007f7166f98f60 RCX: 00007f7166e85b19
[ 1926.804387] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000
[ 1926.805156] RBP: 00007f71643fb1d0 R08: 0000000000000003 R09: 0000000008000000
[ 1926.805922] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001
[ 1926.806685] R13: 00007ffe19ee982f R14: 00007f71643fb300 R15: 0000000000022000
11:36:56 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

11:36:56 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000) (fail_nth: 5)

[ 1926.919133] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
11:36:56 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 12)

[ 1926.958488] FAULT_INJECTION: forcing a failure.
[ 1926.958488] name failslab, interval 1, probability 0, space 0, times 0
[ 1926.961010] CPU: 1 PID: 9222 Comm: syz-executor.3 Not tainted 5.10.261 #1
[ 1926.962445] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1926.964186] Call Trace:
[ 1926.964747]  dump_stack+0x107/0x167
[ 1926.965510]  should_fail.cold+0x5/0xa
[ 1926.966317]  ? vm_area_dup+0x78/0x290
[ 1926.967303]  should_failslab+0x5/0x20
[ 1926.968304]  kmem_cache_alloc+0x5b/0x310
[ 1926.969367]  vm_area_dup+0x78/0x290
[ 1926.970317]  ? find_held_lock+0x2c/0x110
[ 1926.971378]  ? __vma_adjust+0x66e/0x2510
[ 1926.972446]  ? lock_downgrade+0x6d0/0x6d0
[ 1926.973415]  ? up_write+0x191/0x550
[ 1926.974193]  ? downgrade_write+0x3a0/0x3a0
[ 1926.975082]  ? anon_vma_interval_tree_remove+0xb34/0xf30
[ 1926.976298]  ? vm_area_alloc+0x110/0x110
[ 1926.977323]  ? __vma_adjust+0xbb8/0x2510
[ 1926.978379]  ? vmacache_find+0x55/0x2a0
[ 1926.979292]  __split_vma+0xa8/0x4e0
[ 1926.980069]  __do_munmap+0xf40/0x1260
[ 1926.980881]  ? arch_get_unmapped_area+0x450/0x450
[ 1926.981912]  mmap_region+0x7cc/0x1500
[ 1926.982738]  do_mmap+0x868/0x1370
[ 1926.983487]  vm_mmap_pgoff+0x198/0x1f0
[ 1926.984333]  ? randomize_page+0xb0/0xb0
[ 1926.985193]  ksys_mmap_pgoff+0x41c/0x560
[ 1926.986041]  ? find_mergeable_anon_vma+0x250/0x250
[ 1926.987098]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1926.988261]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1926.989361]  do_syscall_64+0x33/0x40
[ 1926.990161]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1926.991251] RIP: 0033:0x7f7166e85b19
[ 1926.992043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1926.995955] RSP: 002b:00007f71643fb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 1926.997593] RAX: ffffffffffffffda RBX: 00007f7166f98f60 RCX: 00007f7166e85b19
[ 1926.999114] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000
[ 1927.000616] RBP: 00007f71643fb1d0 R08: 0000000000000003 R09: 0000000008000000
[ 1927.002103] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001
[ 1927.003596] R13: 00007ffe19ee982f R14: 00007f71643fb300 R15: 0000000000022000
[ 1927.011037] FAULT_INJECTION: forcing a failure.
[ 1927.011037] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1927.012496] CPU: 0 PID: 9223 Comm: syz-executor.2 Not tainted 5.10.261 #1
[ 1927.013291] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1927.014252] Call Trace:
[ 1927.014568]  dump_stack+0x107/0x167
[ 1927.014983]  should_fail.cold+0x5/0xa
[ 1927.015424]  __alloc_pages_nodemask+0x182/0x600
[ 1927.015969]  ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320
[ 1927.016657]  ? cap_capable+0x1cd/0x230
[ 1927.017107]  alloc_pages_current+0x187/0x280
[ 1927.017609]  __get_free_pages+0xc/0xa0
[ 1927.018058]  io_uring_setup+0xe27/0x2980
[ 1927.018534]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 1927.019122]  ? wait_for_completion_io+0x270/0x270
[ 1927.019690]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1927.020300]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1927.020904]  do_syscall_64+0x33/0x40
[ 1927.021317]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1927.021914] RIP: 0033:0x7f5d125b0b19
[ 1927.022345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1927.024474] RSP: 002b:00007f5d0fb26108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 1927.025348] RAX: ffffffffffffffda RBX: 00007f5d126c3f60 RCX: 00007f5d125b0b19
[ 1927.026168] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895
[ 1927.026992] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100
[ 1927.027822] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100
[ 1927.028644] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000
[ 1927.039069] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1927.040035] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1927.040930] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:36:56 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

[ 1927.136290] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
11:36:56 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 13)

[ 1927.190816] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1927.191692] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1927.192621] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1927.238308] FAULT_INJECTION: forcing a failure.
[ 1927.238308] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1927.240866] CPU: 1 PID: 9228 Comm: syz-executor.2 Not tainted 5.10.261 #1
[ 1927.242289] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1927.244032] Call Trace:
[ 1927.244590]  dump_stack+0x107/0x167
[ 1927.245357]  should_fail.cold+0x5/0xa
[ 1927.246162]  __alloc_pages_nodemask+0x182/0x600
[ 1927.247147]  ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320
[ 1927.248417]  ? cap_capable+0x1cd/0x230
[ 1927.249237]  alloc_pages_current+0x187/0x280
[ 1927.250159]  __get_free_pages+0xc/0xa0
[ 1927.250978]  io_uring_setup+0xf9a/0x2980
[ 1927.251829]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 1927.252893]  ? wait_for_completion_io+0x270/0x270
[ 1927.253923]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1927.255018]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1927.256095]  do_syscall_64+0x33/0x40
[ 1927.256869]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1927.257925] RIP: 0033:0x7f5d125b0b19
[ 1927.258695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1927.262537] RSP: 002b:00007f5d0fb26108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 1927.264136] RAX: ffffffffffffffda RBX: 00007f5d126c3f60 RCX: 00007f5d125b0b19
[ 1927.265623] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895
[ 1927.267110] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100
[ 1927.268606] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100
[ 1927.270102] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000
11:36:56 executing program 1:
r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:36:56 executing program 7:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x48080, 0x0)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x4, 0x0, 0x0, 0x0)

11:37:17 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000) (fail_nth: 6)

11:37:17 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(0x0, r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

11:37:17 executing program 5:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x2, 0x0, 0x0, 0x0)

11:37:17 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 14)

11:37:17 executing program 6:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:37:17 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x9)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x4000007ffffffc)
r2 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r5, 0x0, &(0x7f0000000240), 0x800)
syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r2, 0x14c4, 0x5, 0x0, 0x0, 0x0)

11:37:17 executing program 7:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x48080, 0x0)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x5, 0x0, 0x0, 0x0)

11:37:17 executing program 1:
r0 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

[ 1948.268399] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1948.270166] FAULT_INJECTION: forcing a failure.
[ 1948.270166] name failslab, interval 1, probability 0, space 0, times 0
[ 1948.272761] CPU: 0 PID: 9256 Comm: syz-executor.3 Not tainted 5.10.261 #1
[ 1948.274213] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1948.275959] Call Trace:
[ 1948.276524]  dump_stack+0x107/0x167
[ 1948.277291]  should_fail.cold+0x5/0xa
[ 1948.278100]  ? create_object.isra.0+0x3a/0xa30
[ 1948.279065]  should_failslab+0x5/0x20
[ 1948.279864]  kmem_cache_alloc+0x5b/0x310
[ 1948.280729]  create_object.isra.0+0x3a/0xa30
[ 1948.281649]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1948.282733]  kmem_cache_alloc+0x159/0x310
[ 1948.283619]  vm_area_dup+0x78/0x290
[ 1948.284402]  ? find_held_lock+0x2c/0x110
[ 1948.285270]  ? __vma_adjust+0x66e/0x2510
[ 1948.286133]  ? lock_downgrade+0x6d0/0x6d0
[ 1948.287024]  ? up_write+0x191/0x550
[ 1948.287791]  ? downgrade_write+0x3a0/0x3a0
[ 1948.288695]  ? anon_vma_interval_tree_remove+0xb34/0xf30
[ 1948.289843]  ? vm_area_alloc+0x110/0x110
[ 1948.290703]  ? __vma_adjust+0xbb8/0x2510
[ 1948.291573]  ? vmacache_find+0x55/0x2a0
[ 1948.292421]  __split_vma+0xa8/0x4e0
[ 1948.293197]  __do_munmap+0xf40/0x1260
[ 1948.294010]  ? arch_get_unmapped_area+0x450/0x450
[ 1948.295032]  mmap_region+0x7cc/0x1500
[ 1948.295858]  do_mmap+0x868/0x1370
[ 1948.296621]  vm_mmap_pgoff+0x198/0x1f0
[ 1948.297448]  ? randomize_page+0xb0/0xb0
[ 1948.298307]  ksys_mmap_pgoff+0x41c/0x560
[ 1948.299167]  ? find_mergeable_anon_vma+0x250/0x250
[ 1948.300215]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1948.301329]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1948.302432]  do_syscall_64+0x33/0x40
[ 1948.303217]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1948.304308] RIP: 0033:0x7f7166e85b19
[ 1948.305100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1948.308994] RSP: 002b:00007f71643fb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 1948.310604] RAX: ffffffffffffffda RBX: 00007f7166f98f60 RCX: 00007f7166e85b19
[ 1948.312114] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000
[ 1948.313612] RBP: 00007f71643fb1d0 R08: 0000000000000003 R09: 0000000008000000
[ 1948.315114] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001
[ 1948.316639] R13: 00007ffe19ee982f R14: 00007f71643fb300 R15: 0000000000022000
[ 1948.331194] FAULT_INJECTION: forcing a failure.
[ 1948.331194] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1948.333781] CPU: 0 PID: 9259 Comm: syz-executor.2 Not tainted 5.10.261 #1
[ 1948.335223] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1948.336980] Call Trace:
[ 1948.337542]  dump_stack+0x107/0x167
[ 1948.338323]  should_fail.cold+0x5/0xa
[ 1948.339137]  __alloc_pages_nodemask+0x182/0x600
[ 1948.340129]  ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320
[ 1948.341396]  ? cap_capable+0x1cd/0x230
[ 1948.342232]  alloc_pages_current+0x187/0x280
[ 1948.343157]  __get_free_pages+0xc/0xa0
[ 1948.343980]  io_uring_setup+0xf9a/0x2980
[ 1948.344848]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 1948.345913]  ? wait_for_completion_io+0x270/0x270
[ 1948.346948]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1948.348059]  ? syscall_enter_from_user_mode+0x1d/0x50
11:37:17 executing program 6:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

[ 1948.349282]  do_syscall_64+0x33/0x40
[ 1948.350107]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1948.351190] RIP: 0033:0x7f5d125b0b19
[ 1948.351974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1948.355869] RSP: 002b:00007f5d0fb05108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 1948.357488] RAX: ffffffffffffffda RBX: 00007f5d126c4020 RCX: 00007f5d125b0b19
[ 1948.358989] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895
[ 1948.360495] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100
[ 1948.361988] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100
[ 1948.363481] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000
[ 1948.403023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1948.404624] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1948.406288] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:37:17 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2400000010000100000000ec0000009600000900050000000000000005000080480000006fe884b7f11ac8f1810d0dc930b7fbbdfe445812bd4e3ddf303ed73209364a02ef9768d0c54531c0e48e8b51a2f78d54f00d9cdd3a5569eaaaf9d57fd00fe7eff61a89507780518151ccc61d149f11066c74aac60fe6c088582777cddc52bd82c5ef927b1c475f2e339546488ff742ba361f30616ba6000013203bece0c63d63d44a2d8033a9f2319b5d7e75aed01f84fbba37b71774867fc770eb6690f7a3c3e0d63d75b35925d7980ce0513e1600a3b9b8634496ce235be6daabe6f870e770a7124542c63a0febe8281dfa46ca86343801a72702c3c16a"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(0x0, r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

[ 1948.517893] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
11:37:18 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000) (fail_nth: 7)

[ 1948.609248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1948.610899] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
11:37:18 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 15)

[ 1948.613526] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1948.621426] FAULT_INJECTION: forcing a failure.
[ 1948.621426] name failslab, interval 1, probability 0, space 0, times 0
[ 1948.623870] CPU: 0 PID: 9266 Comm: syz-executor.3 Not tainted 5.10.261 #1
[ 1948.625333] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1948.627067] Call Trace:
[ 1948.627624]  dump_stack+0x107/0x167
[ 1948.628398]  should_fail.cold+0x5/0xa
[ 1948.629201]  ? anon_vma_clone+0xdc/0x590
[ 1948.630061]  should_failslab+0x5/0x20
[ 1948.630871]  kmem_cache_alloc+0x5b/0x310
[ 1948.631733]  anon_vma_clone+0xdc/0x590
[ 1948.632576]  __split_vma+0x17c/0x4e0
[ 1948.633357]  __do_munmap+0xf40/0x1260
[ 1948.634160]  ? arch_get_unmapped_area+0x450/0x450
[ 1948.635180]  mmap_region+0x7cc/0x1500
[ 1948.635994]  do_mmap+0x868/0x1370
[ 1948.636734]  vm_mmap_pgoff+0x198/0x1f0
[ 1948.637556]  ? randomize_page+0xb0/0xb0
[ 1948.638407]  ksys_mmap_pgoff+0x41c/0x560
[ 1948.639254]  ? find_mergeable_anon_vma+0x250/0x250
[ 1948.640301]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1948.641415]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1948.642503]  do_syscall_64+0x33/0x40
[ 1948.643290]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1948.644377] RIP: 0033:0x7f7166e85b19
[ 1948.645162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1948.649023] RSP: 002b:00007f71643fb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 1948.650621] RAX: ffffffffffffffda RBX: 00007f7166f98f60 RCX: 00007f7166e85b19
[ 1948.652114] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000
[ 1948.653606] RBP: 00007f71643fb1d0 R08: 0000000000000003 R09: 0000000008000000
[ 1948.655101] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001
[ 1948.656613] R13: 00007ffe19ee982f R14: 00007f71643fb300 R15: 0000000000022000
11:37:18 executing program 6:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:37:18 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2400000010000100000000ec0000009600000900050000000000000005000080480000006fe884b7f11ac8f1810d0dc930b7fbbdfe445812bd4e3ddf303ed73209364a02ef9768d0c54531c0e48e8b51a2f78d54f00d9cdd3a5569eaaaf9d57fd00fe7eff61a89507780518151ccc61d149f11066c74aac60fe6c088582777cddc52bd82c5ef927b1c475f2e339546488ff742ba361f30616ba6000013203bece0c63d63d44a2d8033a9f2319b5d7e75aed01f84fbba37b71774867fc770eb6690f7a3c3e0d63d75b35925d7980ce0513e1600a3b9b8634496ce235be6daabe6f870e770a7124542c63a0febe8281dfa46ca86343801a72702c3c16a"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(0x0, r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

[ 1948.762799] FAULT_INJECTION: forcing a failure.
[ 1948.762799] name failslab, interval 1, probability 0, space 0, times 0
[ 1948.765323] CPU: 0 PID: 9272 Comm: syz-executor.2 Not tainted 5.10.261 #1
[ 1948.766770] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1948.768529] Call Trace:
[ 1948.769092]  dump_stack+0x107/0x167
[ 1948.769866]  should_fail.cold+0x5/0xa
[ 1948.770672]  ? create_object.isra.0+0x3a/0xa30
[ 1948.771637]  should_failslab+0x5/0x20
[ 1948.772452]  kmem_cache_alloc+0x5b/0x310
[ 1948.773313]  ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320
[ 1948.774763]  create_object.isra.0+0x3a/0xa30
[ 1948.775698]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1948.776808]  kmem_cache_alloc_trace+0x151/0x320
[ 1948.777813]  io_rsrc_node_switch_start.part.0+0x43/0x250
[ 1948.778981]  io_uring_setup+0x14f6/0x2980
[ 1948.779881]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 1948.780968]  ? wait_for_completion_io+0x270/0x270
[ 1948.782010]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1948.783136]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1948.784260]  do_syscall_64+0x33/0x40
[ 1948.785071]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1948.786183] RIP: 0033:0x7f5d125b0b19
[ 1948.786973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1948.790856] RSP: 002b:00007f5d0fb05108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 1948.792480] RAX: ffffffffffffffda RBX: 00007f5d126c4020 RCX: 00007f5d125b0b19
[ 1948.793988] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895
[ 1948.795487] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100
[ 1948.796992] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100
[ 1948.798491] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000
11:37:18 executing program 6:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

[ 1948.954828] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1949.066023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1949.067622] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1949.070207] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 1963.079425] FAULT_INJECTION: forcing a failure.
[ 1963.079425] name failslab, interval 1, probability 0, space 0, times 0
[ 1963.081945] CPU: 1 PID: 9289 Comm: syz-executor.3 Not tainted 5.10.261 #1
[ 1963.083347] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1963.085060] Call Trace:
[ 1963.085614]  dump_stack+0x107/0x167
[ 1963.086360]  should_fail.cold+0x5/0xa
[ 1963.087142]  ? create_object.isra.0+0x3a/0xa30
[ 1963.088084]  should_failslab+0x5/0x20
[ 1963.088874]  kmem_cache_alloc+0x5b/0x310
[ 1963.089706]  create_object.isra.0+0x3a/0xa30
[ 1963.090612]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1963.091665]  kmem_cache_alloc+0x159/0x310
[ 1963.092531]  anon_vma_clone+0xdc/0x590
[ 1963.093337]  __split_vma+0x17c/0x4e0
[ 1963.094107]  __do_munmap+0xf40/0x1260
[ 1963.094897]  ? arch_get_unmapped_area+0x450/0x450
[ 1963.095883]  mmap_region+0x7cc/0x1500
[ 1963.096690]  do_mmap+0x868/0x1370
[ 1963.097414]  vm_mmap_pgoff+0x198/0x1f0
[ 1963.098229]  ? randomize_page+0xb0/0xb0
[ 1963.099053]  ksys_mmap_pgoff+0x41c/0x560
[ 1963.099891]  ? find_mergeable_anon_vma+0x250/0x250
[ 1963.100906]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1963.101990]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1963.103047]  do_syscall_64+0x33/0x40
[ 1963.103812]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1963.104865] RIP: 0033:0x7f7166e85b19
[ 1963.105625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1963.109494] RSP: 002b:00007f71643fb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 1963.111045] RAX: ffffffffffffffda RBX: 00007f7166f98f60 RCX: 00007f7166e85b19
[ 1963.112525] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000
[ 1963.114011] RBP: 00007f71643fb1d0 R08: 0000000000000003 R09: 0000000008000000
[ 1963.115486] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001
[ 1963.116968] R13: 00007ffe19ee982f R14: 00007f71643fb300 R15: 0000000000022000
11:37:32 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000) (fail_nth: 8)

11:37:32 executing program 5:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x3, 0x0, 0x0, 0x0)

11:37:32 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x9)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x4000007ffffffc)
r2 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r5, 0x0, &(0x7f0000000240), 0x800)
syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r2, 0x14c4, 0x6, 0x0, 0x0, 0x0)

11:37:32 executing program 7:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x48080, 0x0)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x6, 0x0, 0x0, 0x0)

11:37:32 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 16)

11:37:32 executing program 6:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:37:32 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r2 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r2, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r3 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r3, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r3, 0x0, 0x14, &(0x7f0000000300)=""/85)

11:37:32 executing program 1:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

[ 1963.149865] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1963.196690] FAULT_INJECTION: forcing a failure.
[ 1963.196690] name failslab, interval 1, probability 0, space 0, times 0
[ 1963.199268] CPU: 0 PID: 9304 Comm: syz-executor.2 Not tainted 5.10.261 #1
[ 1963.200833] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1963.200841] Call Trace:
[ 1963.200869]  dump_stack+0x107/0x167
[ 1963.200891]  should_fail.cold+0x5/0xa
[ 1963.200917]  ? create_object.isra.0+0x3a/0xa30
[ 1963.200936]  should_failslab+0x5/0x20
[ 1963.200956]  kmem_cache_alloc+0x5b/0x310
[ 1963.200979]  create_object.isra.0+0x3a/0xa30
[ 1963.201003]  kmemleak_alloc_percpu+0xa0/0x100
[ 1963.201026]  pcpu_alloc+0x4e2/0x1240
[ 1963.201058]  ? io_async_queue_proc+0x80/0x80
[ 1963.201077]  percpu_ref_init+0x31/0x3d0
[ 1963.201101]  io_rsrc_node_switch_start.part.0+0x6a/0x250
[ 1963.201121]  io_uring_setup+0x14f6/0x2980
[ 1963.201150]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 1963.215686]  ? wait_for_completion_io+0x270/0x270
[ 1963.216817]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1963.217995]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1963.219163]  do_syscall_64+0x33/0x40
[ 1963.220006]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1963.221163] RIP: 0033:0x7f5d125b0b19
[ 1963.221998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1963.226133] RSP: 002b:00007f5d0fb05108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 1963.227838] RAX: ffffffffffffffda RBX: 00007f5d126c4020 RCX: 00007f5d125b0b19
[ 1963.229449] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895
[ 1963.231049] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100
[ 1963.232661] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100
[ 1963.234257] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000
[ 1963.253179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1963.254855] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1963.256746] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:37:32 executing program 6:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:37:32 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2400000010000100000000ec0000009600000900050000000000000005000080480000006fe884b7f11ac8f1810d0dc930b7fbbdfe445812bd4e3ddf303ed73209364a02ef9768d0c54531c0e48e8b51a2f78d54f00d9cdd3a5569eaaaf9d57fd00fe7eff61a89507780518151ccc61d149f11066c74aac60fe6c088582777cddc52bd82c5ef927b1c475f2e339546488ff742ba361f30616ba6000013203bece0c63d63d44a2d8033a9f2319b5d7e75aed01f84fbba37b71774867fc770eb6690f7a3c3e0d63d75b35925d7980ce0513e1600a3b9b8634496ce235be6daabe6f870e770a7124542c63a0febe8281dfa46ca86343801a72702c3c16a"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r2 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r2, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r3 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r3, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r3, 0x0, 0x14, &(0x7f0000000300)=""/85)

11:37:32 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000) (fail_nth: 9)

[ 1963.512317] FAULT_INJECTION: forcing a failure.
[ 1963.512317] name failslab, interval 1, probability 0, space 0, times 0
[ 1963.512914] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1963.514915] CPU: 0 PID: 9312 Comm: syz-executor.3 Not tainted 5.10.261 #1
[ 1963.514938] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1963.520082] Call Trace:
[ 1963.520683]  dump_stack+0x107/0x167
[ 1963.521517]  should_fail.cold+0x5/0xa
[ 1963.522390]  ? vm_area_alloc+0x1c/0x110
[ 1963.523286]  should_failslab+0x5/0x20
[ 1963.524138]  kmem_cache_alloc+0x5b/0x310
[ 1963.525060]  vm_area_alloc+0x1c/0x110
[ 1963.525913]  mmap_region+0x982/0x1500
[ 1963.526788]  do_mmap+0x868/0x1370
[ 1963.527581]  vm_mmap_pgoff+0x198/0x1f0
[ 1963.528485]  ? randomize_page+0xb0/0xb0
[ 1963.529388]  ksys_mmap_pgoff+0x41c/0x560
[ 1963.530303]  ? find_mergeable_anon_vma+0x250/0x250
[ 1963.531410]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1963.532603]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1963.533766]  do_syscall_64+0x33/0x40
[ 1963.534605]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1963.535768] RIP: 0033:0x7f7166e85b19
[ 1963.536615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1963.540747] RSP: 002b:00007f71643fb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 1963.542442] RAX: ffffffffffffffda RBX: 00007f7166f98f60 RCX: 00007f7166e85b19
[ 1963.544032] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000
[ 1963.545667] RBP: 00007f71643fb1d0 R08: 0000000000000003 R09: 0000000008000000
[ 1963.547259] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001
[ 1963.548864] R13: 00007ffe19ee982f R14: 00007f71643fb300 R15: 0000000000022000
[ 1963.611882] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1963.613584] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1963.615292] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:37:33 executing program 6:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)=<r2=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r3, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:37:33 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r2 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r2, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r3 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r3, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r3, 0x0, 0x14, &(0x7f0000000300)=""/85)

11:37:33 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000) (fail_nth: 10)

[ 1963.817866] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1963.867209] FAULT_INJECTION: forcing a failure.
[ 1963.867209] name failslab, interval 1, probability 0, space 0, times 0
[ 1963.870274] CPU: 1 PID: 9320 Comm: syz-executor.3 Not tainted 5.10.261 #1
[ 1963.871992] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1963.874113] Call Trace:
[ 1963.874149]  dump_stack+0x107/0x167
[ 1963.874176]  should_fail.cold+0x5/0xa
[ 1963.874200]  ? create_object.isra.0+0x3a/0xa30
[ 1963.874220]  should_failslab+0x5/0x20
[ 1963.874241]  kmem_cache_alloc+0x5b/0x310
[ 1963.874268]  create_object.isra.0+0x3a/0xa30
[ 1963.874286]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1963.874313]  kmem_cache_alloc+0x159/0x310
[ 1963.874341]  vm_area_alloc+0x1c/0x110
[ 1963.874359]  mmap_region+0x982/0x1500
[ 1963.874395]  do_mmap+0x868/0x1370
[ 1963.874425]  vm_mmap_pgoff+0x198/0x1f0
[ 1963.874450]  ? randomize_page+0xb0/0xb0
[ 1963.874486]  ksys_mmap_pgoff+0x41c/0x560
[ 1963.874510]  ? find_mergeable_anon_vma+0x250/0x250
[ 1963.874537]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1963.874560]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1963.874585]  do_syscall_64+0x33/0x40
[ 1963.874608]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1963.874622] RIP: 0033:0x7f7166e85b19
[ 1963.874640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1963.874652] RSP: 002b:00007f71643fb188 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 1963.874674] RAX: ffffffffffffffda RBX: 00007f7166f98f60 RCX: 00007f7166e85b19
[ 1963.874685] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000000020ffc000
[ 1963.874697] RBP: 00007f71643fb1d0 R08: 0000000000000003 R09: 0000000008000000
[ 1963.874708] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000002
[ 1963.874720] R13: 00007ffe19ee982f R14: 00007f71643fb300 R15: 0000000000022000
[ 1963.951518] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1963.951540] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1963.951795] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:37:45 executing program 6:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)=<r2=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r3, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:37:45 executing program 5:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x4, 0x0, 0x0, 0x0)

11:37:45 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

11:37:45 executing program 1:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:37:45 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 17)

11:37:45 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000) (fail_nth: 11)

11:37:45 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x9)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x4000007ffffffc)
r2 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r5, 0x0, &(0x7f0000000240), 0x800)
syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r2, 0x14c4, 0x7, 0x0, 0x0, 0x0)

11:37:45 executing program 7:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x48080, 0x0)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x7, 0x0, 0x0, 0x0)

[ 1976.150138] FAULT_INJECTION: forcing a failure.
[ 1976.150138] name failslab, interval 1, probability 0, space 0, times 0
[ 1976.151467] FAULT_INJECTION: forcing a failure.
[ 1976.151467] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1976.151629] CPU: 1 PID: 9334 Comm: syz-executor.2 Not tainted 5.10.261 #1
[ 1976.154055] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1976.155066] Call Trace:
[ 1976.155390]  dump_stack+0x107/0x167
[ 1976.155842]  should_fail.cold+0x5/0xa
[ 1976.156318]  ? create_object.isra.0+0x3a/0xa30
[ 1976.156872]  should_failslab+0x5/0x20
[ 1976.157333]  kmem_cache_alloc+0x5b/0x310
[ 1976.157830]  create_object.isra.0+0x3a/0xa30
[ 1976.158371]  kmemleak_alloc_percpu+0xa0/0x100
[ 1976.158930]  pcpu_alloc+0x4e2/0x1240
[ 1976.159388]  ? io_async_queue_proc+0x80/0x80
[ 1976.159921]  percpu_ref_init+0x31/0x3d0
[ 1976.160421]  io_rsrc_node_switch_start.part.0+0x6a/0x250
[ 1976.161087]  io_uring_setup+0x14f6/0x2980
[ 1976.161594]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 1976.162210]  ? wait_for_completion_io+0x270/0x270
[ 1976.162808]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1976.163447]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1976.164072]  do_syscall_64+0x33/0x40
[ 1976.164540]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1976.165177] RIP: 0033:0x7f5d125b0b19
[ 1976.165629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1976.167873] RSP: 002b:00007f5d0fb26108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 1976.168811] RAX: ffffffffffffffda RBX: 00007f5d126c3f60 RCX: 00007f5d125b0b19
[ 1976.169675] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895
[ 1976.170537] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100
[ 1976.171393] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100
[ 1976.172273] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000
[ 1976.173171] CPU: 0 PID: 9344 Comm: syz-executor.3 Not tainted 5.10.261 #1
[ 1976.173958] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1976.174899] Call Trace:
[ 1976.175205]  dump_stack+0x107/0x167
[ 1976.175617]  should_fail.cold+0x5/0xa
[ 1976.176057]  _copy_to_user+0x2e/0x180
[ 1976.176502]  simple_read_from_buffer+0xcc/0x160
[ 1976.177030]  proc_fail_nth_read+0x198/0x230
[ 1976.177519]  ? proc_sessionid_read+0x230/0x230
[ 1976.178032]  ? security_file_permission+0xb1/0xe0
[ 1976.178579]  ? proc_sessionid_read+0x230/0x230
[ 1976.179091]  vfs_read+0x228/0x620
[ 1976.179485]  ksys_read+0x12d/0x260
[ 1976.179886]  ? vfs_write+0xb10/0xb10
[ 1976.180326]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1976.180923]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1976.181505]  do_syscall_64+0x33/0x40
[ 1976.181927]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1976.182503] RIP: 0033:0x7f7166e3869c
[ 1976.182926] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 1976.185011] RSP: 002b:00007f71643fb170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1976.185867] RAX: ffffffffffffffda RBX: 0000000020ffc000 RCX: 00007f7166e3869c
[ 1976.186669] RDX: 000000000000000f RSI: 00007f71643fb1e0 RDI: 0000000000000004
[ 1976.187470] RBP: 00007f71643fb1d0 R08: 0000000000000000 R09: 0000000008000000
[ 1976.188259] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000002
[ 1976.189060] R13: 00007ffe19ee982f R14: 00007f71643fb300 R15: 0000000000022000
[ 1976.194255] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
11:37:45 executing program 6:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)=<r2=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r3, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

[ 1976.245086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1976.245960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1976.246904] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:37:45 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

11:37:45 executing program 6:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r3, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

[ 1976.339223] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
11:37:45 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)

11:37:45 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 18)

[ 1976.391399] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1976.392502] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1976.393389] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:37:45 executing program 6:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r3, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

[ 1976.422912] FAULT_INJECTION: forcing a failure.
[ 1976.422912] name failslab, interval 1, probability 0, space 0, times 0
[ 1976.424264] CPU: 1 PID: 9355 Comm: syz-executor.2 Not tainted 5.10.261 #1
[ 1976.425049] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1976.426000] Call Trace:
[ 1976.426322]  dump_stack+0x107/0x167
[ 1976.426736]  should_fail.cold+0x5/0xa
[ 1976.427177]  ? percpu_ref_init+0xd8/0x3d0
[ 1976.427650]  should_failslab+0x5/0x20
[ 1976.428089]  kmem_cache_alloc_trace+0x55/0x320
[ 1976.428627]  ? io_async_queue_proc+0x80/0x80
[ 1976.429125]  percpu_ref_init+0xd8/0x3d0
[ 1976.429593]  io_rsrc_node_switch_start.part.0+0x6a/0x250
[ 1976.430209]  io_uring_setup+0x14f6/0x2980
[ 1976.430691]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 1976.431268]  ? wait_for_completion_io+0x270/0x270
[ 1976.431844]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1976.432450]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1976.433035]  do_syscall_64+0x33/0x40
[ 1976.433460]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1976.434044] RIP: 0033:0x7f5d125b0b19
[ 1976.434469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1976.436566] RSP: 002b:00007f5d0fb26108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 1976.437429] RAX: ffffffffffffffda RBX: 00007f5d126c3f60 RCX: 00007f5d125b0b19
[ 1976.438242] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895
[ 1976.439050] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100
[ 1976.439859] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100
[ 1976.440676] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000
11:37:45 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0x0, 0x12, r0, 0x8000000)

11:37:46 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

[ 1976.517638] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
11:37:46 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3004, 0x0, 0x12, r0, 0x8000000)

[ 1976.576536] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1976.577394] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1976.578270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:37:59 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x300a, 0x0, 0x12, r0, 0x8000000)

11:37:59 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x9)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x4000007ffffffc)
r2 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r5, 0x0, &(0x7f0000000240), 0x800)
syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r2, 0x14c4, 0x8, 0x0, 0x0, 0x0)

11:37:59 executing program 1:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:37:59 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

11:37:59 executing program 7:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x48080, 0x0)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x8, 0x0, 0x0, 0x0)

[ 1989.842402] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
11:37:59 executing program 5:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x5, 0x0, 0x0, 0x0)

11:37:59 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 19)

11:37:59 executing program 6:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r3, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

[ 1989.874748] FAULT_INJECTION: forcing a failure.
[ 1989.874748] name failslab, interval 1, probability 0, space 0, times 0
[ 1989.876144] CPU: 0 PID: 9388 Comm: syz-executor.2 Not tainted 5.10.261 #1
[ 1989.876966] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1989.877946] Call Trace:
[ 1989.878270]  dump_stack+0x107/0x167
[ 1989.878723]  should_fail.cold+0x5/0xa
[ 1989.879187]  ? create_object.isra.0+0x3a/0xa30
[ 1989.879734]  should_failslab+0x5/0x20
[ 1989.880198]  kmem_cache_alloc+0x5b/0x310
[ 1989.880703]  create_object.isra.0+0x3a/0xa30
[ 1989.881232]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 1989.881845]  kmem_cache_alloc_trace+0x151/0x320
[ 1989.882404]  ? io_async_queue_proc+0x80/0x80
[ 1989.882944]  percpu_ref_init+0xd8/0x3d0
[ 1989.883432]  io_rsrc_node_switch_start.part.0+0x6a/0x250
[ 1989.884077]  io_uring_setup+0x14f6/0x2980
[ 1989.884564]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 1989.885156]  ? wait_for_completion_io+0x270/0x270
[ 1989.885728]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1989.886334]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1989.886925]  do_syscall_64+0x33/0x40
[ 1989.887357]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1989.887956] RIP: 0033:0x7f5d125b0b19
[ 1989.888383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1989.890506] RSP: 002b:00007f5d0fb26108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 1989.891388] RAX: ffffffffffffffda RBX: 00007f5d126c3f60 RCX: 00007f5d125b0b19
[ 1989.892215] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895
[ 1989.893052] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100
[ 1989.893882] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100
[ 1989.894702] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000
11:37:59 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x7fffdf003000, 0x0, 0x12, r0, 0x8000000)

[ 1989.917685] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1989.919256] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1989.920872] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:37:59 executing program 6:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:37:59 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

11:37:59 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x7ffffffff000, 0x0, 0x12, r0, 0x8000000)

11:37:59 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 20)

[ 1990.029322] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1990.074081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1990.075690] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1990.077324] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:37:59 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x12, r0, 0x8000000)

[ 1990.133069] FAULT_INJECTION: forcing a failure.
[ 1990.133069] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1990.135544] CPU: 1 PID: 9401 Comm: syz-executor.2 Not tainted 5.10.261 #1
[ 1990.136959] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 1990.138651] Call Trace:
[ 1990.139213]  dump_stack+0x107/0x167
[ 1990.139965]  should_fail.cold+0x5/0xa
[ 1990.140780]  _copy_to_user+0x2e/0x180
[ 1990.141594]  io_uring_setup+0x11b5/0x2980
[ 1990.142446]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 1990.143577]  ? wait_for_completion_io+0x270/0x270
[ 1990.144840]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 1990.145966]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 1990.147033]  do_syscall_64+0x33/0x40
[ 1990.147851]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 1990.148929] RIP: 0033:0x7f5d125b0b19
[ 1990.149703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 1990.153481] RSP: 002b:00007f5d0fb26108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 1990.155040] RAX: ffffffffffffffda RBX: 00007f5d126c3f60 RCX: 00007f5d125b0b19
[ 1990.156539] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895
[ 1990.158007] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100
[ 1990.159484] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100
[ 1990.160984] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000
11:37:59 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x12, r0, 0x8000000)

11:37:59 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

[ 1990.189037] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
11:37:59 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xa, 0x12, r0, 0x8000000)

[ 1990.240465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1990.242120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1990.243730] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:38:11 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 21)

11:38:11 executing program 6:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:38:11 executing program 5:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x6, 0x0, 0x0, 0x0)

11:38:11 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x9)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x4000007ffffffc)
r2 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r5, 0x0, &(0x7f0000000240), 0x800)
syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r2, 0x14c4, 0xe, 0x0, 0x0, 0x0)

11:38:11 executing program 1:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:38:11 executing program 7:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x48080, 0x0)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0xe, 0x0, 0x0, 0x0)

11:38:11 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2400000010000100000000ec0000009600000900050000000000000005000080480000006fe884b7f11ac8f1810d0dc930b7fbbdfe445812bd4e3ddf303ed73209364a02ef9768d0c54531c0e48e8b51a2f78d54f00d9cdd3a5569eaaaf9d57fd00fe7eff61a89507780518151ccc61d149f11066c74aac60fe6c088582777cddc52bd82c5ef927b1c475f2e339546488ff742ba361f30616ba6000013203bece0c63d63d44a2d8033a9f2319b5d7e75aed01f84fbba37b71774867fc770eb6690f7a3c3e0d63d75b35925d7980ce0513e1600a3b9b8634496ce235be6daabe6f870e770a7124542c63a0febe8281dfa46ca86343801a72702c3c16a"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100))
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

11:38:11 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x30, 0x12, r0, 0x8000000)

[ 2002.304139] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
11:38:11 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xa00, 0x12, r0, 0x8000000)

11:38:11 executing program 1:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

[ 2002.360894] FAULT_INJECTION: forcing a failure.
[ 2002.360894] name failslab, interval 1, probability 0, space 0, times 0
[ 2002.363456] CPU: 1 PID: 9438 Comm: syz-executor.2 Not tainted 5.10.261 #1
[ 2002.364925] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2002.366677] Call Trace:
[ 2002.367245]  dump_stack+0x107/0x167
[ 2002.368020]  should_fail.cold+0x5/0xa
[ 2002.368851]  ? __d_alloc+0x2a/0x990
[ 2002.369621]  should_failslab+0x5/0x20
[ 2002.370429]  kmem_cache_alloc+0x5b/0x310
[ 2002.371304]  __d_alloc+0x2a/0x990
[ 2002.372047]  ? find_held_lock+0x2c/0x110
[ 2002.372947]  d_alloc_pseudo+0x19/0x70
[ 2002.373763]  alloc_file_pseudo+0xce/0x250
[ 2002.374628]  ? trace_hardirqs_on+0x5b/0x180
[ 2002.375542]  ? alloc_file+0x5a0/0x5a0
[ 2002.376354]  anon_inode_getfile+0xc8/0x1f0
[ 2002.377266]  io_uring_setup+0x138b/0x2980
[ 2002.378147]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2002.379215]  ? wait_for_completion_io+0x270/0x270
[ 2002.380248]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2002.381404]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2002.382496]  do_syscall_64+0x33/0x40
[ 2002.383289]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2002.384370] RIP: 0033:0x7f5d125b0b19
[ 2002.385173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2002.389067] RSP: 002b:00007f5d0fb05108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2002.390681] RAX: ffffffffffffffda RBX: 00007f5d126c4020 RCX: 00007f5d125b0b19
[ 2002.392188] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895
[ 2002.393712] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100
[ 2002.395219] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100
[ 2002.396772] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000
[ 2002.401152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2002.402755] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2002.407928] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:38:11 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100))
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

[ 2002.689929] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
11:38:12 executing program 1:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:38:12 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000, 0x12, r0, 0x8000000)

[ 2002.772117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2002.773704] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2002.777008] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:38:12 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100))
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

11:38:12 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 22)

[ 2002.943110] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2002.983683] FAULT_INJECTION: forcing a failure.
[ 2002.983683] name failslab, interval 1, probability 0, space 0, times 0
[ 2002.986216] CPU: 0 PID: 9455 Comm: syz-executor.2 Not tainted 5.10.261 #1
[ 2002.987666] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2002.989441] Call Trace:
[ 2002.990012]  dump_stack+0x107/0x167
[ 2002.990035]  should_fail.cold+0x5/0xa
[ 2002.990056]  ? create_object.isra.0+0x3a/0xa30
[ 2002.990073]  should_failslab+0x5/0x20
[ 2002.990091]  kmem_cache_alloc+0x5b/0x310
[ 2002.990114]  create_object.isra.0+0x3a/0xa30
[ 2002.990129]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2002.990152]  kmem_cache_alloc+0x159/0x310
[ 2002.990177]  __d_alloc+0x2a/0x990
[ 2002.990193]  ? find_held_lock+0x2c/0x110
[ 2002.990214]  d_alloc_pseudo+0x19/0x70
[ 2002.990229]  alloc_file_pseudo+0xce/0x250
[ 2002.990244]  ? trace_hardirqs_on+0x5b/0x180
[ 2002.990259]  ? alloc_file+0x5a0/0x5a0
[ 2002.990290]  anon_inode_getfile+0xc8/0x1f0
[ 2002.990314]  io_uring_setup+0x138b/0x2980
[ 2002.990339]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2002.990356]  ? wait_for_completion_io+0x270/0x270
[ 2002.990391]  ? io_is_uring_fops+0x40/0x40
[ 2002.990415]  do_syscall_64+0x33/0x40
[ 2002.990434]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2002.990446] RIP: 0033:0x7f5d125b0b19
[ 2002.990463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2002.990472] RSP: 002b:00007f5d0fb26108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2002.990491] RAX: ffffffffffffffda RBX: 00007f5d126c3f60 RCX: 00007f5d125b0b19
[ 2002.990501] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895
[ 2002.990511] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100
[ 2002.990520] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100
[ 2002.990530] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000
[ 2003.073524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2003.073717] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2003.073939] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:38:25 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

11:38:25 executing program 1:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:38:25 executing program 5:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x7, 0x0, 0x0, 0x0)

11:38:25 executing program 6:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:38:25 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x300000, 0x12, r0, 0x8000000)

11:38:25 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 23)

11:38:25 executing program 7:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x48080, 0x0)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x50, 0x0, 0x0, 0x0)

11:38:25 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x9)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x4000007ffffffc)
r2 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r5, 0x0, &(0x7f0000000240), 0x800)
syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r2, 0x14c4, 0x50, 0x0, 0x0, 0x0)

[ 2016.235464] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2016.285944] FAULT_INJECTION: forcing a failure.
[ 2016.285944] name failslab, interval 1, probability 0, space 0, times 0
[ 2016.288452] CPU: 1 PID: 9477 Comm: syz-executor.2 Not tainted 5.10.261 #1
[ 2016.289957] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2016.291752] Call Trace:
[ 2016.292336]  dump_stack+0x107/0x167
[ 2016.293145]  should_fail.cold+0x5/0xa
[ 2016.293976]  ? create_object.isra.0+0x3a/0xa30
[ 2016.294964]  should_failslab+0x5/0x20
[ 2016.295792]  kmem_cache_alloc+0x5b/0x310
[ 2016.296686]  create_object.isra.0+0x3a/0xa30
[ 2016.297632]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2016.298738]  kmem_cache_alloc+0x159/0x310
[ 2016.299651]  __d_alloc+0x2a/0x990
[ 2016.300400]  ? find_held_lock+0x2c/0x110
[ 2016.301301]  d_alloc_pseudo+0x19/0x70
[ 2016.302122]  alloc_file_pseudo+0xce/0x250
[ 2016.303015]  ? trace_hardirqs_on+0x5b/0x180
[ 2016.303946]  ? alloc_file+0x5a0/0x5a0
[ 2016.304797]  anon_inode_getfile+0xc8/0x1f0
[ 2016.305715]  io_uring_setup+0x138b/0x2980
[ 2016.306618]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2016.307719]  ? wait_for_completion_io+0x270/0x270
[ 2016.308788]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2016.309929]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2016.311054]  do_syscall_64+0x33/0x40
[ 2016.311866]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2016.313009] RIP: 0033:0x7f5d125b0b19
[ 2016.313821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2016.317810] RSP: 002b:00007f5d0fb26108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2016.319457] RAX: ffffffffffffffda RBX: 00007f5d126c3f60 RCX: 00007f5d125b0b19
[ 2016.321019] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895
[ 2016.322569] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100
[ 2016.324125] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100
[ 2016.325681] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000
11:38:25 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x800000, 0x12, r0, 0x8000000)

11:38:25 executing program 1:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:38:25 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x12, r0, 0x8000000)

[ 2016.395992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2016.397771] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2016.404127] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:38:26 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

11:38:26 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 24)

11:38:26 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r0, 0x8000000)

11:38:26 executing program 1:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

[ 2016.580479] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2016.655975] FAULT_INJECTION: forcing a failure.
[ 2016.655975] name failslab, interval 1, probability 0, space 0, times 0
[ 2016.658607] CPU: 1 PID: 9497 Comm: syz-executor.2 Not tainted 5.10.261 #1
[ 2016.660091] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2016.661901] Call Trace:
[ 2016.662476]  dump_stack+0x107/0x167
[ 2016.663266]  should_fail.cold+0x5/0xa
[ 2016.664094]  ? create_object.isra.0+0x3a/0xa30
[ 2016.665093]  should_failslab+0x5/0x20
[ 2016.665919]  kmem_cache_alloc+0x5b/0x310
[ 2016.666805]  create_object.isra.0+0x3a/0xa30
[ 2016.667756]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2016.668862]  kmem_cache_alloc+0x159/0x310
[ 2016.669765]  __alloc_file+0x21/0x320
[ 2016.670577]  alloc_empty_file+0x6d/0x170
[ 2016.671457]  alloc_file+0x5e/0x5a0
[ 2016.672227]  alloc_file_pseudo+0x16a/0x250
[ 2016.673153]  ? alloc_file+0x5a0/0x5a0
[ 2016.673991]  anon_inode_getfile+0xc8/0x1f0
[ 2016.674909]  io_uring_setup+0x138b/0x2980
[ 2016.675815]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2016.676916]  ? wait_for_completion_io+0x270/0x270
[ 2016.677977]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2016.679105]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2016.680219]  do_syscall_64+0x33/0x40
[ 2016.681031]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2016.682130] RIP: 0033:0x7f5d125b0b19
[ 2016.682930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2016.686904] RSP: 002b:00007f5d0fb26108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2016.688538] RAX: ffffffffffffffda RBX: 00007f5d126c3f60 RCX: 00007f5d125b0b19
[ 2016.690086] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895
[ 2016.691617] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100
[ 2016.693161] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100
[ 2016.694695] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000
11:38:26 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000000, 0x12, r0, 0x8000000)

[ 2016.722901] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2016.724511] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2016.726305] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:38:26 executing program 1:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)=<r2=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4(r3, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:38:26 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

[ 2016.875381] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2016.928847] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2016.930460] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2016.932163] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:38:41 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 25)

11:38:41 executing program 5:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x8, 0x0, 0x0, 0x0)

11:38:41 executing program 1:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)=<r2=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4(r3, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:38:41 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xa000000, 0x12, r0, 0x8000000)

11:38:41 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

11:38:41 executing program 6:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=<r2=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r3, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:38:41 executing program 7:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x48080, 0x0)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x5e, 0x0, 0x0, 0x0)

11:38:41 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x9)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x4000007ffffffc)
r2 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r5, 0x0, &(0x7f0000000240), 0x800)
syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r2, 0x14c4, 0x5e, 0x0, 0x0, 0x0)

[ 2032.257752] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2032.285235] FAULT_INJECTION: forcing a failure.
[ 2032.285235] name failslab, interval 1, probability 0, space 0, times 0
[ 2032.287301] CPU: 0 PID: 9524 Comm: syz-executor.2 Not tainted 5.10.261 #1
[ 2032.288563] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2032.290091] Call Trace:
[ 2032.290596]  dump_stack+0x107/0x167
[ 2032.291272]  should_fail.cold+0x5/0xa
[ 2032.291978]  ? security_file_alloc+0x34/0x170
[ 2032.292804]  should_failslab+0x5/0x20
[ 2032.293495]  kmem_cache_alloc+0x5b/0x310
[ 2032.294237]  security_file_alloc+0x34/0x170
[ 2032.295039]  __alloc_file+0xb7/0x320
[ 2032.295723]  alloc_empty_file+0x6d/0x170
[ 2032.296466]  alloc_file+0x5e/0x5a0
[ 2032.297130]  alloc_file_pseudo+0x16a/0x250
[ 2032.297911]  ? alloc_file+0x5a0/0x5a0
[ 2032.298634]  anon_inode_getfile+0xc8/0x1f0
[ 2032.299423]  io_uring_setup+0x138b/0x2980
[ 2032.300178]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2032.301110]  ? wait_for_completion_io+0x270/0x270
[ 2032.301999]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2032.302957]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2032.303902]  do_syscall_64+0x33/0x40
[ 2032.304572]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2032.305515] RIP: 0033:0x7f5d125b0b19
[ 2032.306200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2032.309566] RSP: 002b:00007f5d0fb26108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2032.310942] RAX: ffffffffffffffda RBX: 00007f5d126c3f60 RCX: 00007f5d125b0b19
[ 2032.312227] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895
[ 2032.313913] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100
[ 2032.315717] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100
[ 2032.317459] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000
11:38:41 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x30000000000000, 0x12, r0, 0x8000000)

11:38:41 executing program 6:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=<r2=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r3, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:38:41 executing program 1:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)=<r2=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4(r3, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:38:41 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x80000000000000, 0x12, r0, 0x8000000)

[ 2032.399006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2032.400652] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2032.401737] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:38:42 executing program 6:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=<r2=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r3, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:38:42 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000000000000, 0x12, r0, 0x8000000)

11:38:42 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2400000010000100000000ec0000009600000900050000000000000005000080480000006fe884b7f11ac8f1810d0dc930b7fbbdfe445812bd4e3ddf303ed73209364a02ef9768d0c54531c0e48e8b51a2f78d54f00d9cdd3a5569eaaaf9d57fd00fe7eff61a89507780518151ccc61d149f11066c74aac60fe6c088582777cddc52bd82c5ef927b1c475f2e339546488ff742ba361f30616ba6000013203bece0c63d63d44a2d8033a9f2319b5d7e75aed01f84fbba37b71774867fc770eb6690f7a3c3e0d63d75b35925d7980ce0513e1600a3b9b8634496ce235be6daabe6f870e770a7124542c63a0febe8281dfa46ca86343801a72702c3c16a"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

[ 2032.518534] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2032.600360] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2032.601272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2032.602150] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:38:54 executing program 5:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0xe, 0x0, 0x0, 0x0)

11:38:54 executing program 1:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4(r3, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:38:54 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x9)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x4000007ffffffc)
r2 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r5, 0x0, &(0x7f0000000240), 0x800)
syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r2, 0x14c4, 0xfc, 0x0, 0x0, 0x0)

11:38:54 executing program 6:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:38:54 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000000000000, 0x12, r0, 0x8000000)

11:38:54 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 26)

11:38:54 executing program 7:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x48080, 0x0)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0xfc, 0x0, 0x0, 0x0)

11:38:54 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

[ 2045.012000] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2045.032822] FAULT_INJECTION: forcing a failure.
[ 2045.032822] name failslab, interval 1, probability 0, space 0, times 0
[ 2045.034395] CPU: 1 PID: 9575 Comm: syz-executor.2 Not tainted 5.10.261 #1
[ 2045.035280] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2045.036326] Call Trace:
[ 2045.036662]  dump_stack+0x107/0x167
[ 2045.037149]  should_fail.cold+0x5/0xa
[ 2045.037630]  ? create_object.isra.0+0x3a/0xa30
[ 2045.038222]  should_failslab+0x5/0x20
[ 2045.038701]  kmem_cache_alloc+0x5b/0x310
[ 2045.039214]  ? percpu_ref_put_many.constprop.0+0x4e/0x110
[ 2045.039905]  create_object.isra.0+0x3a/0xa30
[ 2045.040467]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2045.041133]  kmem_cache_alloc+0x159/0x310
[ 2045.041659]  security_file_alloc+0x34/0x170
[ 2045.042200]  __alloc_file+0xb7/0x320
[ 2045.042677]  alloc_empty_file+0x6d/0x170
[ 2045.043200]  alloc_file+0x5e/0x5a0
[ 2045.043648]  alloc_file_pseudo+0x16a/0x250
[ 2045.044178]  ? alloc_file+0x5a0/0x5a0
[ 2045.044667]  anon_inode_getfile+0xc8/0x1f0
[ 2045.045212]  io_uring_setup+0x138b/0x2980
[ 2045.045739]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2045.046376]  ? wait_for_completion_io+0x270/0x270
[ 2045.046999]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2045.047656]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2045.048300]  do_syscall_64+0x33/0x40
[ 2045.048773]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2045.049441] RIP: 0033:0x7f5d125b0b19
[ 2045.049908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2045.052203] RSP: 002b:00007f5d0fb26108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2045.053162] RAX: ffffffffffffffda RBX: 00007f5d126c3f60 RCX: 00007f5d125b0b19
[ 2045.054051] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895
[ 2045.054943] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100
[ 2045.055832] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100
[ 2045.056722] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000
11:38:54 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x400000000000000, 0x12, r0, 0x8000000)

11:38:54 executing program 1:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4(r3, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:38:54 executing program 6:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:38:54 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xa00000000000000, 0x12, r0, 0x8000000)

[ 2045.139871] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2045.140870] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2045.141892] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:38:54 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 27)

11:38:54 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

[ 2045.235051] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2045.253985] FAULT_INJECTION: forcing a failure.
[ 2045.253985] name failslab, interval 1, probability 0, space 0, times 0
[ 2045.255344] CPU: 1 PID: 9591 Comm: syz-executor.2 Not tainted 5.10.261 #1
[ 2045.256138] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2045.257111] Call Trace:
[ 2045.257426]  dump_stack+0x107/0x167
[ 2045.257853]  should_fail.cold+0x5/0xa
[ 2045.258296]  ? io_uring_alloc_task_context+0x99/0x6a0
[ 2045.258896]  should_failslab+0x5/0x20
[ 2045.259336]  kmem_cache_alloc_trace+0x55/0x320
[ 2045.259869]  io_uring_alloc_task_context+0x99/0x6a0
[ 2045.260444]  ? io_import_iovec+0x1120/0x1120
[ 2045.260970]  ? lock_downgrade+0x6d0/0x6d0
[ 2045.261450]  ? do_raw_spin_lock+0x121/0x260
[ 2045.261951]  ? rwlock_bug.part.0+0x90/0x90
[ 2045.262447]  __io_uring_add_tctx_node+0x2c6/0x520
[ 2045.263006]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2045.263615]  ? alloc_fd+0x2e7/0x670
[ 2045.264040]  io_uring_setup+0x1fbb/0x2980
[ 2045.264519]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2045.265119]  ? wait_for_completion_io+0x270/0x270
[ 2045.265686]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2045.266287]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2045.266885]  do_syscall_64+0x33/0x40
[ 2045.267315]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2045.267909] RIP: 0033:0x7f5d125b0b19
[ 2045.268338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2045.270462] RSP: 002b:00007f5d0fb26108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2045.271341] RAX: ffffffffffffffda RBX: 00007f5d126c3f60 RCX: 00007f5d125b0b19
[ 2045.272161] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895
[ 2045.272990] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100
[ 2045.273806] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100
[ 2045.274622] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000
[ 2045.294766] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2045.295702] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2045.296679] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:39:08 executing program 5:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x50, 0x0, 0x0, 0x0)

11:39:08 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xffffffff00000000, 0x12, r0, 0x8000000)

11:39:08 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x9)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x4000007ffffffc)
r2 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r5, 0x0, &(0x7f0000000240), 0x800)
syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r2, 0x14c4, 0x1f4, 0x0, 0x0, 0x0)

11:39:08 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

11:39:08 executing program 6:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:39:08 executing program 1:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4(r3, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r4, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:39:08 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 28)

11:39:08 executing program 7:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x48080, 0x0)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x1f4, 0x0, 0x0, 0x0)

[ 2058.804322] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2058.805398] FAULT_INJECTION: forcing a failure.
[ 2058.805398] name failslab, interval 1, probability 0, space 0, times 0
[ 2058.807526] CPU: 0 PID: 9610 Comm: syz-executor.2 Not tainted 5.10.261 #1
[ 2058.808354] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2058.809387] Call Trace:
[ 2058.809720]  dump_stack+0x107/0x167
[ 2058.810172]  should_fail.cold+0x5/0xa
[ 2058.810638]  ? create_object.isra.0+0x3a/0xa30
[ 2058.811192]  should_failslab+0x5/0x20
[ 2058.811657]  kmem_cache_alloc+0x5b/0x310
[ 2058.812155]  create_object.isra.0+0x3a/0xa30
[ 2058.812691]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2058.813319]  kmem_cache_alloc_trace+0x151/0x320
[ 2058.813897]  io_uring_alloc_task_context+0x99/0x6a0
[ 2058.814516]  ? io_import_iovec+0x1120/0x1120
[ 2058.815067]  ? lock_downgrade+0x6d0/0x6d0
[ 2058.815587]  ? do_raw_spin_lock+0x121/0x260
[ 2058.816128]  ? rwlock_bug.part.0+0x90/0x90
[ 2058.816650]  __io_uring_add_tctx_node+0x2c6/0x520
[ 2058.817253]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2058.817895]  ? alloc_fd+0x2e7/0x670
[ 2058.818357]  io_uring_setup+0x1fbb/0x2980
[ 2058.818868]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2058.819488]  ? wait_for_completion_io+0x270/0x270
[ 2058.820088]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2058.820741]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2058.821390]  do_syscall_64+0x33/0x40
[ 2058.821855]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2058.822488] RIP: 0033:0x7f5d125b0b19
[ 2058.822948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2058.825207] RSP: 002b:00007f5d0fb26108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2058.826145] RAX: ffffffffffffffda RBX: 00007f5d126c3f60 RCX: 00007f5d125b0b19
[ 2058.827007] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895
[ 2058.827881] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100
[ 2058.828752] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100
[ 2058.829631] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000
11:39:08 executing program 1:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:39:08 executing program 6:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, 0x0, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

[ 2058.897933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2058.899588] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2058.901229] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:39:08 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000002)

11:39:08 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 29)

11:39:08 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

11:39:08 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000004)

[ 2059.037232] FAULT_INJECTION: forcing a failure.
[ 2059.037232] name failslab, interval 1, probability 0, space 0, times 0
[ 2059.038600] CPU: 0 PID: 9624 Comm: syz-executor.2 Not tainted 5.10.261 #1
[ 2059.039394] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2059.040355] Call Trace:
[ 2059.040656]  dump_stack+0x107/0x167
[ 2059.041088]  should_fail.cold+0x5/0xa
[ 2059.041539]  ? create_object.isra.0+0x3a/0xa30
[ 2059.042075]  should_failslab+0x5/0x20
[ 2059.042517]  kmem_cache_alloc+0x5b/0x310
[ 2059.042986]  create_object.isra.0+0x3a/0xa30
[ 2059.043504]  kmemleak_alloc_percpu+0xa0/0x100
[ 2059.044031]  pcpu_alloc+0x4e2/0x1240
[ 2059.044451]  __percpu_counter_init+0x10d/0x2d0
[ 2059.044987]  io_uring_alloc_task_context+0xcc/0x6a0
[ 2059.045538]  ? io_import_iovec+0x1120/0x1120
[ 2059.046057]  ? lock_downgrade+0x6d0/0x6d0
[ 2059.046512]  ? do_raw_spin_lock+0x121/0x260
[ 2059.047008]  ? rwlock_bug.part.0+0x90/0x90
[ 2059.047500]  __io_uring_add_tctx_node+0x2c6/0x520
[ 2059.048057]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2059.048629]  ? alloc_fd+0x2e7/0x670
[ 2059.049064]  io_uring_setup+0x1fbb/0x2980
[ 2059.049548]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2059.050134]  ? wait_for_completion_io+0x270/0x270
[ 2059.050672]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2059.051291]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2059.051853]  do_syscall_64+0x33/0x40
[ 2059.052288]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2059.052896] RIP: 0033:0x7f5d125b0b19
[ 2059.053335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2059.055338] RSP: 002b:00007f5d0fb26108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2059.056226] RAX: ffffffffffffffda RBX: 00007f5d126c3f60 RCX: 00007f5d125b0b19
[ 2059.057009] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895
[ 2059.057779] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100
[ 2059.058546] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100
[ 2059.059314] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000
[ 2059.087183] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
11:39:08 executing program 6:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, 0x0, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:39:08 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 30)

[ 2059.169356] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2059.171179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2059.173970] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2059.260476] FAULT_INJECTION: forcing a failure.
[ 2059.260476] name failslab, interval 1, probability 0, space 0, times 0
[ 2059.262998] CPU: 1 PID: 9635 Comm: syz-executor.2 Not tainted 5.10.261 #1
[ 2059.264542] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2059.266469] Call Trace:
[ 2059.267066]  dump_stack+0x107/0x167
[ 2059.267905]  should_fail.cold+0x5/0xa
[ 2059.268772]  ? create_object.isra.0+0x3a/0xa30
[ 2059.269794]  should_failslab+0x5/0x20
[ 2059.270675]  kmem_cache_alloc+0x5b/0x310
[ 2059.271597]  create_object.isra.0+0x3a/0xa30
[ 2059.272601]  kmemleak_alloc_percpu+0xa0/0x100
[ 2059.273647]  pcpu_alloc+0x4e2/0x1240
[ 2059.274507]  __percpu_counter_init+0x10d/0x2d0
[ 2059.275562]  io_uring_alloc_task_context+0xcc/0x6a0
[ 2059.276698]  ? io_import_iovec+0x1120/0x1120
[ 2059.277703]  ? lock_downgrade+0x6d0/0x6d0
[ 2059.278612]  ? do_raw_spin_lock+0x121/0x260
[ 2059.279573]  ? rwlock_bug.part.0+0x90/0x90
[ 2059.280525]  __io_uring_add_tctx_node+0x2c6/0x520
[ 2059.281613]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2059.282760]  ? alloc_fd+0x2e7/0x670
[ 2059.283597]  io_uring_setup+0x1fbb/0x2980
[ 2059.284526]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2059.285683]  ? wait_for_completion_io+0x270/0x270
[ 2059.286791]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2059.287986]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2059.289154]  do_syscall_64+0x33/0x40
[ 2059.289968]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2059.291118] RIP: 0033:0x7f5d125b0b19
[ 2059.291931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2059.296020] RSP: 002b:00007f5d0fb26108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2059.297740] RAX: ffffffffffffffda RBX: 00007f5d126c3f60 RCX: 00007f5d125b0b19
[ 2059.299312] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895
[ 2059.300893] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100
[ 2059.302465] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100
[ 2059.304044] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000
11:39:23 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x800000a)

11:39:23 executing program 5:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x5e, 0x0, 0x0, 0x0)

11:39:23 executing program 1:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:39:23 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 31)

11:39:23 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2400000010000100000000ec0000009600000900050000000000000005000080480000006fe884b7f11ac8f1810d0dc930b7fbbdfe445812bd4e3ddf303ed73209364a02ef9768d0c54531c0e48e8b51a2f78d54f00d9cdd3a5569eaaaf9d57fd00fe7eff61a89507780518151ccc61d149f11066c74aac60fe6c088582777cddc52bd82c5ef927b1c475f2e339546488ff742ba361f30616ba6000013203bece0c63d63d44a2d8033a9f2319b5d7e75aed01f84fbba37b71774867fc770eb6690f7a3c3e0d63d75b35925d7980ce0513e1600a3b9b8634496ce235be6daabe6f870e770a7124542c63a0febe8281dfa46ca86343801a72702c3c16a"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

11:39:23 executing program 6:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, 0x0, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:39:23 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x9)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x4000007ffffffc)
r2 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r5, 0x0, &(0x7f0000000240), 0x800)
syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r2, 0x14c4, 0x218, 0x0, 0x0, 0x0)

11:39:23 executing program 7:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x48080, 0x0)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x218, 0x0, 0x0, 0x0)

[ 2073.875823] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
11:39:23 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000030)

[ 2073.947287] FAULT_INJECTION: forcing a failure.
[ 2073.947287] name failslab, interval 1, probability 0, space 0, times 0
[ 2073.949851] CPU: 0 PID: 9658 Comm: syz-executor.2 Not tainted 5.10.261 #1
[ 2073.951356] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2073.953167] Call Trace:
[ 2073.953736]  dump_stack+0x107/0x167
[ 2073.954509]  should_fail.cold+0x5/0xa
[ 2073.955314]  ? io_uring_alloc_task_context+0x4a3/0x6a0
[ 2073.956425]  should_failslab+0x5/0x20
[ 2073.957235]  kmem_cache_alloc_trace+0x55/0x320
[ 2073.958318]  io_uring_alloc_task_context+0x4a3/0x6a0
[ 2073.959423]  ? io_import_iovec+0x1120/0x1120
[ 2073.960353]  ? lock_downgrade+0x6d0/0x6d0
[ 2073.961235]  ? do_raw_spin_lock+0x121/0x260
[ 2073.962154]  ? rwlock_bug.part.0+0x90/0x90
[ 2073.963061]  __io_uring_add_tctx_node+0x2c6/0x520
[ 2073.964090]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2073.965211]  ? alloc_fd+0x2e7/0x670
[ 2073.965994]  io_uring_setup+0x1fbb/0x2980
[ 2073.966880]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2073.967959]  ? wait_for_completion_io+0x270/0x270
[ 2073.969004]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2073.970126]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2073.971224]  do_syscall_64+0x33/0x40
[ 2073.972028]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2073.973121] RIP: 0033:0x7f5d125b0b19
[ 2073.973928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2073.977968] RSP: 002b:00007f5d0fb05108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2073.979629] RAX: ffffffffffffffda RBX: 00007f5d126c4020 RCX: 00007f5d125b0b19
[ 2073.981482] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895
[ 2073.983459] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100
[ 2073.985447] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100
[ 2073.987425] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000
11:39:23 executing program 6:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

[ 2074.004155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2074.006058] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2074.007993] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:39:23 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

[ 2074.173253] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2074.251006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2074.252703] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2074.255144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:39:23 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 32)

11:39:23 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000a00)

11:39:23 executing program 6:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:39:23 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

[ 2074.391982] FAULT_INJECTION: forcing a failure.
[ 2074.391982] name failslab, interval 1, probability 0, space 0, times 0
[ 2074.394423] CPU: 0 PID: 9672 Comm: syz-executor.2 Not tainted 5.10.261 #1
[ 2074.395875] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2074.397641] Call Trace:
[ 2074.398202]  dump_stack+0x107/0x167
[ 2074.398974]  should_fail.cold+0x5/0xa
[ 2074.399782]  ? create_object.isra.0+0x3a/0xa30
[ 2074.400746]  should_failslab+0x5/0x20
[ 2074.401566]  kmem_cache_alloc+0x5b/0x310
[ 2074.402435]  create_object.isra.0+0x3a/0xa30
[ 2074.403370]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2074.404454]  kmem_cache_alloc_trace+0x151/0x320
[ 2074.405450]  io_uring_alloc_task_context+0x4a3/0x6a0
[ 2074.406520]  ? io_import_iovec+0x1120/0x1120
[ 2074.407450]  ? lock_downgrade+0x6d0/0x6d0
[ 2074.408333]  ? do_raw_spin_lock+0x121/0x260
[ 2074.409253]  ? rwlock_bug.part.0+0x90/0x90
[ 2074.410154]  __io_uring_add_tctx_node+0x2c6/0x520
[ 2074.411179]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2074.412285]  ? alloc_fd+0x2e7/0x670
[ 2074.413085]  io_uring_setup+0x1fbb/0x2980
[ 2074.413977]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2074.415050]  ? wait_for_completion_io+0x270/0x270
[ 2074.416093]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2074.417217]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2074.418314]  do_syscall_64+0x33/0x40
[ 2074.419102]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2074.420185] RIP: 0033:0x7f5d125b0b19
[ 2074.420969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2074.424874] RSP: 002b:00007f5d0fb26108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2074.426496] RAX: ffffffffffffffda RBX: 00007f5d126c3f60 RCX: 00007f5d125b0b19
11:39:23 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8003000)

[ 2074.428010] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895
[ 2074.429747] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100
[ 2074.431256] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100
[ 2074.432767] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000
[ 2074.463815] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2074.519849] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2074.521580] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2074.523326] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:39:37 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

11:39:37 executing program 5:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0xfc, 0x0, 0x0, 0x0)

11:39:37 executing program 7:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x48080, 0x0)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x240, 0x0, 0x0, 0x0)

11:39:37 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 33)

11:39:37 executing program 1:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:39:37 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x9)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x4000007ffffffc)
r2 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r5, 0x0, &(0x7f0000000240), 0x800)
syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r2, 0x14c4, 0x240, 0x0, 0x0, 0x0)

11:39:37 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x9000000)

11:39:38 executing program 6:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:39:38 executing program 6:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

[ 2088.512868] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2088.545503] FAULT_INJECTION: forcing a failure.
[ 2088.545503] name failslab, interval 1, probability 0, space 0, times 0
[ 2088.548305] CPU: 0 PID: 9703 Comm: syz-executor.2 Not tainted 5.10.261 #1
[ 2088.550107] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2088.552263] Call Trace:
[ 2088.552971]  dump_stack+0x107/0x167
[ 2088.553948]  should_fail.cold+0x5/0xa
[ 2088.554973]  ? io_wq_create+0xeb/0xc00
[ 2088.555991]  should_failslab+0x5/0x20
[ 2088.556995]  __kmalloc+0x72/0x390
[ 2088.557950]  io_wq_create+0xeb/0xc00
[ 2088.558931]  io_uring_alloc_task_context+0x1f1/0x6a0
[ 2088.560245]  ? io_import_iovec+0x1120/0x1120
[ 2088.561209]  ? io_apoll_task_func+0x2d0/0x2d0
[ 2088.562380]  ? __io_req_find_next+0x300/0x300
[ 2088.563534]  ? do_raw_spin_lock+0x121/0x260
[ 2088.564640]  ? rwlock_bug.part.0+0x90/0x90
[ 2088.565779]  __io_uring_add_tctx_node+0x2c6/0x520
[ 2088.567049]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2088.568395]  ? alloc_fd+0x2e7/0x670
[ 2088.569361]  io_uring_setup+0x1fbb/0x2980
[ 2088.570455]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2088.571765]  ? wait_for_completion_io+0x270/0x270
[ 2088.572826]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2088.574170]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2088.575501]  do_syscall_64+0x33/0x40
[ 2088.576464]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2088.577807] RIP: 0033:0x7f5d125b0b19
[ 2088.578770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2088.583482] RSP: 002b:00007f5d0fb26108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2088.585451] RAX: ffffffffffffffda RBX: 00007f5d126c3f60 RCX: 00007f5d125b0b19
[ 2088.587261] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895
[ 2088.589100] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100
[ 2088.590917] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100
[ 2088.592737] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000
[ 2088.606124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2088.607994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2088.610087] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:39:38 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xfffffffffffffffe, r0, 0x15bfc8f36d7569ae)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmmsg$inet(r2, &(0x7f0000000080)=[{{&(0x7f0000000000)={0x2, 0x2000, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x18}}], 0x1, 0x0)
dup(r1)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmmsg$inet(r3, &(0x7f0000002f40)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001280)=[@ip_retopts={{0x18, 0x0, 0x7, {[@timestamp_addr={0x44, 0x4, 0x54}, @timestamp={0x44, 0x4}]}}}], 0x18}}], 0x1, 0x0)
close(r3)

[ 2088.693062] Zero length message leads to an empty skb
11:39:38 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

11:39:38 executing program 6:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

[ 2088.737760] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
11:39:38 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8000, 0x18}, 0x18)
r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x130100, 0x0)
perf_event_open(0x0, 0x0, 0x81, r1, 0xa)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)

11:39:38 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 34)

[ 2088.791745] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2088.793715] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2088.795663] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:39:38 executing program 6:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

[ 2088.906626] FAULT_INJECTION: forcing a failure.
[ 2088.906626] name failslab, interval 1, probability 0, space 0, times 0
[ 2088.909529] CPU: 0 PID: 9722 Comm: syz-executor.2 Not tainted 5.10.261 #1
[ 2088.911250] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2088.913377] Call Trace:
11:39:38 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

[ 2088.914052]  dump_stack+0x107/0x167
[ 2088.915188]  should_fail.cold+0x5/0xa
[ 2088.915998]  ? create_object.isra.0+0x3a/0xa30
[ 2088.917174]  should_failslab+0x5/0x20
[ 2088.918168]  kmem_cache_alloc+0x5b/0x310
[ 2088.919225]  create_object.isra.0+0x3a/0xa30
[ 2088.920354]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2088.921659]  __kmalloc+0x16e/0x390
[ 2088.922578]  io_wq_create+0xeb/0xc00
[ 2088.923542]  io_uring_alloc_task_context+0x1f1/0x6a0
[ 2088.924832]  ? io_import_iovec+0x1120/0x1120
[ 2088.925971]  ? io_apoll_task_func+0x2d0/0x2d0
[ 2088.927116]  ? __io_req_find_next+0x300/0x300
[ 2088.928061]  ? do_raw_spin_lock+0x121/0x260
[ 2088.929165]  ? rwlock_bug.part.0+0x90/0x90
[ 2088.930261]  __io_uring_add_tctx_node+0x2c6/0x520
[ 2088.931491]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2088.932829]  ? alloc_fd+0x2e7/0x670
[ 2088.933793]  io_uring_setup+0x1fbb/0x2980
[ 2088.934854]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2088.936155]  ? wait_for_completion_io+0x270/0x270
[ 2088.937520]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2088.938815]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2088.940084]  do_syscall_64+0x33/0x40
[ 2088.941003]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2088.942197] RIP: 0033:0x7f5d125b0b19
[ 2088.942973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2088.946822] RSP: 002b:00007f5d0fb26108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2088.948401] RAX: ffffffffffffffda RBX: 00007f5d126c3f60 RCX: 00007f5d125b0b19
[ 2088.949896] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895
[ 2088.951373] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100
[ 2088.952858] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100
[ 2088.954349] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000
11:39:38 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00')
readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
r2 = syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100))
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000200)=ANY=[@ANYBLOB="01007d000100000018000000", @ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00./file0\x00'])
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000008, 0x810, r1, 0x8000000)
inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x20)

[ 2088.968305] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2089.059277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2089.061314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2089.063162] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:39:52 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 35)

11:39:52 executing program 5:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x1f4, 0x0, 0x0, 0x0)

11:39:52 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x9)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x4000007ffffffc)
r2 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r5, 0x0, &(0x7f0000000240), 0x800)
syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r2, 0x14c4, 0x300, 0x0, 0x0, 0x0)

11:39:52 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2400000010000100000000ec0000009600000900050000000000000005000080480000006fe884b7f11ac8f1810d0dc930b7fbbdfe445812bd4e3ddf303ed73209364a02ef9768d0c54531c0e48e8b51a2f78d54f00d9cdd3a5569eaaaf9d57fd00fe7eff61a89507780518151ccc61d149f11066c74aac60fe6c088582777cddc52bd82c5ef927b1c475f2e339546488ff742ba361f30616ba6000013203bece0c63d63d44a2d8033a9f2319b5d7e75aed01f84fbba37b71774867fc770eb6690f7a3c3e0d63d75b35925d7980ce0513e1600a3b9b8634496ce235be6daabe6f870e770a7124542c63a0febe8281dfa46ca86343801a72702c3c16a"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

11:39:52 executing program 7:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x48080, 0x0)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x300, 0x0, 0x0, 0x0)

11:39:52 executing program 1:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=<r2=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4(r3, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:39:52 executing program 6:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:39:52 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x126)
io_uring_enter(r1, 0x5109, 0x151f, 0x1, &(0x7f0000000080)={[0x6687]}, 0x8)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'})

[ 2102.763321] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
11:39:52 executing program 3:
r0 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x101400)
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r0, 0x8000000)
r2 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x810, r0, 0x10000000)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r4}}, 0x5)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x8000000)

[ 2102.799868] FAULT_INJECTION: forcing a failure.
[ 2102.799868] name failslab, interval 1, probability 0, space 0, times 0
[ 2102.802459] CPU: 1 PID: 9748 Comm: syz-executor.2 Not tainted 5.10.261 #1
[ 2102.803933] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2102.805726] Call Trace:
[ 2102.806302]  dump_stack+0x107/0x167
[ 2102.807098]  should_fail.cold+0x5/0xa
[ 2102.807925]  ? io_wq_create+0x6ef/0xc00
[ 2102.808784]  should_failslab+0x5/0x20
[ 2102.809620]  kmem_cache_alloc_node_trace+0x59/0x340
[ 2102.810702]  io_wq_create+0x6ef/0xc00
[ 2102.811532]  io_uring_alloc_task_context+0x1f1/0x6a0
[ 2102.812630]  ? io_import_iovec+0x1120/0x1120
[ 2102.813598]  ? io_apoll_task_func+0x2d0/0x2d0
[ 2102.814796]  ? __io_req_find_next+0x300/0x300
[ 2102.815988]  ? do_raw_spin_lock+0x121/0x260
[ 2102.817142]  ? rwlock_bug.part.0+0x90/0x90
[ 2102.818299]  __io_uring_add_tctx_node+0x2c6/0x520
11:39:52 executing program 6:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

[ 2102.819580]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2102.820970]  ? alloc_fd+0x2e7/0x670
[ 2102.821795]  io_uring_setup+0x1fbb/0x2980
[ 2102.822713]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2102.823828]  ? wait_for_completion_io+0x270/0x270
[ 2102.824900]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2102.826061]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2102.827205]  do_syscall_64+0x33/0x40
[ 2102.828012]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2102.829158] RIP: 0033:0x7f5d125b0b19
[ 2102.829979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2102.834041] RSP: 002b:00007f5d0fb26108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2102.835712] RAX: ffffffffffffffda RBX: 00007f5d126c3f60 RCX: 00007f5d125b0b19
[ 2102.837294] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895
[ 2102.838890] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100
[ 2102.840462] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100
[ 2102.842033] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000
11:39:52 executing program 1:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=<r2=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4(r3, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

[ 2102.892189] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2102.893991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2102.895735] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:39:52 executing program 3:
open$dir(&(0x7f0000000040)='./file0\x00', 0x2000, 0x50)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x8000000)

11:39:52 executing program 6:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:39:52 executing program 1:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=<r2=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4(r3, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:39:52 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

[ 2103.050794] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
11:39:52 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x200200, 0x22)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)

[ 2103.138918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2103.140601] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2103.142959] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2115.620271] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
11:40:05 executing program 6:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:40:05 executing program 5:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x218, 0x0, 0x0, 0x0)

11:40:05 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x9)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x4000007ffffffc)
r2 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r5, 0x0, &(0x7f0000000240), 0x800)
syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r2, 0x14c4, 0x3e8, 0x0, 0x0, 0x0)

11:40:05 executing program 3:
stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r0=>0x0})
fchownat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, r0, 0x1000)
llistxattr(&(0x7f0000001180)='\x00', &(0x7f00000011c0)=""/159, 0x9f)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f00000012c0)={{0x1, 0x1, 0x18, <r2=>r1}, './file0\x00'})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat(r1, &(0x7f0000001280)='./file0\x00', 0x8080, 0x80)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x12, r1, 0x8000000)
preadv(r1, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x7de1, 0x7)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000001300)={{0x1, 0x1, 0x18, r1}, './file0\x00'})

11:40:05 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 36)

11:40:05 executing program 1:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:40:05 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

11:40:05 executing program 7:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x48080, 0x0)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x3e8, 0x0, 0x0, 0x0)

[ 2115.687970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2115.689569] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2115.691687] FAULT_INJECTION: forcing a failure.
[ 2115.691687] name failslab, interval 1, probability 0, space 0, times 0
[ 2115.693044] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2115.694183] CPU: 0 PID: 9794 Comm: syz-executor.2 Not tainted 5.10.261 #1
[ 2115.694200] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2115.698748] Call Trace:
[ 2115.699318]  dump_stack+0x107/0x167
[ 2115.700097]  should_fail.cold+0x5/0xa
[ 2115.700908]  ? create_object.isra.0+0x3a/0xa30
[ 2115.701891]  should_failslab+0x5/0x20
[ 2115.702702]  kmem_cache_alloc+0x5b/0x310
[ 2115.703562]  ? io_wq_create+0x114/0xc00
[ 2115.704416]  create_object.isra.0+0x3a/0xa30
[ 2115.705354]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2115.706443]  kmem_cache_alloc_node_trace+0x16d/0x340
[ 2115.707527]  io_wq_create+0x6ef/0xc00
[ 2115.708343]  io_uring_alloc_task_context+0x1f1/0x6a0
[ 2115.709417]  ? io_import_iovec+0x1120/0x1120
[ 2115.710358]  ? io_apoll_task_func+0x2d0/0x2d0
[ 2115.711315]  ? __io_req_find_next+0x300/0x300
[ 2115.712264]  ? do_raw_spin_lock+0x121/0x260
[ 2115.713179]  ? rwlock_bug.part.0+0x90/0x90
[ 2115.714119]  __io_uring_add_tctx_node+0x2c6/0x520
[ 2115.715148]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2115.716265]  ? alloc_fd+0x2e7/0x670
[ 2115.717020]  io_uring_setup+0x1fbb/0x2980
[ 2115.717913]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2115.718965]  ? wait_for_completion_io+0x270/0x270
[ 2115.720015]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2115.721132]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2115.722216]  do_syscall_64+0x33/0x40
[ 2115.723008]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2115.724099] RIP: 0033:0x7f5d125b0b19
[ 2115.724888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2115.728821] RSP: 002b:00007f5d0fb26108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2115.730437] RAX: ffffffffffffffda RBX: 00007f5d126c3f60 RCX: 00007f5d125b0b19
[ 2115.731954] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895
[ 2115.733471] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100
[ 2115.734984] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100
[ 2115.736488] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000
11:40:05 executing program 6:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:40:05 executing program 3:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)

11:40:05 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2400000010000100000000ec0000009600000900050000000000000005000080480000006fe884b7f11ac8f1810d0dc930b7fbbdfe445812bd4e3ddf303ed73209364a02ef9768d0c54531c0e48e8b51a2f78d54f00d9cdd3a5569eaaaf9d57fd00fe7eff61a89507780518151ccc61d149f11066c74aac60fe6c088582777cddc52bd82c5ef927b1c475f2e339546488ff742ba361f30616ba6000013203bece0c63d63d44a2d8033a9f2319b5d7e75aed01f84fbba37b71774867fc770eb6690f7a3c3e0d63d75b35925d7980ce0513e1600a3b9b8634496ce235be6daabe6f870e770a7124542c63a0febe8281dfa46ca86343801a72702c3c16a"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

11:40:05 executing program 1:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

[ 2115.854379] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
11:40:05 executing program 6:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:40:05 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
syz_io_uring_setup(0x807d04, &(0x7f0000000340)={0x0, 0x0, 0x10, 0x0, 0x1fffff}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=<r1=>0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000280)=@rc={0x1f, @none, 0x6}, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(0x0, r1, &(0x7f0000000300)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x77359400}, 0x1, 0x1}, 0x4016)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, <r3=>0xffffffffffffffff, {0x9}}, './file0\x00'})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f00000000c0))
sendmmsg$inet(r2, &(0x7f0000002f40)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001280)=[@ip_retopts={{0x18, 0x0, 0x7, {[@timestamp_addr={0x44, 0x4, 0x54}, @timestamp={0x44, 0x4}]}}}], 0x18}}], 0x1, 0x0)
fcntl$getownex(r2, 0x10, &(0x7f0000000040))
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x810, r0, 0x8000000)

[ 2115.953894] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2115.955595] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2115.957206] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:40:05 executing program 1:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, 0x0, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:40:05 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 37)

11:40:05 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

[ 2116.144896] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2116.149638] FAULT_INJECTION: forcing a failure.
[ 2116.149638] name failslab, interval 1, probability 0, space 0, times 0
[ 2116.152194] CPU: 0 PID: 9816 Comm: syz-executor.2 Not tainted 5.10.261 #1
[ 2116.153666] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2116.155426] Call Trace:
[ 2116.155993]  dump_stack+0x107/0x167
[ 2116.156773]  should_fail.cold+0x5/0xa
[ 2116.157601]  ? __io_uring_add_tctx_node+0x15c/0x520
[ 2116.158655]  should_failslab+0x5/0x20
[ 2116.159468]  kmem_cache_alloc_trace+0x55/0x320
[ 2116.160449]  __io_uring_add_tctx_node+0x15c/0x520
[ 2116.161488]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2116.162603]  ? alloc_fd+0x2e7/0x670
[ 2116.163382]  io_uring_setup+0x1fbb/0x2980
[ 2116.164271]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2116.165342]  ? wait_for_completion_io+0x270/0x270
[ 2116.166409]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2116.167529]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2116.168628]  do_syscall_64+0x33/0x40
[ 2116.169418]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2116.170516] RIP: 0033:0x7f5d125b0b19
[ 2116.171304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2116.175214] RSP: 002b:00007f5d0fb26108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2116.176834] RAX: ffffffffffffffda RBX: 00007f5d126c3f60 RCX: 00007f5d125b0b19
[ 2116.178363] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895
[ 2116.179881] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100
[ 2116.181399] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100
[ 2116.182924] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000
[ 2116.223127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2116.224716] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2116.226167] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:40:18 executing program 5:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x240, 0x0, 0x0, 0x0)

11:40:18 executing program 6:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:40:18 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x9)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x4000007ffffffc)
r2 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r5, 0x0, &(0x7f0000000240), 0x800)
syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r2, 0x14c4, 0x500, 0x0, 0x0, 0x0)

11:40:18 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 38)

11:40:18 executing program 3:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00')
readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
r1 = syz_io_uring_setup(0x7891, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x1f5}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100))
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f00000003c0)=ANY=[@ANYBLOB="011d7d0001e6ffdf703492eab00000000000000000", @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00./file0\x00'])
r2 = openat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x28)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x4000030, r2, 0x8000000)
syz_io_uring_setup(0x807d04, &(0x7f0000000340)={0x0, 0x0, 0x10, 0x0, 0x1fffff}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(0x0, r4, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000280)=@rc={0x1f, @none, 0x6}, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, r2, &(0x7f0000000140)={0x840, 0x1, 0xc}, &(0x7f0000000180)='./file0\x00', 0x18, 0x0, 0x23456}, 0x8)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x8000000)
r5 = io_uring_setup(0x7ac3, &(0x7f0000000080)={0x0, 0x4c82, 0x20, 0x3, 0x89, 0x0, r1})
pread64(r5, &(0x7f00000002c0)=""/229, 0xe5, 0x84)

[ 2128.747406] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2128.752529] FAULT_INJECTION: forcing a failure.
[ 2128.752529] name failslab, interval 1, probability 0, space 0, times 0
[ 2128.754007] CPU: 0 PID: 9831 Comm: syz-executor.2 Not tainted 5.10.261 #1
[ 2128.754890] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2128.755910] Call Trace:
[ 2128.756256]  dump_stack+0x107/0x167
[ 2128.756744]  should_fail.cold+0x5/0xa
[ 2128.757248]  ? create_object.isra.0+0x3a/0xa30
[ 2128.757851]  should_failslab+0x5/0x20
[ 2128.758347]  kmem_cache_alloc+0x5b/0x310
[ 2128.758875]  create_object.isra.0+0x3a/0xa30
[ 2128.759448]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2128.760114]  kmem_cache_alloc_trace+0x151/0x320
[ 2128.760693]  __io_uring_add_tctx_node+0x15c/0x520
[ 2128.761322]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2128.762022]  ? alloc_fd+0x2e7/0x670
[ 2128.762502]  io_uring_setup+0x1fbb/0x2980
[ 2128.763044]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2128.763705]  ? wait_for_completion_io+0x270/0x270
[ 2128.764311]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2128.765225]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2128.765904]  do_syscall_64+0x33/0x40
[ 2128.766397]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2128.767070] RIP: 0033:0x7f5d125b0b19
[ 2128.767536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2128.769933] RSP: 002b:00007f5d0fb26108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2128.770919] RAX: ffffffffffffffda RBX: 00007f5d126c3f60 RCX: 00007f5d125b0b19
[ 2128.771841] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895
[ 2128.772712] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100
[ 2128.773587] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100
[ 2128.774461] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000
11:40:18 executing program 1:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, 0x0, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:40:18 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

11:40:18 executing program 7:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x48080, 0x0)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x500, 0x0, 0x0, 0x0)

11:40:18 executing program 1:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, 0x0, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

[ 2128.816223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2128.817305] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2128.818314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:40:18 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

11:40:18 executing program 6:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

[ 2128.891468] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
11:40:18 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 39)

11:40:18 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = getpgrp(0x0)
pidfd_open(r1, 0x0)
perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0xfb, 0xe2, 0x3, 0x0, 0x0, 0x5, 0x8049, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7f, 0x1, @perf_bp={&(0x7f0000000040), 0x12}, 0x40208, 0x3, 0x6f, 0x6, 0xfffffffffffffc6c, 0xfffffff7, 0x9, 0x0, 0x9, 0x0, 0x1}, r1, 0x1, 0xffffffffffffffff, 0x0)
mkdirat(r0, &(0x7f0000000240)='./file0\x00', 0x4f)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)
r2 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x8000000)
openat(r2, &(0x7f0000000000)='./file0\x00', 0x10402, 0x32)
r3 = getpgrp(0x0)
pidfd_open(r3, 0x0)
recvmsg$unix(r0, &(0x7f0000000440)={&(0x7f00000001c0), 0x6e, &(0x7f0000000140)=[{&(0x7f00000004c0)=""/93, 0x5d}], 0x1, &(0x7f00000002c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, <r4=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x150}, 0x2)
kcmp$KCMP_EPOLL_TFD(r1, r3, 0x7, r2, &(0x7f0000000480)={r0, r4, 0x7ff})

[ 2128.956254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2128.957170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2128.958125] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:40:18 executing program 1:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, 0x0, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

[ 2129.004108] FAULT_INJECTION: forcing a failure.
[ 2129.004108] name failslab, interval 1, probability 0, space 0, times 0
[ 2129.007398] CPU: 1 PID: 9853 Comm: syz-executor.2 Not tainted 5.10.261 #1
[ 2129.009029] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2129.011023] Call Trace:
[ 2129.011659]  dump_stack+0x107/0x167
[ 2129.012543]  should_fail.cold+0x5/0xa
[ 2129.013455]  ? xas_alloc+0x336/0x440
[ 2129.014353]  should_failslab+0x5/0x20
[ 2129.015256]  kmem_cache_alloc+0x5b/0x310
[ 2129.016226]  ? stack_trace_consume_entry+0x160/0x160
[ 2129.017438]  xas_alloc+0x336/0x440
[ 2129.018302]  xas_create+0x34a/0x10d0
[ 2129.019096]  ? kernel_text_address+0xf2/0x120
[ 2129.020049]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2129.021150]  xas_store+0x8c/0x1c40
[ 2129.021923]  __xa_store+0x164/0x2d0
[ 2129.022695]  ? xa_delete_node+0x280/0x280
[ 2129.023570]  ? trace_hardirqs_on+0x5b/0x180
[ 2129.024491]  xa_store+0x31/0x50
[ 2129.025188]  __io_uring_add_tctx_node+0x1cf/0x520
[ 2129.026219]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2129.027315]  ? alloc_fd+0x2e7/0x670
[ 2129.028088]  io_uring_setup+0x1fbb/0x2980
[ 2129.028969]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2129.030050]  ? wait_for_completion_io+0x270/0x270
[ 2129.031091]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2129.032203]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2129.033299]  do_syscall_64+0x33/0x40
[ 2129.034092]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2129.035174] RIP: 0033:0x7f5d125b0b19
[ 2129.035965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2129.039858] RSP: 002b:00007f5d0fb26108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2129.041484] RAX: ffffffffffffffda RBX: 00007f5d126c3f60 RCX: 00007f5d125b0b19
[ 2129.043017] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895
[ 2129.044536] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100
[ 2129.046058] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100
[ 2129.047584] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000
11:40:18 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2400000010000100000000ec0000009600000900050000000000000005000080480000006fe884b7f11ac8f1810d0dc930b7fbbdfe445812bd4e3ddf303ed73209364a02ef9768d0c54531c0e48e8b51a2f78d54f00d9cdd3a5569eaaaf9d57fd00fe7eff61a89507780518151ccc61d149f11066c74aac60fe6c088582777cddc52bd82c5ef927b1c475f2e339546488ff742ba361f30616ba6000013203bece0c63d63d44a2d8033a9f2319b5d7e75aed01f84fbba37b71774867fc770eb6690f7a3c3e0d63d75b35925d7980ce0513e1600a3b9b8634496ce235be6daabe6f870e770a7124542c63a0febe8281dfa46ca86343801a72702c3c16a"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

11:40:18 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000040)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)

[ 2129.077202] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2129.130937] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2129.131940] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2129.132857] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2141.998245] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2142.028822] FAULT_INJECTION: forcing a failure.
[ 2142.028822] name failslab, interval 1, probability 0, space 0, times 0
[ 2142.030155] CPU: 1 PID: 9877 Comm: syz-executor.2 Not tainted 5.10.261 #1
[ 2142.030932] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2142.031880] Call Trace:
[ 2142.032185]  dump_stack+0x107/0x167
[ 2142.032597]  should_fail.cold+0x5/0xa
[ 2142.033028]  ? create_object.isra.0+0x3a/0xa30
[ 2142.033544]  should_failslab+0x5/0x20
[ 2142.033992]  kmem_cache_alloc+0x5b/0x310
[ 2142.034454]  create_object.isra.0+0x3a/0xa30
[ 2142.034946]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2142.035520]  kmem_cache_alloc+0x159/0x310
[ 2142.035991]  xas_alloc+0x336/0x440
[ 2142.036396]  xas_create+0x34a/0x10d0
[ 2142.036845]  ? kernel_text_address+0xf2/0x120
11:40:31 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 40)

11:40:31 executing program 5:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x300, 0x0, 0x0, 0x0)

11:40:31 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x9)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x4000007ffffffc)
r2 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r5, 0x0, &(0x7f0000000240), 0x800)
syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r2, 0x14c4, 0x600, 0x0, 0x0, 0x0)

11:40:31 executing program 3:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00')
readv(r0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
r1 = syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100))
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000200)=ANY=[@ANYBLOB="01007d000100000018000000", @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00./file0\x00'])
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
r3 = syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100))
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000200)=ANY=[@ANYBLOB="01007d000100000018000000", @ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00./file0\x00'])
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x111, r2, 0x8000000)

11:40:31 executing program 1:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:40:31 executing program 6:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:40:31 executing program 7:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x48080, 0x0)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x600, 0x0, 0x0, 0x0)

11:40:31 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

[ 2142.037360]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2142.038132]  xas_store+0x8c/0x1c40
[ 2142.038543]  __xa_store+0x164/0x2d0
[ 2142.038955]  ? xa_delete_node+0x280/0x280
[ 2142.039428]  ? trace_hardirqs_on+0x5b/0x180
[ 2142.039923]  xa_store+0x31/0x50
[ 2142.040301]  __io_uring_add_tctx_node+0x1cf/0x520
[ 2142.040847]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2142.041437]  ? alloc_fd+0x2e7/0x670
[ 2142.041876]  io_uring_setup+0x1fbb/0x2980
[ 2142.042352]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2142.042929]  ? wait_for_completion_io+0x270/0x270
[ 2142.043486]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2142.044082]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2142.044666]  do_syscall_64+0x33/0x40
[ 2142.045090]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2142.045679] RIP: 0033:0x7f5d125b0b19
[ 2142.046106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2142.048180] RSP: 002b:00007f5d0fb26108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2142.049045] RAX: ffffffffffffffda RBX: 00007f5d126c3f60 RCX: 00007f5d125b0b19
[ 2142.049871] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895
[ 2142.050682] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100
[ 2142.051492] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100
[ 2142.052304] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000
[ 2142.067795] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2142.069494] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2142.072257] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:40:31 executing program 1:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:40:31 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

11:40:31 executing program 6:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

[ 2142.199960] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
11:40:31 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x2002, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)

[ 2142.298776] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2142.300373] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2142.305199] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:40:31 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 41)

11:40:31 executing program 1:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

[ 2142.432294] FAULT_INJECTION: forcing a failure.
[ 2142.432294] name failslab, interval 1, probability 0, space 0, times 0
[ 2142.434828] CPU: 1 PID: 9898 Comm: syz-executor.2 Not tainted 5.10.261 #1
[ 2142.436263] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2142.438002] Call Trace:
[ 2142.438566]  dump_stack+0x107/0x167
[ 2142.439334]  should_fail.cold+0x5/0xa
[ 2142.440134]  ? xas_alloc+0x336/0x440
[ 2142.440918]  should_failslab+0x5/0x20
[ 2142.441717]  kmem_cache_alloc+0x5b/0x310
[ 2142.442570]  xas_alloc+0x336/0x440
[ 2142.443305]  xas_create+0x34a/0x10d0
[ 2142.444106]  ? kernel_text_address+0xf2/0x120
[ 2142.445069]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2142.446178]  xas_store+0x8c/0x1c40
[ 2142.446949]  __xa_store+0x164/0x2d0
[ 2142.447714]  ? xa_delete_node+0x280/0x280
[ 2142.448581]  ? trace_hardirqs_on+0x5b/0x180
[ 2142.449500]  xa_store+0x31/0x50
[ 2142.450203]  __io_uring_add_tctx_node+0x1cf/0x520
[ 2142.451208]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2142.452302]  ? alloc_fd+0x2e7/0x670
[ 2142.453077]  io_uring_setup+0x1fbb/0x2980
[ 2142.453979]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2142.455044]  ? wait_for_completion_io+0x270/0x270
[ 2142.456067]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2142.457162]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2142.458246]  do_syscall_64+0x33/0x40
[ 2142.459025]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2142.460093] RIP: 0033:0x7f5d125b0b19
[ 2142.460872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2142.464673] RSP: 002b:00007f5d0fb26108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2142.466269] RAX: ffffffffffffffda RBX: 00007f5d126c3f60 RCX: 00007f5d125b0b19
[ 2142.467759] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895
[ 2142.469237] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100
[ 2142.470736] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100
[ 2142.472216] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000
[ 2159.073917] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
11:40:48 executing program 6:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:40:48 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = syz_mount_image$nfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2e4, 0x4, &(0x7f00000003c0)=[{&(0x7f00000000c0)="d279d1487d975204919be122e9818a000babecdf78141fbf54bf4c82", 0x1c, 0x80000000}, {&(0x7f0000000100)="a9c42f3b0279b7be55e522681bc88c3193e4fef10f2d19c6ebcb241d4fac70be6fd4c9dc6d7f11d8a513c5b7079140c0008caea498efa087b2c75795ab81ada52b23895b78161c56af2fd54e170cb1c1376bff0ce9e41f03d4504a76d8ad8767e07e227de51e580722be285143a35784481d8eed17d02581d4c5c51e79e7585daba5fd39c4defd2cbe3e429f61ea9e4740abaf3c763579728f731ecf3815f14865e52be65e7a8b029af9", 0xaa, 0x1a18}, {&(0x7f00000001c0)="99d8855418c3beb15f0e71caa40cf3138107aadbb310bb19e169f15b60f0bf56eaf73950f1de9cb6944d2918ae41052bc70a90e414ee051955bde4eda64cfa424be50fe1181a735d4267b5f32802f5c43eefabb4f5fa9197082627ff8ca65c40ff8c21ac81b0b41866cc4a90854e7c298e88b95f89f8151efdaf2cc015257bef5674771fc3c03b8941a4b8631b99db46dbeaa7f85d0c6cf12c3171445e6d19b3f9fc288ce3ba472cb52e4f0e7998d44d5dbb5e4880641efc9d640a3eec3624a5ff436ebfe3f78ff697ee982e108dd2daee2147942c5aa884e86a8c0d390fc600a1e73aace245b2f83fa156c5", 0xec, 0xffffffff}, {&(0x7f00000002c0)="61b44f2820720a3a5ba147b573a1ba14aa2f96763221e03f2ecaf70c1607300b49e31e4e2c26a0f1cf16400975ab271e203aa14105a583e0338476d3e0ec5ae2e9fde2607c088812ea4217e4e3622e92e32b6a4d630d468889a353a25e3ec65a942adbb6007695bba8868d1af85260ff0cfee729c2830c1799af99c13670dc4e32a81b0232662fabb72726241ed3fa7c5c72e6667a467ec5a6c05d1240f60120cf6b2868b9b8d822705927c8ec1e489239c5a08ad6db35739a70936bb7510eaf4cd510b8e6c2340d6ba8016624a6296d9eb4cb6d5cd3de07c9a3a3b7d8e881859bfe203657ef24dcb426c27a75d40fecc1062a328e95af", 0xf7, 0x10000}], 0x103000, &(0x7f0000000440)={[{'$-&\xf1:'}, {'+'}, {'.!'}, {'\'\\]-'}, {'\\)'}, {'\x81[(^/'}, {'^'}, {'/@'}, {'>$'}], [{@hash}]})
openat(r1, &(0x7f0000000480)='./file0\x00', 0x442101, 0x1)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x8000000)
mkdirat(r2, &(0x7f00000014c0)='./file0\x00', 0x8)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00')
readv(r3, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
r4 = syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100))
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000200)=ANY=[@ANYBLOB="01749e6128d49675ab100000", @ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00./file0\x00'])
openat(r3, &(0x7f00000004c0)='./file0\x00', 0x100, 0x22)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)

11:40:48 executing program 5:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x3e8, 0x0, 0x0, 0x0)

11:40:48 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 42)

11:40:48 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

11:40:48 executing program 1:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:40:48 executing program 7:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x48080, 0x0)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x700, 0x0, 0x0, 0x0)

11:40:48 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x9)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x4000007ffffffc)
r2 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r5, 0x0, &(0x7f0000000240), 0x800)
syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r2, 0x14c4, 0x700, 0x0, 0x0, 0x0)

[ 2159.114219] FAULT_INJECTION: forcing a failure.
[ 2159.114219] name failslab, interval 1, probability 0, space 0, times 0
[ 2159.116745] CPU: 1 PID: 9921 Comm: syz-executor.2 Not tainted 5.10.261 #1
[ 2159.118261] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2159.120073] Call Trace:
[ 2159.120652]  dump_stack+0x107/0x167
[ 2159.121448]  should_fail.cold+0x5/0xa
[ 2159.122293]  ? create_object.isra.0+0x3a/0xa30
[ 2159.123294]  should_failslab+0x5/0x20
[ 2159.124119]  kmem_cache_alloc+0x5b/0x310
[ 2159.125007]  ? mark_held_locks+0x9e/0xe0
[ 2159.125913]  create_object.isra.0+0x3a/0xa30
[ 2159.126870]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2159.127977]  kmem_cache_alloc+0x159/0x310
[ 2159.128889]  xas_alloc+0x336/0x440
[ 2159.129668]  xas_create+0x34a/0x10d0
[ 2159.130498]  ? kernel_text_address+0xf2/0x120
[ 2159.131475]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2159.132623]  xas_store+0x8c/0x1c40
[ 2159.133411]  __xa_store+0x164/0x2d0
[ 2159.134222]  ? xa_delete_node+0x280/0x280
[ 2159.135133]  ? trace_hardirqs_on+0x5b/0x180
[ 2159.136079]  xa_store+0x31/0x50
[ 2159.136798]  __io_uring_add_tctx_node+0x1cf/0x520
[ 2159.137855]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2159.138999]  ? alloc_fd+0x2e7/0x670
[ 2159.139854]  io_uring_setup+0x1fbb/0x2980
[ 2159.139898]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2159.139914]  ? wait_for_completion_io+0x270/0x270
[ 2159.139954]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2159.139974]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2159.139997]  do_syscall_64+0x33/0x40
[ 2159.140018]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2159.140031] RIP: 0033:0x7f5d125b0b19
[ 2159.140049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
11:40:48 executing program 1:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

[ 2159.140058] RSP: 002b:00007f5d0fb26108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2159.140077] RAX: ffffffffffffffda RBX: 00007f5d126c3f60 RCX: 00007f5d125b0b19
[ 2159.140088] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895
[ 2159.140097] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100
[ 2159.140107] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100
[ 2159.140117] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000
[ 2159.146811] loop3: detected capacity change from 0 to 135266304
[ 2159.206346] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2159.206361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
11:40:48 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 43)

[ 2159.206626] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2159.360885] loop3: detected capacity change from 0 to 135266304
11:40:48 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2400000010000100000000ec0000009600000900050000000000000005000080480000006fe884b7f11ac8f1810d0dc930b7fbbdfe445812bd4e3ddf303ed73209364a02ef9768d0c54531c0e48e8b51a2f78d54f00d9cdd3a5569eaaaf9d57fd00fe7eff61a89507780518151ccc61d149f11066c74aac60fe6c088582777cddc52bd82c5ef927b1c475f2e339546488ff742ba361f30616ba6000013203bece0c63d63d44a2d8033a9f2319b5d7e75aed01f84fbba37b71774867fc770eb6690f7a3c3e0d63d75b35925d7980ce0513e1600a3b9b8634496ce235be6daabe6f870e770a7124542c63a0febe8281dfa46ca86343801a72702c3c16a"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x0, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

11:40:49 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
memfd_create(&(0x7f0000000040)='/}/.}\x00', 0x4)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x4010, r0, 0x8000000)

[ 2159.493680] FAULT_INJECTION: forcing a failure.
[ 2159.493680] name failslab, interval 1, probability 0, space 0, times 0
[ 2159.496246] CPU: 1 PID: 9940 Comm: syz-executor.2 Not tainted 5.10.261 #1
[ 2159.497749] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2159.499571] Call Trace:
[ 2159.500153]  dump_stack+0x107/0x167
[ 2159.500951]  should_fail.cold+0x5/0xa
[ 2159.501786]  ? xas_alloc+0x336/0x440
[ 2159.502593]  should_failslab+0x5/0x20
[ 2159.503411]  kmem_cache_alloc+0x5b/0x310
[ 2159.504295]  xas_alloc+0x336/0x440
[ 2159.505049]  xas_create+0x34a/0x10d0
[ 2159.505869]  ? kernel_text_address+0xf2/0x120
[ 2159.506828]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2159.507923]  xas_store+0x8c/0x1c40
[ 2159.508679]  __xa_store+0x164/0x2d0
[ 2159.509446]  ? xa_delete_node+0x280/0x280
[ 2159.510327]  ? trace_hardirqs_on+0x5b/0x180
[ 2159.511236]  xa_store+0x31/0x50
[ 2159.511926]  __io_uring_add_tctx_node+0x1cf/0x520
[ 2159.512928]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2159.514034]  ? alloc_fd+0x2e7/0x670
[ 2159.514821]  io_uring_setup+0x1fbb/0x2980
[ 2159.515701]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2159.516771]  ? wait_for_completion_io+0x270/0x270
[ 2159.517830]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2159.518953]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2159.520057]  do_syscall_64+0x33/0x40
[ 2159.520855]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2159.521948] RIP: 0033:0x7f5d125b0b19
[ 2159.522737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2159.526664] RSP: 002b:00007f5d0fb05108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2159.528282] RAX: ffffffffffffffda RBX: 00007f5d126c4020 RCX: 00007f5d125b0b19
[ 2159.529783] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895
[ 2159.531300] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100
[ 2159.532832] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100
[ 2159.534358] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000
[ 2159.541240] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
11:40:49 executing program 1:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x0, 0x0}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

[ 2159.625878] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2159.627528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2159.629241] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:40:49 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmmsg$inet(r0, &(0x7f0000002f40)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001280)=[@ip_retopts={{0x18, 0x0, 0x7, {[@timestamp_addr={0x44, 0x4, 0x54}, @timestamp={0x44, 0x4}]}}}], 0x18}}], 0x1, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_STATX={0x15, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x80, 0x400, 0x1}, 0x9fffff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000002c0)={'team0\x00', <r2=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'syztnl0\x00', r2, 0x4, 0x7f, 0x3, 0x6, 0x4, @private2, @mcast1, 0x10, 0x8000, 0xff, 0x81}})
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x8000000)
syz_io_uring_setup(0x1291, &(0x7f0000000080)={0x0, 0x5dcd, 0x20, 0x2, 0x330}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000140))

11:40:49 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 44)

11:40:49 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

[ 2159.855239] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2159.860832] FAULT_INJECTION: forcing a failure.
[ 2159.860832] name failslab, interval 1, probability 0, space 0, times 0
[ 2159.863368] CPU: 0 PID: 9951 Comm: syz-executor.2 Not tainted 5.10.261 #1
[ 2159.864882] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2159.866714] Call Trace:
[ 2159.867307]  dump_stack+0x107/0x167
[ 2159.868106]  should_fail.cold+0x5/0xa
[ 2159.868957]  ? create_object.isra.0+0x3a/0xa30
[ 2159.869974]  should_failslab+0x5/0x20
[ 2159.870834]  kmem_cache_alloc+0x5b/0x310
[ 2159.871765]  ? mark_held_locks+0x9e/0xe0
[ 2159.872673]  create_object.isra.0+0x3a/0xa30
[ 2159.873661]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2159.874822]  kmem_cache_alloc+0x159/0x310
[ 2159.875766]  xas_alloc+0x336/0x440
[ 2159.876665]  xas_create+0x34a/0x10d0
[ 2159.877553]  ? kernel_text_address+0xf2/0x120
[ 2159.878569]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2159.879745]  xas_store+0x8c/0x1c40
[ 2159.880556]  __xa_store+0x164/0x2d0
[ 2159.881372]  ? xa_delete_node+0x280/0x280
[ 2159.882322]  ? trace_hardirqs_on+0x5b/0x180
[ 2159.883299]  xa_store+0x31/0x50
[ 2159.884031]  __io_uring_add_tctx_node+0x1cf/0x520
[ 2159.885104]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2159.886288]  ? alloc_fd+0x2e7/0x670
[ 2159.887102]  io_uring_setup+0x1fbb/0x2980
[ 2159.888037]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2159.889193]  ? wait_for_completion_io+0x270/0x270
[ 2159.890313]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2159.891498]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2159.892674]  do_syscall_64+0x33/0x40
[ 2159.893515]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2159.894708] RIP: 0033:0x7f5d125b0b19
[ 2159.895555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2159.899750] RSP: 002b:00007f5d0fb26108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2159.901488] RAX: ffffffffffffffda RBX: 00007f5d126c3f60 RCX: 00007f5d125b0b19
[ 2159.903090] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895
[ 2159.904668] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100
[ 2159.906253] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100
[ 2159.907828] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000
[ 2159.973823] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2159.975354] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2159.976957] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:41:05 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 45)

11:41:05 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x20000, 0x0)
ftruncate(r0, 0xaf)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)
r2 = getpgrp(0x0)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmmsg$inet(r3, &(0x7f0000002f40)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001280)=[@ip_retopts={{0x18, 0x0, 0x7, {[@timestamp_addr={0x44, 0x4, 0x54}, @timestamp={0x44, 0x4}]}}}], 0x18}}], 0x1, 0x0)
ioctl$F2FS_IOC_GET_FEATURES(r3, 0x8004f50c, &(0x7f00000000c0))
r4 = getpid()
kcmp$KCMP_EPOLL_TFD(r4, r2, 0x7, 0xffffffffffffffff, &(0x7f0000000100)={r0, r1, 0xc4d})
pidfd_open(r2, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x6, 0x0, 0xb5, 0x81, 0x0, 0x1, 0x0, 0x4, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x243, 0x4, @perf_config_ext={0x62, 0x9}, 0x1, 0x81, 0x5fb, 0x5, 0x10000, 0x5, 0xfc01, 0x0, 0x8, 0x0, 0x7}, r2, 0xd, 0xffffffffffffffff, 0x0)

11:41:05 executing program 5:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x500, 0x0, 0x0, 0x0)

11:41:05 executing program 1:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:41:05 executing program 6:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:41:05 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

11:41:05 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x9)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x4000007ffffffc)
r2 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r5, 0x0, &(0x7f0000000240), 0x800)
syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r2, 0x14c4, 0xe00, 0x0, 0x0, 0x0)

11:41:05 executing program 7:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x48080, 0x0)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0xe00, 0x0, 0x0, 0x0)

[ 2176.231968] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
11:41:05 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x100, 0xd8)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000440)={<r1=>0x0}, &(0x7f0000000480)=0xc)
perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x6, 0x3, 0xa4, 0x80, 0x0, 0x9, 0xafa09, 0xb, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x800, 0x100000001}, 0x18108, 0x2, 0x7fff, 0x6, 0x81, 0x6, 0x401, 0x0, 0x0, 0x0, 0x9}, r1, 0x4, 0xffffffffffffffff, 0x2)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f00000004c0)={0x0, 0xffffffffffffffff, 0x200, 0x200, 0x3, 0xfff})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmmsg$inet(r7, &(0x7f0000002f40)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001280)=[@ip_retopts={{0x18, 0x0, 0x7, {[@timestamp_addr={0x44, 0x4, 0x54}, @timestamp={0x44, 0x4}]}}}], 0x18}}], 0x1, 0x0)
close_range(r7, r4, 0x0)
sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1802408}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xc0, r5, 0xb8bccc44f2d86318, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x1c}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3b2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}], @NL80211_ATTR_FRAME={0x68, 0x33, @probe_request={@with_ht={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x8}, @device_a, @broadcast, @from_mac=@broadcast, {0x8, 0x5}}, @ver_80211n={0x0, 0x1, 0x2, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, @void, @void, @val={0x3, 0x1, 0x7c}, @void, @val={0x72, 0x6}, [{0xdd, 0x3b, "df912d822ac175cedd5bd03aa77df51329d3e579b7d0acabd1b1dc7acf0249fee0e5eaad47c607a28837656ec196f77b7696493bd520c25cb000e9"}]}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x27a}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x4, 0x4, 0xffff]}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xa62}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4001)
r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r2)
r9 = fsmount(r0, 0x0, 0x9)
sendmsg$IPVS_CMD_DEL_SERVICE(r9, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r8, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x841)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)

[ 2176.263608] FAULT_INJECTION: forcing a failure.
[ 2176.263608] name failslab, interval 1, probability 0, space 0, times 0
[ 2176.265873] CPU: 0 PID: 9970 Comm: syz-executor.2 Not tainted 5.10.261 #1
[ 2176.267107] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2176.268581] Call Trace:
[ 2176.269046]  dump_stack+0x107/0x167
[ 2176.269700]  should_fail.cold+0x5/0xa
[ 2176.270387]  ? xas_alloc+0x336/0x440
[ 2176.271021]  should_failslab+0x5/0x20
[ 2176.271677]  kmem_cache_alloc+0x5b/0x310
[ 2176.272539]  xas_alloc+0x336/0x440
[ 2176.273283]  xas_create+0x34a/0x10d0
[ 2176.273928]  ? kernel_text_address+0xf2/0x120
[ 2176.274730]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2176.275764]  xas_store+0x8c/0x1c40
[ 2176.276538]  __xa_store+0x164/0x2d0
[ 2176.277330]  ? xa_delete_node+0x280/0x280
[ 2176.278252]  ? trace_hardirqs_on+0x5b/0x180
[ 2176.279196]  xa_store+0x31/0x50
[ 2176.279917]  __io_uring_add_tctx_node+0x1cf/0x520
[ 2176.280920]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2176.282041]  ? alloc_fd+0x2e7/0x670
[ 2176.282852]  io_uring_setup+0x1fbb/0x2980
[ 2176.283772]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2176.284868]  ? wait_for_completion_io+0x270/0x270
[ 2176.285976]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2176.286002]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2176.286031]  do_syscall_64+0x33/0x40
[ 2176.286057]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2176.286070] RIP: 0033:0x7f5d125b0b19
[ 2176.286089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2176.286101] RSP: 002b:00007f5d0fb26108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2176.286125] RAX: ffffffffffffffda RBX: 00007f5d126c3f60 RCX: 00007f5d125b0b19
[ 2176.286139] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895
[ 2176.286153] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100
11:41:05 executing program 1:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

[ 2176.286166] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100
[ 2176.286180] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000
[ 2176.365959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2176.365976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2176.366292] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:41:06 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 46)

11:41:06 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0x0, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

11:41:06 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00')
readv(r1, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
r2 = syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100))
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000200)=ANY=[@ANYBLOB="01007d000100000018000000", @ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00./file0\x00'])
utimensat(r1, &(0x7f0000000040)='./file0\x00', 0x0, 0x100)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)

[ 2176.619988] FAULT_INJECTION: forcing a failure.
[ 2176.619988] name failslab, interval 1, probability 0, space 0, times 0
[ 2176.622654] CPU: 0 PID: 9993 Comm: syz-executor.2 Not tainted 5.10.261 #1
[ 2176.624156] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2176.625984] Call Trace:
[ 2176.626569]  dump_stack+0x107/0x167
[ 2176.627371]  should_fail.cold+0x5/0xa
[ 2176.628205]  ? create_object.isra.0+0x3a/0xa30
[ 2176.629204]  should_failslab+0x5/0x20
[ 2176.630046]  kmem_cache_alloc+0x5b/0x310
[ 2176.630934]  ? mark_held_locks+0x9e/0xe0
[ 2176.631820]  create_object.isra.0+0x3a/0xa30
[ 2176.632776]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2176.633883]  kmem_cache_alloc+0x159/0x310
[ 2176.634808]  xas_alloc+0x336/0x440
[ 2176.635589]  xas_create+0x34a/0x10d0
[ 2176.636414]  ? kernel_text_address+0xf2/0x120
[ 2176.637399]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2176.638577]  xas_store+0x8c/0x1c40
[ 2176.639369]  __xa_store+0x164/0x2d0
[ 2176.640187]  ? xa_delete_node+0x280/0x280
[ 2176.641120]  ? trace_hardirqs_on+0x5b/0x180
[ 2176.642087]  xa_store+0x31/0x50
[ 2176.642814]  __io_uring_add_tctx_node+0x1cf/0x520
[ 2176.643887]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2176.645087]  ? alloc_fd+0x2e7/0x670
[ 2176.645933]  io_uring_setup+0x1fbb/0x2980
[ 2176.646885]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2176.648025]  ? wait_for_completion_io+0x270/0x270
[ 2176.649126]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2176.650303]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2176.651456]  do_syscall_64+0x33/0x40
[ 2176.652291]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2176.653447] RIP: 0033:0x7f5d125b0b19
11:41:06 executing program 1:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

[ 2176.654286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2176.658565] RSP: 002b:00007f5d0fb05108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2176.660277] RAX: ffffffffffffffda RBX: 00007f5d126c4020 RCX: 00007f5d125b0b19
[ 2176.661877] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895
[ 2176.663480] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100
[ 2176.665071] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100
[ 2176.666670] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000
[ 2176.789381] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
11:41:06 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 47)

[ 2176.915722] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2176.917344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2176.920895] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2176.945509] FAULT_INJECTION: forcing a failure.
[ 2176.945509] name failslab, interval 1, probability 0, space 0, times 0
[ 2176.947745] CPU: 1 PID: 10004 Comm: syz-executor.2 Not tainted 5.10.261 #1
[ 2176.949038] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2176.950604] Call Trace:
[ 2176.951111]  dump_stack+0x107/0x167
[ 2176.951806]  should_fail.cold+0x5/0xa
[ 2176.952534]  ? xas_alloc+0x336/0x440
[ 2176.953240]  should_failslab+0x5/0x20
[ 2176.953972]  kmem_cache_alloc+0x5b/0x310
[ 2176.954754]  xas_alloc+0x336/0x440
[ 2176.955417]  xas_create+0x34a/0x10d0
[ 2176.956119]  ? kernel_text_address+0xf2/0x120
[ 2176.956969]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2176.957937]  xas_store+0x8c/0x1c40
[ 2176.958628]  __xa_store+0x164/0x2d0
[ 2176.959316]  ? xa_delete_node+0x280/0x280
[ 2176.960103]  ? trace_hardirqs_on+0x5b/0x180
[ 2176.960907]  xa_store+0x31/0x50
[ 2176.961521]  __io_uring_add_tctx_node+0x1cf/0x520
[ 2176.962424]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2176.963410]  ? alloc_fd+0x2e7/0x670
[ 2176.964098]  io_uring_setup+0x1fbb/0x2980
[ 2176.964898]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2176.965855]  ? wait_for_completion_io+0x270/0x270
[ 2176.966782]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2176.967776]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2176.968748]  do_syscall_64+0x33/0x40
[ 2176.969446]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2176.970423] RIP: 0033:0x7f5d125b0b19
[ 2176.971110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2176.974476] RSP: 002b:00007f5d0fb26108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2176.975833] RAX: ffffffffffffffda RBX: 00007f5d126c3f60 RCX: 00007f5d125b0b19
[ 2176.977155] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895
[ 2176.978461] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100
[ 2176.979773] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100
[ 2176.981043] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000
11:41:19 executing program 5:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x600, 0x0, 0x0, 0x0)

11:41:19 executing program 1:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:41:19 executing program 7:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x48080, 0x0)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x1802, 0x0, 0x0, 0x0)

11:41:19 executing program 6:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:41:19 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmmsg$inet(r1, &(0x7f0000002f40)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001280)=[@ip_retopts={{0x18, 0x0, 0x7, {[@timestamp_addr={0x44, 0x4, 0x54}, @timestamp={0x44, 0x4}]}}}], 0x18}}], 0x1, 0x0)
copy_file_range(r0, &(0x7f0000000040)=0x2, r1, &(0x7f0000000080), 0x8, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)

11:41:19 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2400000010000100000000ec0000009600000900050000000000000005000080480000006fe884b7f11ac8f1810d0dc930b7fbbdfe445812bd4e3ddf303ed73209364a02ef9768d0c54531c0e48e8b51a2f78d54f00d9cdd3a5569eaaaf9d57fd00fe7eff61a89507780518151ccc61d149f11066c74aac60fe6c088582777cddc52bd82c5ef927b1c475f2e339546488ff742ba361f30616ba6000013203bece0c63d63d44a2d8033a9f2319b5d7e75aed01f84fbba37b71774867fc770eb6690f7a3c3e0d63d75b35925d7980ce0513e1600a3b9b8634496ce235be6daabe6f870e770a7124542c63a0febe8281dfa46ca86343801a72702c3c16a"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

11:41:19 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 48)

11:41:19 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x9)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x4000007ffffffc)
r2 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r5, 0x0, &(0x7f0000000240), 0x800)
syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r2, 0x14c4, 0x1802, 0x0, 0x0, 0x0)

[ 2189.542286] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2189.607395] FAULT_INJECTION: forcing a failure.
[ 2189.607395] name failslab, interval 1, probability 0, space 0, times 0
[ 2189.610029] CPU: 1 PID: 10028 Comm: syz-executor.2 Not tainted 5.10.261 #1
[ 2189.611601] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2189.613459] Call Trace:
[ 2189.614073]  dump_stack+0x107/0x167
[ 2189.614899]  should_fail.cold+0x5/0xa
[ 2189.615761]  ? create_object.isra.0+0x3a/0xa30
[ 2189.616787]  should_failslab+0x5/0x20
[ 2189.617647]  kmem_cache_alloc+0x5b/0x310
[ 2189.618570]  ? mark_held_locks+0x9e/0xe0
[ 2189.619484]  create_object.isra.0+0x3a/0xa30
[ 2189.620473]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2189.621618]  kmem_cache_alloc+0x159/0x310
[ 2189.622575]  xas_alloc+0x336/0x440
[ 2189.623376]  xas_create+0x34a/0x10d0
[ 2189.624228]  ? kernel_text_address+0xf2/0x120
[ 2189.625241]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2189.626430]  xas_store+0x8c/0x1c40
[ 2189.627245]  __xa_store+0x164/0x2d0
[ 2189.628062]  ? xa_delete_node+0x280/0x280
[ 2189.629005]  ? trace_hardirqs_on+0x5b/0x180
[ 2189.629986]  xa_store+0x31/0x50
[ 2189.630749]  __io_uring_add_tctx_node+0x1cf/0x520
[ 2189.631928]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2189.633103]  ? alloc_fd+0x2e7/0x670
[ 2189.633930]  io_uring_setup+0x1fbb/0x2980
[ 2189.634881]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2189.636019]  ? wait_for_completion_io+0x270/0x270
[ 2189.637118]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2189.638297]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2189.639451]  do_syscall_64+0x33/0x40
[ 2189.640283]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2189.641439] RIP: 0033:0x7f5d125b0b19
[ 2189.642282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2189.646412] RSP: 002b:00007f5d0fb26108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2189.648110] RAX: ffffffffffffffda RBX: 00007f5d126c3f60 RCX: 00007f5d125b0b19
[ 2189.649703] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895
[ 2189.651307] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100
[ 2189.652899] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100
[ 2189.654493] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000
[ 2189.671442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2189.673114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2189.675433] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:41:19 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x90)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x480, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={<r2=>r0, 0x7f, 0x100})
r3 = syz_open_dev$mouse(&(0x7f0000000100), 0x5, 0x40)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmmsg$inet(r4, &(0x7f0000002f40)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001280)=[@ip_retopts={{0x18, 0x0, 0x7, {[@timestamp_addr={0x44, 0x4, 0x54}, @timestamp={0x44, 0x4}]}}}], 0x18}}], 0x1, 0x0)
sendfile(r0, r4, 0x0, 0x7)
recvmmsg$unix(r0, &(0x7f0000005340)=[{{&(0x7f0000000180), 0x6e, &(0x7f0000001580)=[{&(0x7f0000000200)=""/104, 0x68}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/41, 0x29}, {&(0x7f00000012c0)=""/58, 0x3a}, {&(0x7f0000001300)=""/166, 0xa6}, {&(0x7f00000013c0)=""/193, 0xc1}, {&(0x7f00000014c0)}, {&(0x7f0000001500)=""/126, 0x7e}], 0x8, &(0x7f0000001600)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000001640)=@abs, 0x6e, &(0x7f0000002700)=[{&(0x7f00000016c0)}, {&(0x7f0000001700)=""/4096, 0x1000}], 0x2, &(0x7f0000002740)=[@rights={{0x20, 0x1, 0x1, [<r5=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, <r6=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r7=>0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb8}}, {{&(0x7f0000002800)=@abs, 0x6e, &(0x7f0000003c40)=[{&(0x7f0000002880)=""/217, 0xd9}, {&(0x7f0000002980)=""/142, 0x8e}, {&(0x7f0000002a40)=""/4096, 0x1000}, {&(0x7f0000003a40)=""/42, 0x2a}, {&(0x7f0000003a80)=""/86, 0x56}, {&(0x7f0000003b00)=""/143, 0x8f}, {&(0x7f0000003bc0)=""/85, 0x55}], 0x7, &(0x7f0000005480)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00625e60031570300000001c0000000000000001f00c601102c055084e406ec3b0265eebbe1a25c71f1ac30fdce526afd9d395b9ed7b17", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x90}}, {{&(0x7f0000003d80)=@abs, 0x6e, &(0x7f0000005240)=[{&(0x7f0000003e00)=""/4096, 0x1000}, {&(0x7f0000004e00)=""/109, 0x6d}, {&(0x7f0000004e80)=""/248, 0xf8}, {&(0x7f0000004f80)=""/248, 0xf8}, {&(0x7f0000005080)=""/46, 0x2e}, {&(0x7f00000050c0)=""/108, 0x6c}, {&(0x7f0000005140)=""/207, 0xcf}], 0x7, &(0x7f00000052c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x70}}], 0x4, 0x20, &(0x7f0000005440)={0x77359400})
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000140)=[r0, r0, 0xffffffffffffffff, r0, r0, r1, r2, r0, r6, r3], 0x40000116)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_BALANCE_CTL(r2, 0x40049421, 0x1)
io_uring_enter(r0, 0x6031, 0xf9e4, 0x2, &(0x7f0000000040)={[0x2]}, 0x8)
r8 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r8, 0x8000000)
r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmmsg$inet(r9, &(0x7f0000002f40)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001280)=[@ip_retopts={{0x18, 0x0, 0x7, {[@timestamp_addr={0x44, 0x4, 0x54}, @timestamp={0x44, 0x4}]}}}], 0x18}}], 0x1, 0x0)
io_uring_register$IORING_REGISTER_FILES_UPDATE(r8, 0x6, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000014c0)=[r9, r5, r7, r2, r2]}, 0x5)

11:41:19 executing program 1:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:41:19 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

11:41:19 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x400, 0x2000, 0x1}, 0xdd)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)

[ 2189.812936] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
11:41:19 executing program 1:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:41:19 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 49)

11:41:19 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00')
readv(r1, &(0x7f0000000200)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
syz_io_uring_setup(0x56f4, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100))
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000080)=ANY=[])
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x7)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmmsg$inet(r2, &(0x7f0000002f40)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001280)=[@ip_retopts={{0x18, 0x0, 0x7, {[@timestamp_addr={0x44, 0x4, 0x54}, @timestamp={0x44, 0x4}]}}}], 0x18}}], 0x1, 0x0)
pread64(r2, &(0x7f00000000c0)=""/12, 0xc, 0x7)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000080)=0x2, 0x4, 0x4)
r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000001c0)={'veth1_to_hsr\x00', &(0x7f00000002c0)=@ethtool_regs={0x4, 0x9, 0xe8, "f1fa1820c03f4028c201acef3c8bd4c826456aac91651a9b07f63d7016a69cdc674e32866fde0e9568cd49acbe3a74362a50380f4fd27d45670c65592111e66e4d461c0410fa7591e373a4996554e23c6d3d2715fa669926c0653d30296b9f5a171873286e2db978958942763fff1ca98c1a8e50c8aaef00852bf9d633d0ae42d6849ef5a5c0d01da4204a7a07e7662677069a0b0b323557c3d24e9a6f236bcdb40f83564a3db7a0d7297d6ee476b4af508020b50ba6eaaf26df185ee1ad636b18135623667265863db283721a405a6ada1dd5b0114291c47930e6581f40732ce8661d28fb4609dc"}})

[ 2189.902300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2189.903222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2189.904113] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:41:19 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x0, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

[ 2190.012238] FAULT_INJECTION: forcing a failure.
[ 2190.012238] name failslab, interval 1, probability 0, space 0, times 0
[ 2190.014970] CPU: 1 PID: 10050 Comm: syz-executor.2 Not tainted 5.10.261 #1
[ 2190.016527] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2190.018405] Call Trace:
[ 2190.019010]  dump_stack+0x107/0x167
[ 2190.019830]  should_fail.cold+0x5/0xa
[ 2190.020685]  ? xas_alloc+0x336/0x440
[ 2190.021516]  should_failslab+0x5/0x20
[ 2190.022374]  kmem_cache_alloc+0x5b/0x310
[ 2190.023287]  xas_alloc+0x336/0x440
[ 2190.024092]  xas_create+0x34a/0x10d0
[ 2190.024941]  ? kernel_text_address+0xf2/0x120
[ 2190.025956]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2190.027137]  xas_store+0x8c/0x1c40
[ 2190.027947]  __xa_store+0x164/0x2d0
[ 2190.028767]  ? xa_delete_node+0x280/0x280
[ 2190.029699]  ? trace_hardirqs_on+0x5b/0x180
[ 2190.030676]  xa_store+0x31/0x50
[ 2190.031417]  __io_uring_add_tctx_node+0x1cf/0x520
[ 2190.032500]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2190.033674]  ? alloc_fd+0x2e7/0x670
[ 2190.034522]  io_uring_setup+0x1fbb/0x2980
[ 2190.035471]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2190.036612]  ? wait_for_completion_io+0x270/0x270
[ 2190.037728]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2190.038927]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2190.040101]  do_syscall_64+0x33/0x40
[ 2190.040947]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2190.042118] RIP: 0033:0x7f5d125b0b19
[ 2190.042959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2190.047141] RSP: 002b:00007f5d0fb26108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2190.048855] RAX: ffffffffffffffda RBX: 00007f5d126c3f60 RCX: 00007f5d125b0b19
[ 2190.050477] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895
[ 2190.052100] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100
[ 2190.053730] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100
[ 2190.055359] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000
[ 2190.118258] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2190.167370] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2190.168381] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2190.169314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:41:35 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x9)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x4000007ffffffc)
r2 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r5, 0x0, &(0x7f0000000240), 0x800)
syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r2, 0x14c4, 0x2000, 0x0, 0x0, 0x0)

11:41:35 executing program 5:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x700, 0x0, 0x0, 0x0)

11:41:35 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
flistxattr(r0, &(0x7f0000000040)=""/30, 0x1e)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmmsg$inet(r1, &(0x7f0000002f40)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001280)=[@ip_retopts={{0x18, 0x0, 0x7, {[@timestamp_addr={0x44, 0x4, 0x54}, @timestamp={0x44, 0x4}]}}}], 0x18}}], 0x1, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0xcef3d24cef3acd66, r1)

11:41:35 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 50)

11:41:35 executing program 1:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:41:35 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x0, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

11:41:35 executing program 7:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x48080, 0x0)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x2000, 0x0, 0x0, 0x0)

11:41:35 executing program 6:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

[ 2206.119389] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2206.129839] FAULT_INJECTION: forcing a failure.
[ 2206.129839] name failslab, interval 1, probability 0, space 0, times 0
[ 2206.132483] CPU: 1 PID: 10078 Comm: syz-executor.2 Not tainted 5.10.261 #1
[ 2206.134062] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2206.135963] Call Trace:
[ 2206.136565]  dump_stack+0x107/0x167
[ 2206.137363]  should_fail.cold+0x5/0xa
[ 2206.138236]  ? create_object.isra.0+0x3a/0xa30
[ 2206.139292]  should_failslab+0x5/0x20
[ 2206.140173]  kmem_cache_alloc+0x5b/0x310
[ 2206.141079]  ? mark_held_locks+0x9e/0xe0
[ 2206.141981]  create_object.isra.0+0x3a/0xa30
[ 2206.143002]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2206.144186]  kmem_cache_alloc+0x159/0x310
[ 2206.145119]  xas_alloc+0x336/0x440
[ 2206.145910]  xas_create+0x34a/0x10d0
[ 2206.146793]  ? kernel_text_address+0xf2/0x120
[ 2206.147834]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2206.149022]  xas_store+0x8c/0x1c40
[ 2206.149821]  __xa_store+0x164/0x2d0
[ 2206.150684]  ? xa_delete_node+0x280/0x280
[ 2206.151651]  ? trace_hardirqs_on+0x5b/0x180
[ 2206.152584]  xa_store+0x31/0x50
[ 2206.153361]  __io_uring_add_tctx_node+0x1cf/0x520
[ 2206.154504]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2206.155723]  ? alloc_fd+0x2e7/0x670
[ 2206.156586]  io_uring_setup+0x1fbb/0x2980
[ 2206.157566]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2206.158763]  ? wait_for_completion_io+0x270/0x270
[ 2206.159927]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2206.161164]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2206.162390]  do_syscall_64+0x33/0x40
[ 2206.163279]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2206.164485] RIP: 0033:0x7f5d125b0b19
[ 2206.165298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2206.169544] RSP: 002b:00007f5d0fb26108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2206.171358] RAX: ffffffffffffffda RBX: 00007f5d126c3f60 RCX: 00007f5d125b0b19
[ 2206.172950] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895
[ 2206.174682] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100
[ 2206.176415] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100
[ 2206.178024] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000
11:41:35 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0xf7, 0x3, 0x6})
r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x149800, 0x0)
perf_event_open(0x0, 0x0, 0xb, r1, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)
r2 = timerfd_create(0x7, 0x800)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = getgid()
fchown(r3, 0xffffffffffffffff, r4)
sendmmsg$inet(r3, &(0x7f0000002f40)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001280)=[@ip_retopts={{0x18, 0x0, 0x7, {[@timestamp_addr={0x44, 0x4, 0x54}, @timestamp={0x44, 0x4}]}}}], 0x18}}], 0x1, 0x0)
dup2(r2, r3)
writev(r1, &(0x7f0000000500)=[{&(0x7f00000000c0)="6c9b7da223ba533f06121a0e5f6d63835ce923b52ddf304a662a6b82b6a5ce652c4bc13c53fb0e0ffbf1d14c784d66bd6827d585e8e48b1a5a122bd2b6b8c4885dd31c317baa0f51cf178a7b207d79962f00496843994e6cfd6449fb3f717b980e94b89e03457df174098309fdb0a1379f5eae934818261c2e45e6f05c08c26f1f7674f65a0f6ef497ab31ae1d336bad856306f717faab85687c56ffbe7d399b6e449266aa7b692251558b3505", 0xad}, {&(0x7f0000000180)="df67c7f9f77dda47557b65d91b99", 0xe}, {&(0x7f00000001c0)="e331ace058b030538bb78fb2204eecdaf58681105a32c5afb0a647732180906a0a19c16dc90bd63a0df653b66806bcea5111362902617855a479d243407552910cc6144bbaee10735621fe50", 0x4c}, {&(0x7f0000000240)="b68d6c1b3d7c891f410b48f8543a4b6f2f52e25cbb305b53d0d36376f070a1cacd9b31c1a8ad10c78efd5c219b6bd9f1eb5e937c3d21bfec102dd3c6fe444cf4a23fad91defe6e48f4932cc03fa26d6348e82815bcdad1a581f18a838932388860528a651a17b1938254c251b52f9691417e1bba908b7494e7937bfeb1938fb32ae404b1780f83c282fca21443d1d841a3e9f00098008e6507fe26088567e0b56948f02f9abf8aaee7daa2562612896c814045aaaf68b56dc40a1facbcc3df83328b48051cd219d99c126b0f699eb02f52", 0xd1}, {&(0x7f0000000340)="e502adafeae3f9cc44124fe619d20bc9b1fa68c69f92dc9e94d6a4b22892935bd16ec6902f26a94252474d805968dbe69acc2a4c6ce87fb7505a69be17d64cf5e53fee5eb105cfa761b946e1026bf72374c6350793b719e21325c59923751f4ec365a4cd0e844d727a0934924dbdd96b046e8aeef28dc431d623f1b88f1fe2d14b32", 0x82}, {&(0x7f0000000400)}, {&(0x7f0000000440)="2da226ca4c6b9d55f5ed2537cfec744028579864d4228ede612827ad8553a03b9e1cedffb91604039e1ba5cfa7136531b7751bed864616805b886053d90c78c392bd670841ec513399e76c8bc951fa667a01ffef4921e7f37517b1feb76ae39f07c74929ca30d38ec3d684e4b2abfa7bb57e32fef9a781a3148ac6b084cec08842d44c369358da087c908715", 0x8c}], 0x7)

11:41:35 executing program 1:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

[ 2206.231472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2206.233249] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2206.235750] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:41:35 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl(0xffffffffffffffff, 0x1, &(0x7f0000000040)="fd7ed7237831d89f4643b39d585c5017049d0e584d43c8e149b0ec1c2c64ed7f9d70158a0bd04b1ae2afea35ac495024ddfa72875691b3f05bc59f14d12425f37ffe44148c144567f5a846")
r0 = socket$netlink(0x10, 0x3, 0xe)
dup(r0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x8000000)
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f00000000c0)={<r1=>0x0, "22660005e3378c72f0b5aae2743ca678"})
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f00000010c0)={r1, 0x10001, 0x4, 0xdd19b76530fc3de})
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612)
r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000003240), 0x30102, 0x0)
ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000003280)=0x2)

11:41:35 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x0, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

11:41:35 executing program 1:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

[ 2206.443919] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
11:41:36 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 51)

[ 2206.546858] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2206.547927] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2206.548880] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2206.557610] FAULT_INJECTION: forcing a failure.
[ 2206.557610] name failslab, interval 1, probability 0, space 0, times 0
[ 2206.558970] CPU: 1 PID: 10099 Comm: syz-executor.2 Not tainted 5.10.261 #1
[ 2206.559755] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2206.560722] Call Trace:
[ 2206.561029]  dump_stack+0x107/0x167
[ 2206.561452]  should_fail.cold+0x5/0xa
[ 2206.561886]  ? xas_alloc+0x336/0x440
[ 2206.562326]  should_failslab+0x5/0x20
[ 2206.562835]  kmem_cache_alloc+0x5b/0x310
[ 2206.563406]  xas_alloc+0x336/0x440
[ 2206.563893]  xas_create+0x34a/0x10d0
[ 2206.564413]  ? queued_spin_lock_slowpath+0xcc/0x8c0
[ 2206.565086]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2206.565787]  xas_store+0x8c/0x1c40
[ 2206.566298]  __xa_store+0x164/0x2d0
[ 2206.566810]  ? xa_delete_node+0x280/0x280
[ 2206.567369]  ? trace_hardirqs_on+0x5b/0x180
[ 2206.567972]  xa_store+0x31/0x50
[ 2206.568418]  __io_uring_add_tctx_node+0x1cf/0x520
[ 2206.568981]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2206.569597]  ? alloc_fd+0x2e7/0x670
[ 2206.570019]  io_uring_setup+0x1fbb/0x2980
[ 2206.570505]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2206.571089]  ? wait_for_completion_io+0x270/0x270
[ 2206.571663]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2206.572260]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2206.572868]  do_syscall_64+0x33/0x40
[ 2206.573297]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2206.573903] RIP: 0033:0x7f5d125b0b19
[ 2206.574341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2206.576463] RSP: 002b:00007f5d0fb26108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2206.577339] RAX: ffffffffffffffda RBX: 00007f5d126c3f60 RCX: 00007f5d125b0b19
[ 2206.578184] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895
[ 2206.579019] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100
[ 2206.579864] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100
[ 2206.580683] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000
11:41:36 executing program 1:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:41:36 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x20, 0x81, 0x6, 0xff, 0x0, 0x126919ca, 0x0, 0x6, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x2, @perf_bp={&(0x7f0000000240), 0xa}, 0x91, 0x9c, 0x8001, 0x3, 0x4, 0xab7, 0x1, 0x0, 0x4, 0x0, 0x5}, 0x0, 0xe, r1, 0x8)
io_setup(0x2, &(0x7f0000000040)=<r2=>0x0)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0xc9737a8, 0x2000)
io_cancel(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0xe18, r0, &(0x7f0000000080)="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", 0xfa, 0x2, 0x0, 0x3, r3}, &(0x7f0000000200))
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
write(r4, &(0x7f0000000300)="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", 0x1000)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)

11:41:36 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x0, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

[ 2206.932078] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2206.974429] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2206.976052] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2206.981841] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:41:36 executing program 5:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0xe00, 0x0, 0x0, 0x0)

11:41:36 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 52)

11:41:36 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = dup2(r0, r1)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x8000000)

11:41:36 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x9)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x4000007ffffffc)
r2 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r5, 0x0, &(0x7f0000000240), 0x800)
syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r2, 0x14c4, 0x4000, 0x0, 0x0, 0x0)

11:41:36 executing program 6:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:41:36 executing program 7:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x48080, 0x0)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x4000, 0x0, 0x0, 0x0)

[ 2207.011372] FAULT_INJECTION: forcing a failure.
[ 2207.011372] name failslab, interval 1, probability 0, space 0, times 0
[ 2207.012759] CPU: 1 PID: 10112 Comm: syz-executor.2 Not tainted 5.10.261 #1
[ 2207.013547] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2207.014516] Call Trace:
[ 2207.014835]  dump_stack+0x107/0x167
[ 2207.015253]  should_fail.cold+0x5/0xa
[ 2207.015710]  ? create_object.isra.0+0x3a/0xa30
[ 2207.016235]  should_failslab+0x5/0x20
[ 2207.016679]  kmem_cache_alloc+0x5b/0x310
[ 2207.017146]  ? mark_held_locks+0x9e/0xe0
[ 2207.017628]  create_object.isra.0+0x3a/0xa30
[ 2207.018124]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2207.018732]  kmem_cache_alloc+0x159/0x310
[ 2207.019213]  xas_alloc+0x336/0x440
[ 2207.019630]  xas_create+0x34a/0x10d0
[ 2207.020067]  ? kernel_text_address+0xf2/0x120
[ 2207.020594]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2207.021202]  xas_store+0x8c/0x1c40
[ 2207.021629]  __xa_store+0x164/0x2d0
[ 2207.022049]  ? xa_delete_node+0x280/0x280
[ 2207.022545]  ? trace_hardirqs_on+0x5b/0x180
[ 2207.023047]  xa_store+0x31/0x50
[ 2207.023426]  __io_uring_add_tctx_node+0x1cf/0x520
[ 2207.023991]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2207.024614]  ? alloc_fd+0x2e7/0x670
[ 2207.025034]  io_uring_setup+0x1fbb/0x2980
[ 2207.025509]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2207.026093]  ? wait_for_completion_io+0x270/0x270
[ 2207.026666]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2207.027264]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2207.027859]  do_syscall_64+0x33/0x40
[ 2207.028295]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2207.028885] RIP: 0033:0x7f5d125b0b19
[ 2207.029309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2207.031430] RSP: 002b:00007f5d0fb26108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2207.032339] RAX: ffffffffffffffda RBX: 00007f5d126c3f60 RCX: 00007f5d125b0b19
[ 2207.033185] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895
[ 2207.034000] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100
[ 2207.034830] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100
[ 2207.035650] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000
11:41:36 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

[ 2207.156216] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2207.218960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2207.220498] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2207.221876] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:41:36 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 53)

11:41:36 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

[ 2207.317256] FAULT_INJECTION: forcing a failure.
[ 2207.317256] name failslab, interval 1, probability 0, space 0, times 0
[ 2207.319279] CPU: 0 PID: 10127 Comm: syz-executor.2 Not tainted 5.10.261 #1
[ 2207.320504] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2207.321943] Call Trace:
[ 2207.322403]  dump_stack+0x107/0x167
[ 2207.323039]  should_fail.cold+0x5/0xa
[ 2207.323723]  ? xas_alloc+0x336/0x440
[ 2207.324362]  should_failslab+0x5/0x20
[ 2207.325036]  kmem_cache_alloc+0x5b/0x310
[ 2207.325730]  xas_alloc+0x336/0x440
[ 2207.326335]  xas_create+0x34a/0x10d0
[ 2207.326977]  ? kernel_text_address+0xf2/0x120
[ 2207.327740]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2207.328661]  xas_store+0x8c/0x1c40
[ 2207.329269]  __xa_store+0x164/0x2d0
[ 2207.329905]  ? xa_delete_node+0x280/0x280
[ 2207.330615]  ? trace_hardirqs_on+0x5b/0x180
[ 2207.331336]  xa_store+0x31/0x50
[ 2207.331885]  __io_uring_add_tctx_node+0x1cf/0x520
[ 2207.332684]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2207.333548]  ? alloc_fd+0x2e7/0x670
[ 2207.334194]  io_uring_setup+0x1fbb/0x2980
[ 2207.334912]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2207.335774]  ? wait_for_completion_io+0x270/0x270
[ 2207.336623]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2207.337547]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2207.338422]  do_syscall_64+0x33/0x40
[ 2207.339063]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2207.339973] RIP: 0033:0x7f5d125b0b19
[ 2207.340597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2207.343677] RSP: 002b:00007f5d0fb26108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2207.344957] RAX: ffffffffffffffda RBX: 00007f5d126c3f60 RCX: 00007f5d125b0b19
[ 2207.346203] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895
[ 2207.347417] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100
[ 2207.348584] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100
[ 2207.349763] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000
[ 2207.391000] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2207.498522] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2207.499809] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2207.501001] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:41:37 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 54)

[ 2207.621853] FAULT_INJECTION: forcing a failure.
[ 2207.621853] name failslab, interval 1, probability 0, space 0, times 0
[ 2207.623549] CPU: 0 PID: 10132 Comm: syz-executor.2 Not tainted 5.10.261 #1
[ 2207.624504] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2207.625648] Call Trace:
[ 2207.626010]  dump_stack+0x107/0x167
[ 2207.626498]  should_fail.cold+0x5/0xa
[ 2207.626999]  ? create_object.isra.0+0x3a/0xa30
[ 2207.627592]  should_failslab+0x5/0x20
[ 2207.628093]  kmem_cache_alloc+0x5b/0x310
[ 2207.628622]  ? mark_held_locks+0x9e/0xe0
[ 2207.629155]  create_object.isra.0+0x3a/0xa30
[ 2207.629724]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2207.630428]  kmem_cache_alloc+0x159/0x310
[ 2207.630989]  xas_alloc+0x336/0x440
[ 2207.631472]  xas_create+0x34a/0x10d0
[ 2207.631966]  ? kernel_text_address+0xf2/0x120
[ 2207.632553]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2207.633230]  xas_store+0x8c/0x1c40
[ 2207.633703]  __xa_store+0x164/0x2d0
[ 2207.634180]  ? xa_delete_node+0x280/0x280
[ 2207.634728]  ? trace_hardirqs_on+0x5b/0x180
[ 2207.635286]  xa_store+0x31/0x50
[ 2207.635714]  __io_uring_add_tctx_node+0x1cf/0x520
[ 2207.636370]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2207.637043]  ? alloc_fd+0x2e7/0x670
[ 2207.637548]  io_uring_setup+0x1fbb/0x2980
[ 2207.638089]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2207.638786]  ? wait_for_completion_io+0x270/0x270
[ 2207.639435]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2207.640143]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2207.640837]  do_syscall_64+0x33/0x40
[ 2207.641342]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2207.642028] RIP: 0033:0x7f5d125b0b19
[ 2207.642515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2207.644875] RSP: 002b:00007f5d0fb26108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2207.645840] RAX: ffffffffffffffda RBX: 00007f5d126c3f60 RCX: 00007f5d125b0b19
[ 2207.646770] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895
[ 2207.647688] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100
[ 2207.648593] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100
[ 2207.649510] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000
11:41:51 executing program 5:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x1802, 0x0, 0x0, 0x0)

11:41:51 executing program 7:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x48080, 0x0)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x4002, 0x0, 0x0, 0x0)

11:41:51 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 55)

11:41:52 executing program 1:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:41:52 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

11:41:52 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
setresuid(0x0, 0x0, 0x0)
r1 = getpgrp(0x0)
pidfd_open(r1, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmmsg$inet(r2, &(0x7f0000002f40)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001280)=[@ip_retopts={{0x18, 0x0, 0x7, {[@timestamp_addr={0x44, 0x4, 0x54}, @timestamp={0x44, 0x4}]}}}], 0x18}}], 0x1, 0x0)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmmsg$inet(r3, &(0x7f0000002f40)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001280)=[@ip_retopts={{0x18, 0x0, 0x7, {[@timestamp_addr={0x44, 0x4, 0x54}, @timestamp={0x44, 0x4}]}}}], 0x18}}], 0x1, 0x0)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmmsg$inet(r4, &(0x7f0000002f40)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="18000000b542b7f2d1c400c9c65b7a15d113ac3caca7ffd709000000ce06ccd9382b3467058c2098e058ea3a0b98c7b56d275d8cfa2b6caa8194dd3087da5342cb124fcf02b47f053aaa339c84e5e262ce8ec4ca38bcc50d07779fbac6a4083134dcedacc05848d3a54de98ffc70afa0d49825b7a3902ef644504e05f60ef466d34ab003e343"], 0x18}}], 0x1, 0x0)
r5 = getpgrp(0x0)
pidfd_open(r5, 0x0)
r6 = getegid()
stat(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
setresuid(0x0, r7, 0x0)
stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, r8}}, './file0\x00'})
[ 2222.480872] FAULT_INJECTION: forcing a failure.
[ 2222.480872] name failslab, interval 1, probability 0, space 0, times 0
sendmmsg$unix(r0, &(0x7f0000003100)=[{{&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001540)=[{&(0x7f00000000c0)="c67f3e9701205f7b66d80757ef4edd8ce56cede7e9a3ab88431caa23f123aada79f91d33725560380fb56040945e9a0ce3a0e7b0837e47e2c9984caf64d92b0d5004841b371fe178468851a33c39cd5ca38d6ecb76327f4f", 0x58}, {&(0x7f0000000140)="c2bff233ea70fcc986052056e5440c25ca1406000d2b107584019cd6e99a66775112dcbbebfc948b24ff51ac472a39f18c8bc17396f5bb5bed4e1dd9", 0x26}, {&(0x7f0000000180)="0070bfa4103ff38c892b2b3aafbee1e1ae9249a7843a39f43af248c791bb7c6ccd00ccfa7c6ed69df47ee7085a639ea5e29656ac061b9673ccb83605d26f9506dc1971b7d8fe92297923f621e8ceb523bc5c18fc554dd26a823e4a64d463c8e5447456ef015e6a00849ae30aef0bb25213b5c0756758b8d7088dd5846e984553dd413ccfd7721d2d5a00de3b77e83e32deb86e13dd20445b87c3fd2b0ee88bedf9cc240c6a32766ad4", 0xa9}, {&(0x7f0000000240)="a50700000000000000c12a59bf41a2299501af9e44c654d5636e65337d1f9ee0495fa82fdaf93aeb742d9f990b43c0cbfc1f56c02ffdde04d761de1ccc4991bc7b8df84b42fa07d9d0fb24859d9679121df2e039a4dcebe5d3146f413241a1677e97eede8d052cd1b8f9b1a45f2b80f0bfba84eb79645ce1fdd77abfe288fa53c709d3060ed4150c62373670e685cd7fb96c44502b7e504efac9a106756a29c9ce2ce8fe1bb33a8bf9643566724304c5182f4404308ba4d10da409d9900cb1ab4217b5d4348bfed67cfccf8c168d67d50de17785da7ae1764eb20f1840112fb3d76da358f141a09afff964683d92e63ddbc0da", 0xf3}, {&(0x7f0000000340)="d1f6f356c3c03609611e5a7be826d565110bda6f8d26d501fcf123518d1bb810bbb5f408b0cc8cd1d375add7d40f0dca413a3a21d6f52e6978645f88f7a9503975a0c37c858ee7e9cfa637ea063f63da8622208185d04077230ab698c06ba1a333168f313cb9e437a35cb205a263b7ebbfb57d1fc3d31a5e4ff16c02b326fd6f7e725a099deedd2c87237e2e85fb1df9b45e7c239a39b115736b4f918fd82665ba591988014affe893f9902ef146ed0267eab4711ab4e33155269feed5e86eda57", 0xc1}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="1975f1117d603c3ddc5aff0bc6e3d06e309228e80541a1526e5c41d9e3d7dc251a77820967f10435e87596b0ca31091877a7951305ebab12fc93064623cbb59df3dead4783d615cb24f3cb2597427c125b7dca6ce643c92b909125c6ab263ace9afb10584034c6581818844fac9924290f", 0x71}, {&(0x7f00000014c0)="e961978aaa1311f7bc01f04ca9c9f969040208f7c3002451d13dbc85edb614263f27ad3b717c00be4f59e044c47c97036910a2028b8a8e3ddf9dfb43577162c7f328fce020c1f4ced86d74f16aaf1c74", 0x50}], 0x8, &(0x7f00000016c0), 0xe8, 0x80}}, {{&(0x7f00000017c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000019c0)=[{&(0x7f0000001840)="70b6a6900b08e8e176d1e53563b8861ac9b98fa1d43317c585968569d82b8434a40eb5113e4d593e2dfe3778359fa1b4f2fa021519e76508ba3a8c9a618c00abe30bf9", 0x43}, {&(0x7f00000018c0)="00f917c21b62910cbb379af2ac9329d6659065ca535b504979aa618a247bbf1bfa57f78e67775544c82bcae32a628e4e982505100fc6411cb2603f21a7b2735e2adbb17ffe004774381ece1042c218a01076789593be03462f4ec023ed7e5d2ebd7509a81a5a5610c33bc4a9e658ed30fc712eba0a9b7f65fa950e934f6f10772dd1fff2146c14ae52bf89d8984dbc7350ff821bf245c950b714aa3b6b43217777a40b43648f78141762060ca7c8db18e7e4e0dbd7c1f447c39a948d9e90d44066a872bc3260b7d187a6d9a9f9e684eb7bf3840f1434f00db83869b591a36f2c401567180410ec703a", 0xe9}], 0x2, &(0x7f0000001a00)=[@rights={{0x1c, 0x1, 0x1, [r2, r3, r4]}}, @cred={{0x1c, 0x1, 0x2, {r5, 0xee00, r6}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r7, r8}}}], 0x60, 0x24080010}}, {{&(0x7f0000001a80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003040)=[{&(0x7f0000001b00)="599d421e549a12ce887f56d62604a0e42bbead289ac656507d75342ac05d23a6b015657429603264e956763b99ff666e734b2f0a5e4037095b1321af2c9cd83c848ab5d93b855f6f321e2072c0eba901c234523bd887e778ad3b40a3f4b198a08f1079c8d44dce42a939cf3345056f48b7d29efbb509b71c9f77f72a20b97fdcc0b34f01c8a5018d17", 0x89}, {&(0x7f0000001bc0)="8c73fc679788a08db89a0fd85e8446acbbe65fef6938db84c67ef48de72a7e7340d957bcb5404e28f7b2f4682a110cf016ba03e76a1d8ae7eb32a11be45eadfd2cc16a6f51e38d35dcb440fa2742aa246394d6ab9c2e9c7a6178d079eb4ffae843b6fc8bd8cd99d6d4dcb9f0c0a424de15cee50761fb528fde92e7f79987b7b2d8df9710ccd3ec2ad55c80336f0998787ace6a59fdb949dfcdf1e85cf5f30c7141a3f7597d7b8ce6d6b46be427a26789f79574104806f632c5bcdbaebdff388c661c3e229cf9f71d37e0a94e9e6665c1ede8e6a5561f550eead805a044f3c505d3553f0ba98ba2027b1a", 0xea}, {&(0x7f0000001cc0)="f2adbc13c3e7776a4394c4cc3ddb1152ffc6578066a517e357d2171ccef316b67d60f277601b7e", 0x27}, {&(0x7f0000001d00)="672b1f794cb182e48af404ffa1937c46d832f1015a52a1c4abb02fbf0a4860eb96c7561904ce4333b4199d37b495d970f8cb668177588f6c7265c5451120d83807bffdc5f33c743d673c675515b0e1db0ab3e34b641e2e716ba671320d27b65f32683606b3dc6d29cd5d7490f90b140370c6cc31e1a56ffaee1d99d351df25db31f65657fa69339f0965810db8352b3500", 0x91}, {&(0x7f0000001dc0)="90c2761b31c620e108832ff361ae2e5d4e5b972918cd599bf7e659f485d36d6a30aeb9b5d78156a698c0df174cb84aaf31cef43d8cc58ecd11630448efd540288216791e8662f7fbf0200fff", 0x4c}, {&(0x7f0000001e40)="7e415e9e2d46bb79325bc29a4ef2040447362473aff2f359a229a299300e9c7b3e2634d7ef21de2061deb22b7669ef13982688f126d83b8da58eb20c451a250134aa9421d509b0207777dce75ba1a07f72b97bc66e546d9879f868e5db389ecdf399188e79f9e6622cdc99c165f0a1cfd624778220f84d9c57bf4d8c65a289a771328e9ca1b145fe2de74e75de57e55c9e31c4e85d3f87605cfb1696fceea268e81540536c26af870925356c5a", 0xad}, {&(0x7f0000001f00)="507e3d1357039e3c2caae6d2a6967885b237e0bc5e5fe7c2abbad51d05c83d671f1df380753ee7b361fcf338e8d317ba6504b8666c8d", 0x36}, {&(0x7f0000001f40)="736bad09eda9387e1e3b676cb75a30e7cbcaade315e1be9c1e7522ea5f295950796badf6d681ce91a5e3c62725dc2f8a7a62b9cc13afdfb205365dff150f327b3f2299b668ef45cadc8d9a98dd0ac4c6b7fe073a6041f4b3dc1a4ef6f92d7b984e19550fc034", 0x66}, {&(0x7f0000001fc0)="9c41dee8cc9897e2bb70ab28df7b90c4b9411defba13b05d4f3bfcf70692e3aa167980f05902e005172a2891101b1b87a65c0d15fc4d3eea3c936498948a02c3d3524852e0040876483a0ca6adff606d75f89d76ddbe14f2d5878ec75524e040a4acc6d1ebf49929fd6d741ab5ab298cf37a7b946bf352dc8bc2dd597ac3e9d165512805d019cfd37035506dff441bfb8a1d4dd2b277ac6d11f6a9afa0489c0b73b25489278a6a459847deff430132e751db70d23868e91df7ffad984e2d4f5f949154b0800b62d4a85f0fa404de1ded3c0ddef47f772770d3563ea081191061beec34806cb6ca3c1f3ae66eb39e7799d0ca275e6bd7d62abc46f710a16a76c95638d459f0296cb95e1921726eb2bf69faca889a62fef45a7d0963b02c26b2b537683411485d3d52f78049997344b81881059a5e11bae193308e9418a4a842a379cd3449a2a1dbf1f781ae8a9ac83496e5a85cf872587be45da4dbac2520b8db33e44c0b0f57b67dd7b0c02d9548bef8cf1ea5ac3318d032ea635d16e98bd0a10f1373c931c2b39f69f1646600ebf5786e07036d03fd011e484f8d35ca9d75dfe4e75dd4330f73c3030de54b17885edd5fdfd8031130afa0b2f3fec435947f6ffba9de0e0f6513d0f09d96261e01652f1bf2f03b722cc537f2ae284c0b24fc106db24bc5a7e0741aa9bc2a555ae71dc9c72b7aea9ad32936e928288fa631bdb2003d82828f53a3a1d7a05cd9ce3e88ecec4098feb341a2d76754efa2410058a32f21ef64c9ed7856134a1d1290de2ce912377e4443c39d5fecade939de3d2145b31ae2a423d772df9a6aefd50c58845cf16fc662c53af0f5460742e308a424d1d8c39129910a3b365509ccba28b6e4711d50d3071ec0b506b8d3a7c7bf78f2d4724f0effaf141de85d13f46d31041377fd1d286f166fadef32ce8af8f103aec9cbb659e3720c744a5955f53b342a0bebd8815e3a934801484b92d53a70f7c9038925b1c4f7ab59ac0d260db46f5f2172e9773d490261419e92cdf611ea08d2cb8144f7c05542ff366d421c27912620862eba85fe3d544e8611526bca9ef7f2917b1bb5a1750519c17ec8286b90d8190f8e7110bbeb78719aa18538ab071e9d1d7d40f1180915164b3676f8f4815fee95b00d166edcf15d4cad52ea9f2ca13febd647b8ebfa0e00bc9ad21c9dd756d7f210da784e7cf9022e25927a90408322db95c6c9b78c31f44e0e6879b195c70e1f9b605df4278564b840b9b9f9e1da6b1bda51621b655b12ac87026c1a0c789173da0cae1fba90a74e76f12b991673a88c443267cb11f260a471e15824c1269a937227afcb3cedf0d1ee34011a5bed063ecf248d6e924ac5d8f80cbf6a822ef098212fd2e5dcc8dd44106b3cf63f400031865d406f0cb601ab8ff734f7fcdf8041d284b1fbbe57614885fa78e6c40706046e8b8fb90db0185293f69d8252fdd45170541ec7d224a5cbb57c8c5e00104815b86c802020fe48613838ab57ac6c4eb90f6d7c6444cf4c08f95fc304187d6f5b48fcd3be4f500c0708d7a844864a6a0716503252be2345e9e5c262c2ce9509d72f935d07a1209bd9cf816b49cfc96f0f1b2dc47cf82e085ba2fd0bbbb2ee6b3d418ac427e1a0dc77025ecb4ad80dc47e535995a5de03bbff5a713b4b582dbe448ebdb1d1f72d6f42b965c738f29bcf9afc0a952c0501e7a7abb4c461c9e6f77257035041d5772446dabbef29d13f5e238fa22cab2e48517daca0d37fe2740262e8302e81f9fab03b5805d96efb52b7fe4eafcc57deb9a633791af025fbaba94cf82b67240732a1bb9d7b35ad11d0f2df86cdc622020ff864e469310e7a1c015d76221815722bd1b2f2c230fbbd2183328cf6b68381629cdb2e2f49955f7f37cffd072ed1a74405b94a1586552a38049e16cdfb10139dd61d5973a1473c78dbe622cbf2a757d7e5c3b10d2ef29be8a49749404e488013ba3c5e072c73686ce6ec4f0d45ce910e7a3fd19bf18c1aa0831b4b57f9a1183fec8acaedfdf8eb17f89ac50b448fb4debf56d1760f13a2301fce1f060b2ecbf95c95d433f607bb14766560c5c1225df950f60f25655a28d80593d2b4f878c63a3065ff94b4d0043c5b3975f1bd920741f4d98019bbe0f774e8dd6f9650e911a048272c849fefe1a3dffb31b57ade493f5d1715d23fb14b953f1b73a7f7a412f80390f09f96909a170ec103133b586cc7e7f170a4d3b33c6ab5228d4807f5de5070e11d2fb9703bbe520a8fcd65c339820d2cd363264675e0c00953af02ec28088c8bb4c3fc4b5c313c7229a58709c02bef6a14f7f6f44410ca4c3a4092c4cbfca39a403d6b2e03e3fd5c04c9606e46c874f3740a5ed9dfb625f65acc728a9dde16739e959f0a0a8afbcb181e1648f12446f46172328442561e0eebf75e03b3f9c8a5183339dda8ab074f617c0ead4e66d32b17407dc5d12a2391922541ba506654f3f41be017489415471e97dbda19a3b133c4cbde8cdec9bbae920b979c95c2404f4abb65140db5b8769a2168481681e3018df3bc918ab13edb06c7e280e031e709cbd93309984307961fc4e8cd1c363ede4bdfc867d0f93b9e6330bf6aa0bd4594914423b6283fcd9d53bcca00ef8e8bc8e6f69db4c3f3bca1b95c25447cdfb68747c38821f11e2cb935bbd30a1fc9c42906e9700d1b4f10c340efc78918b890d4d345057011456e416e525604f09caf965d7139295087168a53bb4ce2d1e3a4a322bea0be58178523fd889d19cea298618925eaca420e281199132e29e6c842a06803b96efd1d3c41dadd9fb6db98bd7ab34726d5c64c43508fb0c48ec109a3323243b4e632b817739fd8f3d3c8cba6268ee6a7fbb8cbb0619f1738f419062d7c20c1c3caa4d66381bad79b4b7b551812c659cf07442d84d77da64f33417216b83583fb77a600169fa0c7e9407a3027f72e31345ce19ed6d94a173daf074c9c3e7200b0cda42b32b08f20c2c6ac9596c5ad4c241a2a101c3c34a3a5dba137b6b74d85e57e58a2eeee57343a6f83daf7cb5a8675d4b7313aa0602c5fe602225ab4c99c7a0a252a1014d77c47345100aa0078a6f842dac668fb8a75473454607eccc516e275e7a291a558b87e8664df1077064904159e1920d9d30075c5225b2e4c24857046fc7f8151b6201cee55d63256975ef8fe7ec76976826da16ab27e33feb71f762ab9c4a9471aef1f0a5735fc173c911d939c58ae723f116390b2df3e44bb2df0b286b397c87fb5602a1960fb8fee52460620c3e54e7919da4e4543fa3145ff3777b34b7de5538c549e9a159d2df9b349cda2ca92a9c4e2823aa6cf231b120f487cf0f7e5f47126f25653b87f600a508d8e965fdac5bb26bd5788ece4e181126032d0e287b75d9cebbb5d843943ab09177030967ef4b539b41aa06ae3c2a58d8f0d17bec7596449f97b1d4101a59392044b0460c8744596e7e8f196943b449b5d2181a764bbb8547637c3e02965c362caa568a3444b017dfcfa661b66573a8f6bf634cbd25694a70a948fe684343694938b950c43c2417ea934a7e5aa059b9dce0944ec09d7c9d87291076114906ff148c6b1cf4efc0266d1f0eefcd91ed5dc5076aa227bacfadd2a31334a40c869a5f832c0aec530dbaddf46f25b016392a8c143245c04c02b18cfb5e703bdad796cd5fec4f69c0c96171b15a73d47d071ad997b85ba3e3181b8b64b054cf5b201ba0a0148a058840ca91b0b5d80359f22cd1b3165fae1959c567238ada1feaa3b5019a46054ba045eadd02d2e733c6fc7a780bd7046351fbc9f7a2e4bc86112f4d9ea70abee981271a1f900c8b98073a6445fa87737105795075d937d885c418869b687329ee4985f5e30176f7a9876eba9e1224857929b7f3cec80d55de7c0ddaf6322276f6b3383f48d0db7e99a4ed1b19fb8b6a6211a3e88b2fa3551e622ac94dfa9d0ace8934d110dc7f2852edaa751672f694274a6b481ed36cffe73e067daf2ee8fcbfb4fad70a34c8c6197654edaecf4b242007c50f89c341c24b199c28aa63f0b8ed3872dcd8282331b0175cdef968ec26d3eb6fcb522724ba35583618e4036d3342c7d43e448682a4491b1e0f16c91b5df69d73a6cd3346c581023f268d43bf54b485aae76a5b87ba7d244aa73c8cdf0dd3a0d90b34b6a42cba135231074238702f0fa023fd920fd6ee474213c56da6790e2093963f84cb9471a8ac433d3f60851fccc7e525fe67f6169de54e89b876ab95642354a1a8d9ca9bd4380021911b9c64c48d534568debb8208d4e6dbd7be0eec8cf7d7c6faa4fb88f2ee0d5fda4187e1b67b12570a491c98d2bbe09b561513468a0e8c348d1a71cebf23c71f7cfd3ad8d7624b17b53523655ae6fd2d026b9622190f7b70432331196cefae1668201f50441fbfa2d441ac62a4c369194ea2c14669c5f9f5e8ae348ac706615b6475d1169401dcea6116f25c22b60b105eb584fe0265b6d167cb36b0cfb57d8242d3f7a0f458519b2c5906ebca2ccb3acf898fa0b74737d2b8cbb39554cb07f718cc38dead025abc9f2a88a9b13e2bc8cfaddc53471b2b88adf6df321e52e2c3e9e7bbf15eeb3546f56cdeee73d58df6538f0e9e79923f08a0d877e0ca52f6e8dfbdb24beb4ef06784801d91885eb00c08958eee509e74f63a1554dca146638de686978013a71767d3764cf2c36723f7e74db29d5b06f0fb8ee2cee0b15947591e70036cdc7fe19dbb74b3f93d69b1d943f2765490db2113250b039f7335ed3f4f8952596a48485c5bb1ccd5f688099991c29231042caadf5629500e9d7e1163b649714a8b3ad6d675110122353c2cd441f8ad2b81ec20b05760fe205290552a094b6549f8d96febaa3de4bd15ad644cdd66f40f7603d224dcfea41077f2d72f3b7866b813941f6ff5fa7bcaf223b470d33fa0144e786481e1496fd0efda123f3602e09437756fb20b423ffa501d79abdf37ee4974f5b8689dcafdd12daa52c1b5a843944950fc8a806b55ac3b718f73b7ed915314f683b71bb13a20e3b966024488c48e9e748c07061103ac1ec51bd1346f94c823a9d6ac2377f7e59f169453686c5d8f55302cef5385096cd5ffe30fcfba15678031219a67860098313d9b42f4e0573ad1e41099e1d09d0c746a11b4fd5e75ef41321f42f1474acfc3f3d7d3eb29a448ac1683b51872c232ca8e196778d99ffb59177f53e0e6dfb045fc5b99d17cc1849dcd03d5e57ac659175fcd6795af7d8e496459b31eeb47419cb3b3cc6cecc7482f25a6b666895158e3d10c25d1fcbec07e1d9a080e3a8532d1638f18e6b45644262b52c598e3958286eafa70e4baf0f309ee56d77d4202ffafcdafcc8fd6e8d2a1d680d4c194a6c80df8e5125b35590adb7133b54643f0ba674368984ff0bc3e657fb312e1945afb5f1f8225a010ec0ba9b9fd29fdd543220f0188f5b8e050e3b358e0dc1902667bcb2d0cf7e2670ac7118448ddc7db75d3bfcce8b2cd81f5f0b68098a61a751798e6f149a3e873ceb7c946da5abf46bd4e52e7e7f84b94ee89866899f2c94e4a0e36e7fbbf119db70f4f9d020297e763738c01d727e77c367c7b4aa53ad8a4e00d2a07d59f9c57d1625fced028e0f91a499ef48f1ce0f7f8d7d681b0b574ebb14dc9a65d558eff2dcb74da050cdfb697fec6f544b26f43474a0b44e40f290f6cba7f0e47c10183efd83046dbaa269703f822ec14f3bc4a04e9cc79da010561ff18ad040a8d3383e65ee673fb6dd375b51ebad518109ab1ed6c9efad129bfc20ef2de2bb44bd7e0050aa6d", 0x1000}, {&(0x7f0000002fc0)="c41753ac5714eb82890a52381197c087c3dcfa34f78bd682d9739d5d97bc18e9706d394161deec2a025fb44281e1ed9391d77a1454f4090a05ee51ae73a37a45754a60b424", 0x45}], 0xa, 0x0, 0x0, 0x5}}], 0x3, 0x4040)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)

11:41:52 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x9)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x4000007ffffffc)
r2 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r5, 0x0, &(0x7f0000000240), 0x800)
syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r2, 0x14c4, 0x4002, 0x0, 0x0, 0x0)

11:41:52 executing program 6:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

[ 2222.482849] CPU: 1 PID: 10147 Comm: syz-executor.2 Not tainted 5.10.261 #1
[ 2222.484039] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2222.485239] Call Trace:
[ 2222.485625]  dump_stack+0x107/0x167
[ 2222.486154]  should_fail.cold+0x5/0xa
[ 2222.486712]  ? xas_alloc+0x336/0x440
[ 2222.487250]  should_failslab+0x5/0x20
[ 2222.487795]  kmem_cache_alloc+0x5b/0x310
[ 2222.488382]  xas_alloc+0x336/0x440
[ 2222.488892]  xas_create+0x34a/0x10d0
[ 2222.489431]  ? kernel_text_address+0xf2/0x120
[ 2222.490184]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2222.490946]  xas_store+0x8c/0x1c40
[ 2222.491468]  __xa_store+0x164/0x2d0
[ 2222.491997]  ? xa_delete_node+0x280/0x280
[ 2222.492605]  xa_store+0x31/0x50
[ 2222.493083]  __io_uring_add_tctx_node+0x1cf/0x520
[ 2222.493779]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2222.494541]  ? alloc_fd+0x2e7/0x670
[ 2222.495072]  io_uring_setup+0x1fbb/0x2980
[ 2222.495670]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2222.496395]  ? wait_for_completion_io+0x270/0x270
[ 2222.497103]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2222.497860]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2222.498614]  do_syscall_64+0x33/0x40
[ 2222.499148]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2222.499884] RIP: 0033:0x7f5d125b0b19
[ 2222.500418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2222.503062] RSP: 002b:00007f5d0fb26108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2222.504154] RAX: ffffffffffffffda RBX: 00007f5d126c3f60 RCX: 00007f5d125b0b19
[ 2222.505172] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895
[ 2222.506194] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100
[ 2222.507240] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100
[ 2222.508263] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000
[ 2222.512076] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
11:41:52 executing program 3:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
r2 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x8000000)
r3 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x8000, 0x202100)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xe0002008})
ioctl$BTRFS_IOC_WAIT_SYNC(r1, 0x40089416, &(0x7f0000000080))
fsetxattr(r0, &(0x7f0000000140)=@known='user.incfs.id\x00', &(0x7f00000001c0)='/dev/vcsa#\x00', 0xb, 0x3)
io_uring_enter(r2, 0x6b7b, 0xa94e, 0x1, &(0x7f0000000200)={[0x1]}, 0x8)

[ 2222.621997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2222.623102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2222.625164] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:41:52 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 56)

[ 2222.727462] FAULT_INJECTION: forcing a failure.
[ 2222.727462] name failslab, interval 1, probability 0, space 0, times 0
[ 2222.729122] CPU: 1 PID: 10163 Comm: syz-executor.2 Not tainted 5.10.261 #1
[ 2222.730085] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2222.731258] Call Trace:
[ 2222.731631]  dump_stack+0x107/0x167
[ 2222.732147]  should_fail.cold+0x5/0xa
[ 2222.732685]  ? create_object.isra.0+0x3a/0xa30
[ 2222.733323]  should_failslab+0x5/0x20
[ 2222.733855]  kmem_cache_alloc+0x5b/0x310
[ 2222.734432]  ? mark_held_locks+0x9e/0xe0
[ 2222.735002]  create_object.isra.0+0x3a/0xa30
[ 2222.735615]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2222.736332]  kmem_cache_alloc+0x159/0x310
[ 2222.736922]  xas_alloc+0x336/0x440
[ 2222.737416]  xas_create+0x34a/0x10d0
[ 2222.737940]  ? kernel_text_address+0xf2/0x120
[ 2222.738579]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2222.739319]  xas_store+0x8c/0x1c40
[ 2222.739824]  __xa_store+0x164/0x2d0
[ 2222.740340]  ? xa_delete_node+0x280/0x280
[ 2222.740924]  ? trace_hardirqs_on+0x5b/0x180
[ 2222.741531]  xa_store+0x31/0x50
[ 2222.741995]  __io_uring_add_tctx_node+0x1cf/0x520
[ 2222.742677]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2222.743403]  ? alloc_fd+0x2e7/0x670
[ 2222.743911]  io_uring_setup+0x1fbb/0x2980
[ 2222.744491]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2222.745192]  ? wait_for_completion_io+0x270/0x270
[ 2222.745872]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2222.746605]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2222.747322]  do_syscall_64+0x33/0x40
[ 2222.747837]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2222.748545] RIP: 0033:0x7f5d125b0b19
[ 2222.749059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2222.751609] RSP: 002b:00007f5d0fb26108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2222.752661] RAX: ffffffffffffffda RBX: 00007f5d126c3f60 RCX: 00007f5d125b0b19
[ 2222.753652] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895
[ 2222.754652] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100
[ 2222.755640] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100
[ 2222.756629] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000
11:41:52 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

11:41:52 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=<r1=>0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00')
readv(r2, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/4089, 0xff9}], 0x1)
r3 = syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100))
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f0000000200)=ANY=[@ANYBLOB="01007d000100000018000000", @ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00./file0\x00'])
perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x75, 0x5, 0x8, 0x0, 0x0, 0x7, 0x5080, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x101, 0x4, @perf_config_ext={0x2, 0xfffffffffffffffd}, 0x8a90, 0x1, 0x1000, 0x5, 0x0, 0x200, 0xeb1f, 0x0, 0x3, 0x0, 0x7}, r1, 0x4, r2, 0x1)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)

[ 2222.800951] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2222.840066] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2222.841106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2222.842123] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:41:52 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

11:41:52 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 57)

[ 2222.942994] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
11:41:52 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x8443, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)
openat(r0, &(0x7f0000000040)='./file0\x00', 0x100, 0x174)

[ 2222.999321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2223.000974] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2223.003045] FAULT_INJECTION: forcing a failure.
[ 2223.003045] name failslab, interval 1, probability 0, space 0, times 0
[ 2223.004422] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2223.004488] CPU: 1 PID: 10173 Comm: syz-executor.2 Not tainted 5.10.261 #1
[ 2223.006767] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2223.007834] Call Trace:
[ 2223.008180]  dump_stack+0x107/0x167
[ 2223.008649]  should_fail.cold+0x5/0xa
[ 2223.009136]  ? xas_alloc+0x336/0x440
[ 2223.009613]  should_failslab+0x5/0x20
[ 2223.010100]  kmem_cache_alloc+0x5b/0x310
[ 2223.010629]  xas_alloc+0x336/0x440
[ 2223.011086]  xas_create+0x34a/0x10d0
[ 2223.011569]  ? kernel_text_address+0xf2/0x120
[ 2223.012139]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2223.012807]  xas_store+0x8c/0x1c40
[ 2223.013266]  __xa_store+0x164/0x2d0
[ 2223.013732]  ? xa_delete_node+0x280/0x280
[ 2223.014259]  ? trace_hardirqs_on+0x5b/0x180
[ 2223.014821]  xa_store+0x31/0x50
[ 2223.015241]  __io_uring_add_tctx_node+0x1cf/0x520
[ 2223.015859]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2223.016520]  ? alloc_fd+0x2e7/0x670
[ 2223.016985]  io_uring_setup+0x1fbb/0x2980
[ 2223.017516]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2223.018161]  ? wait_for_completion_io+0x270/0x270
[ 2223.018793]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2223.019458]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2223.020117]  do_syscall_64+0x33/0x40
[ 2223.020589]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2223.021237] RIP: 0033:0x7f5d125b0b19
[ 2223.021714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2223.024064] RSP: 002b:00007f5d0fb26108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2223.025030] RAX: ffffffffffffffda RBX: 00007f5d126c3f60 RCX: 00007f5d125b0b19
[ 2223.025941] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895
[ 2223.026872] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100
[ 2223.027783] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100
[ 2223.028687] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000
11:41:52 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

[ 2223.104157] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2223.140821] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2223.141761] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2223.142690] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:42:06 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 58)

11:42:06 executing program 1:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:42:06 executing program 3:
pread64(0xffffffffffffffff, &(0x7f0000000040)=""/198, 0xc6, 0x2)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)

11:42:06 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

11:42:06 executing program 7:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x48080, 0x0)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x5000, 0x0, 0x0, 0x0)

11:42:06 executing program 6:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:42:06 executing program 5:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x2000, 0x0, 0x0, 0x0)

11:42:06 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x9)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x4000007ffffffc)
r2 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r5, 0x0, &(0x7f0000000240), 0x800)
syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r2, 0x14c4, 0x5000, 0x0, 0x0, 0x0)

[ 2237.116289] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2237.152100] FAULT_INJECTION: forcing a failure.
[ 2237.152100] name failslab, interval 1, probability 0, space 0, times 0
[ 2237.154581] CPU: 1 PID: 10202 Comm: syz-executor.2 Not tainted 5.10.261 #1
[ 2237.156097] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2237.157912] Call Trace:
[ 2237.158499]  dump_stack+0x107/0x167
[ 2237.159294]  should_fail.cold+0x5/0xa
[ 2237.160129]  ? create_object.isra.0+0x3a/0xa30
[ 2237.161117]  should_failslab+0x5/0x20
[ 2237.161943]  kmem_cache_alloc+0x5b/0x310
[ 2237.162840]  ? mark_held_locks+0x9e/0xe0
[ 2237.163721]  create_object.isra.0+0x3a/0xa30
[ 2237.164668]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2237.165772]  kmem_cache_alloc+0x159/0x310
[ 2237.166685]  xas_alloc+0x336/0x440
[ 2237.167461]  xas_create+0x34a/0x10d0
[ 2237.168287]  ? kernel_text_address+0xf2/0x120
[ 2237.169265]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2237.170405]  xas_store+0x8c/0x1c40
[ 2237.171202]  __xa_store+0x164/0x2d0
[ 2237.171995]  ? xa_delete_node+0x280/0x280
[ 2237.172907]  ? trace_hardirqs_on+0x5b/0x180
[ 2237.173850]  xa_store+0x31/0x50
[ 2237.174580]  __io_uring_add_tctx_node+0x1cf/0x520
[ 2237.175632]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2237.176771]  ? alloc_fd+0x2e7/0x670
[ 2237.177573]  io_uring_setup+0x1fbb/0x2980
[ 2237.178477]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2237.179587]  ? wait_for_completion_io+0x270/0x270
[ 2237.180647]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2237.181785]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2237.182917]  do_syscall_64+0x33/0x40
[ 2237.183727]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2237.184836] RIP: 0033:0x7f5d125b0b19
[ 2237.185642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2237.189649] RSP: 002b:00007f5d0fb26108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2237.191314] RAX: ffffffffffffffda RBX: 00007f5d126c3f60 RCX: 00007f5d125b0b19
[ 2237.192859] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895
[ 2237.194410] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100
[ 2237.195976] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100
[ 2237.197518] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000
11:42:06 executing program 3:
r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000001, 0x100010, 0xffffffffffffffff, 0x8000000)
r1 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x80000000]}, 0x8, 0x80800)
r2 = syz_io_uring_setup(0x807d04, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x2, 0x1fffff, 0x0, r1}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_submit(0x0, r3, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000280)=@rc={0x1f, @none, 0x6}, 0x0, 0x0, 0x1}, 0x0)
syz_io_uring_submit(r0, r3, &(0x7f0000000080)=@IORING_OP_OPENAT={0x12, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x80, 0x12345}, 0x5)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r5 = dup(r2)
r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f0000000180)=r6, 0x1)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x8000000)

[ 2237.268132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2237.270090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2237.272077] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:42:06 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat2(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x80000, 0x110, 0x8}, 0x18)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x8000000)

11:42:22 executing program 5:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x4000, 0x0, 0x0, 0x0)

11:42:22 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

11:42:22 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x9)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x4000007ffffffc)
r2 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r5, 0x0, &(0x7f0000000240), 0x800)
syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r2, 0x14c4, 0x5e00, 0x0, 0x0, 0x0)

11:42:22 executing program 6:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:42:22 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 59)

11:42:22 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000500)=@dstopts={0x0, 0xfe, '\x00', [@generic={0x0, 0x7ef, "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"}]}, 0x800)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='/proc/self/exe\x00', 0x0, 0x0)
r2 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x8000000)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8, 0x12, r2, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x8000000)
quotactl(0x10001, &(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000080)="038dcd34b922a0654cb42ce764b5a8a26b440c84ba345ba955f85722aea47bec17cc2ec542e812968a0785e15d15e30a5aac3311a9ef26fe78d80ea4fd13caa9f9509009a1faa2887b1d834b37d6eeab94f44d68aee943199a1485903571ba1a35807ccf83bf5d517c78e6a1b0f636cd")
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmmsg$inet(r3, &(0x7f0000002f40)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001280)=[@ip_retopts={{0x18, 0x0, 0x7, {[@timestamp_addr={0x44, 0x4, 0x54}, @timestamp={0x44, 0x4}]}}}], 0x18}}], 0x1, 0x0)
sendmsg(r3, &(0x7f0000000dc0)={&(0x7f0000000100)=@vsock, 0x80, &(0x7f0000000480)=[{&(0x7f0000000180)="4edf78acfe6f7383eb21733f618e6454ba631b076558046ac7abe77c10fcd9507ee66ec02739d8279e73c14de92562ae743a02dc6b7f7503a53151c0fbd9", 0x3e}, {&(0x7f00000001c0)="bac784a39cd53c2935711ade01b0b75a616a5da2094677f4", 0x18}, {&(0x7f0000000200)="c81da865cbbb92b9d29dbe4d856290582710cb65d24b819d2d332fef9b4733eac9606c69e72b494337c98f23303b6009013fa9a46751d1219ca2f34f909c707363df3b0dd9c5be3116c196296d4eda2a4281145cb7", 0x55}, {&(0x7f0000000280)="aae43c390a3a11cec652ebbecfa38bbd58b37cc77457ed4dbd551e6ca74d1473371066ca8babcc7e890b5b1957628ea337c0b89085bbfe3880237036ab079ed881ab", 0x42}, {&(0x7f0000000300)="f407f5591a12cb6eaccd5c098f8da162788c79fd608d8fd2e40e7011774bfabd67246a11e907e0c8144620bdde12d9532a845e419c3879afcbbcd3ad91086b2da44132a91e1cd1c5c34083c17a782bcc123d0e7b7f71044e4d4ed0180a4d3d408953517fe0bde8a09590f90e11b47faf2a1734d9b7e3a55e0fe6774944f919751f3e3a664dda74f1f19301e1cff41739ed3684a11417d6c9e053e03790482e074d7ff4ff543572296264c63f38b60ab60d8aee4d58482237fdf03cd9b3b68db68f8de8c79db6b3410f92501dd03e5fb9b8a4b1e2aa3fe7f950bdcfe403002303ad9d72710d1db5", 0xe7}, {&(0x7f0000000400)="c929fbd1bff17eff094fa2426a954f7980a7966130edd5aa8f5fbcf8c96c538726772b640eb511f1bea7e45d7ffdf78a3e992e85b4bcfedde1a8e495a4e179c3b7f22f37c7382e8196b21b1850431ab616988fb59deefce86abbe9de1a5d13125e38d7b085f628a6841e60a7", 0x6c}], 0x6, &(0x7f0000000d00)=[{0xa0, 0x0, 0x539, "c3bec0e3c7fa4d3f8b8d385eb3c9b5dfe434784bbc9df652137c7c2a96a62831b208618bcdcf0eb1216c978d376d2760c9fb4faef3cdfe8157d29a488bad315d3ce130919065f77c0dcd716378675ef6af0b8fd393c006cf85b0abd76a63520bf5be13ddc9b6c2da97003bf047e8b4f9920289ffc3acbf834dbfd9a6eca36d124e1327124294f4997326305e64b79f"}], 0xa0}, 0x20044110)

11:42:22 executing program 7:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x48080, 0x0)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x5e00, 0x0, 0x0, 0x0)

11:42:22 executing program 1:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

[ 2253.085009] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2253.104376] FAULT_INJECTION: forcing a failure.
[ 2253.104376] name failslab, interval 1, probability 0, space 0, times 0
[ 2253.106898] CPU: 1 PID: 10222 Comm: syz-executor.2 Not tainted 5.10.261 #1
[ 2253.108410] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2253.110230] Call Trace:
[ 2253.110829]  dump_stack+0x107/0x167
[ 2253.111635]  should_fail.cold+0x5/0xa
[ 2253.112478]  ? xas_alloc+0x336/0x440
[ 2253.113301]  should_failslab+0x5/0x20
[ 2253.114139]  kmem_cache_alloc+0x5b/0x310
[ 2253.115050]  xas_alloc+0x336/0x440
[ 2253.115835]  xas_create+0x34a/0x10d0
[ 2253.116672]  ? kernel_text_address+0xf2/0x120
[ 2253.117658]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2253.118813]  xas_store+0x8c/0x1c40
[ 2253.119616]  __xa_store+0x164/0x2d0
[ 2253.120406]  ? xa_delete_node+0x280/0x280
[ 2253.121312]  ? trace_hardirqs_on+0x5b/0x180
[ 2253.122256]  xa_store+0x31/0x50
[ 2253.122986]  __io_uring_add_tctx_node+0x1cf/0x520
[ 2253.124032]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2253.125171]  ? alloc_fd+0x2e7/0x670
[ 2253.125977]  io_uring_setup+0x1fbb/0x2980
[ 2253.126893]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2253.128253]  ? wait_for_completion_io+0x270/0x270
[ 2253.129391]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2253.130543]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2253.131697]  do_syscall_64+0x33/0x40
[ 2253.132525]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2253.133653] RIP: 0033:0x7f5d125b0b19
[ 2253.134503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2253.138490] RSP: 002b:00007f5d0fb26108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2253.138510] RAX: ffffffffffffffda RBX: 00007f5d126c3f60 RCX: 00007f5d125b0b19
11:42:22 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x1a1)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)

[ 2253.138520] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895
[ 2253.138530] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100
[ 2253.138540] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100
[ 2253.138551] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000
[ 2253.218450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2253.219519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2253.220545] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:42:22 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0xd602, 0x1)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)

11:42:22 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

[ 2253.372447] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2253.441258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2253.442234] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2253.443196] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:42:37 executing program 5:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x4002, 0x0, 0x0, 0x0)

11:42:37 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x450640, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)

11:42:37 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x9)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x4000007ffffffc)
r2 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r5, 0x0, &(0x7f0000000240), 0x800)
syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r2, 0x14c4, 0x80fe, 0x0, 0x0, 0x0)

11:42:37 executing program 6:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:42:37 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 60)

11:42:37 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

11:42:37 executing program 1:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:42:37 executing program 7:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x48080, 0x0)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x80fe, 0x0, 0x0, 0x0)

[ 2267.750330] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2267.774179] FAULT_INJECTION: forcing a failure.
[ 2267.774179] name failslab, interval 1, probability 0, space 0, times 0
[ 2267.776381] CPU: 0 PID: 10259 Comm: syz-executor.2 Not tainted 5.10.261 #1
[ 2267.777677] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2267.779248] Call Trace:
[ 2267.779761]  dump_stack+0x107/0x167
[ 2267.780442]  should_fail.cold+0x5/0xa
[ 2267.781164]  ? create_object.isra.0+0x3a/0xa30
[ 2267.782020]  should_failslab+0x5/0x20
[ 2267.782740]  kmem_cache_alloc+0x5b/0x310
[ 2267.783504]  ? mark_held_locks+0x9e/0xe0
[ 2267.784269]  create_object.isra.0+0x3a/0xa30
[ 2267.785082]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2267.786027]  kmem_cache_alloc+0x159/0x310
[ 2267.786804]  xas_alloc+0x336/0x440
[ 2267.787456]  xas_create+0x34a/0x10d0
[ 2267.788145]  ? kernel_text_address+0xf2/0x120
[ 2267.788978]  ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0
[ 2267.789948]  xas_store+0x8c/0x1c40
[ 2267.790623]  __xa_store+0x164/0x2d0
[ 2267.791361]  ? xa_delete_node+0x280/0x280
[ 2267.792129]  ? trace_hardirqs_on+0x5b/0x180
[ 2267.792944]  xa_store+0x31/0x50
[ 2267.793561]  __io_uring_add_tctx_node+0x1cf/0x520
[ 2267.794461]  ? io_uring_alloc_task_context+0x6a0/0x6a0
[ 2267.795434]  ? alloc_fd+0x2e7/0x670
[ 2267.796122]  io_uring_setup+0x1fbb/0x2980
[ 2267.796905]  ? __do_sys_io_uring_enter+0x1890/0x1890
[ 2267.797842]  ? wait_for_completion_io+0x270/0x270
[ 2267.798757]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2267.799744]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2267.800707]  do_syscall_64+0x33/0x40
[ 2267.801394]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2267.802352] RIP: 0033:0x7f5d125b0b19
[ 2267.803054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[ 2267.806428] RSP: 002b:00007f5d0fb26108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9
[ 2267.807833] RAX: ffffffffffffffda RBX: 00007f5d126c3f60 RCX: 00007f5d125b0b19
[ 2267.809143] RDX: 0000000020ffb000 RSI: 00000000200001c0 RDI: 0000000000007895
[ 2267.810447] RBP: 00000000200001c0 R08: 0000000020000100 R09: 0000000020000100
[ 2267.811766] R10: 0000000020000040 R11: 0000000000000202 R12: 0000000020000100
[ 2267.813073] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000
[ 2267.836083] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2267.837429] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2267.838885] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:42:37 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = syz_open_dev$vcsu(&(0x7f0000000040), 0xaee, 0x440040)
r2 = perf_event_open(&(0x7f0000000480)={0x3, 0x80, 0x9, 0x5, 0x1, 0xc0, 0x0, 0x4, 0x2000, 0x6, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7, 0x0, @perf_config_ext={0xf73, 0x2}, 0x104, 0x10000, 0x4, 0x0, 0x5, 0x7, 0x7fff, 0x0, 0x101, 0x0, 0x1}, 0x0, 0xe, 0xffffffffffffffff, 0x2)
recvmmsg$unix(r1, &(0x7f00000018c0)=[{{&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000001780)=[{&(0x7f0000000580)=""/23, 0x17}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/246, 0xf6}, {&(0x7f00000016c0)=""/36, 0x24}, {&(0x7f0000001700)=""/89, 0x59}], 0x5, &(0x7f0000001800)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x98}}], 0x1, 0x0, &(0x7f0000001900)={0x0, 0x989680})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000001940)={{r3}, 0x0, 0xc, @unused=[0xffff, 0x61, 0x3, 0x8], @name="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"})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000080)={0x0, 0x0, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)

11:42:37 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

[ 2267.975125] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
11:42:37 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$unix(0x1, 0x0, 0x0)
ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000040))
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)
r2 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x8000000)
mkdirat(r2, &(0x7f00000000c0)='./file0\x00', 0x9)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
fchmodat(r3, &(0x7f0000000100)='./file0\x00', 0x42)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000080))

[ 2268.048560] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2268.049730] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2268.050949] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:42:37 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 61)

11:42:37 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x0)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

[ 2268.155745] FAULT_INJECTION: forcing a failure.
[ 2268.155745] name failslab, interval 1, probability 0, space 0, times 0
[ 2268.157448] CPU: 0 PID: 10282 Comm: syz-executor.2 Not tainted 5.10.261 #1
[ 2268.158460] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2268.159681] Call Trace:
[ 2268.160068]  dump_stack+0x107/0x167
[ 2268.160593]  should_fail.cold+0x5/0xa
[ 2268.161135]  ? vm_area_alloc+0x1c/0x110
[ 2268.161708]  should_failslab+0x5/0x20
[ 2268.162248]  kmem_cache_alloc+0x5b/0x310
[ 2268.162846]  vm_area_alloc+0x1c/0x110
[ 2268.163386]  mmap_region+0x982/0x1500
[ 2268.163940]  do_mmap+0x868/0x1370
[ 2268.164439]  vm_mmap_pgoff+0x198/0x1f0
[ 2268.164999]  ? randomize_page+0xb0/0xb0
[ 2268.165589]  ksys_mmap_pgoff+0x41c/0x560
[ 2268.166172]  ? find_mergeable_anon_vma+0x250/0x250
[ 2268.166884]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2268.167637]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2268.168377]  do_syscall_64+0x33/0x40
[ 2268.168909]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2268.169634] RIP: 0033:0x7f5d125b0b62
[ 2268.170166] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64
[ 2268.172761] RSP: 002b:00007f5d0fb260f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009
[ 2268.173838] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f5d125b0b62
[ 2268.174880] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffc000
[ 2268.175883] RBP: 0000000020ffc000 R08: 0000000000000006 R09: 0000000000000000
[ 2268.176889] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000100
[ 2268.177913] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000
11:42:37 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000003280)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000040)="e1", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)="92b888805cb808b1378d1dbf4b928885657e6a5a77d1ac9a3fea7448850e0d737b5479161d0825f599c57bed7210bd6ab6cc79af7f76560c3c746e81763143d35e426aab9eaadd3b8839cb8cad76a59294e8544021a06bd7cd2f888f1f47f37d63aa6cdd31c692229d7adf7165c5fee7010317cc01420cd779924ee115de5e1e996371c3e6a2eecab6619f088ca9531833afed5961e051995b7316f983ba74c6b0e53136d8b46174447343208f258a3188dd7dcfb518633fe4e2f972891423db", 0xc0}, {&(0x7f0000001700)="e9152dde2e7a2e28cdd4c1afe61d7dcbc36c855de9a00dfa761babbecd8ce2d48f4048ae5d659684c9f0497d7ef001b816e4bb2b27adee5c5fa7707c203fcf56975f4e2cdfae7819be7fd6bc72034fe373bca6f999e936eab3a02e5260cf52666b82dc611c9b5e85ad395cb9a29dd6dbe3", 0x71}, {&(0x7f0000001780)="acb57508d3e85402995a4c117be30b4a6964b8587a36feeba4a72f86d4d2041c0adc5ab6d792bb43c800089f8c465ea5dfb00ec8821492b5a566333397dc8481619d7a493f5da4d944962f8287d3df91f6f8edcfdd0a6dfc2eb5fe26e54dd6777b833b97f47fc750da4de926a0024cbfa49fbfdd78312aeaa523d517bb9932c019a6645df37a975a363a9feacc5e4d300ab02c8bd951c1275c39eb7e7caa103a2fcf746883e62d633a9a712923a09af8a5906f191b00732caf3023d968380caa424df486fe18d0a57b66e8e645a07b16180dbcb76bf83af5bf74e8", 0xdb}], 0x3}}, {{0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f00000018c0)="e1", 0x1}], 0x1, &(0x7f0000004980)=ANY=[@ANYBLOB="a8"], 0xa8}}, {{0x0, 0x0, 0x0}}], 0x4, 0x4040)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000001040)='ext3\x00', &(0x7f0000001080)='./file0\x00', 0xa00000, 0x5, &(0x7f0000001440)=[{&(0x7f00000010c0)="73ecb739fde76bcc7857a4b3691bcd9ff61f38d265268b64c5f90b731d475d4208f2ae702f584ce2e892596215162d2cd8aa6e95077fdab3151aea569a958a1b12c4d88c4fd5aa95888228948310862aac6894397954de6c52ff224ef8c7616d880b5483acac8cc8ee1926f29fb45335a91572ee6ec979be67ce392f084850448570b9c8b2c5f3933a8663b96a2b5b14457b479a70b2305991da189090d14503948a9b4105b411a305165c79c13274a0a0125e", 0xb3, 0x8001}, {&(0x7f0000001180)="580487f510a10d98bfc5051e45a9b690fd6dd354e99347355ef194fba0e03f6fcd5f2b51edee1cf74e020b396f9fbcca96", 0x31, 0x9}, {&(0x7f00000011c0)="5af8e40555a6986b334def404e411e5aa04b2790bc9ac6def39d0f5ea7bbc7d8a6762ba1198e652d1e414f1441092ea9470969ade0c5886cf259b5cd6aa38d8959b4bf7608997c2e3085e6ffc228dc77ff17b08410cd1639d4d67ba3a0f7b732291d256819b50e2c2cf6f2e021dd4ca3cd17cfca4be445a4e0bbe1eacac80d72b5fda14c2452a8eb368f0c1b817ed5bcf7d2714e96415062af97202ccc87cc86ec2f583d5b2bcbda81d4f64abc9fde497e7e1c9b208e", 0xb6, 0x4}, {&(0x7f0000001280)="ff9ec8c5d56721d96792548740974f4eabc1bf6bc158b25e886d22b5eb7c628db2ca5f236a6302eed2e70e0cbfd23d9d220d616e67d433c062d4e955b63aa54f02b01789ab00185092a3214e2d48b160f6b6eca778921fa3c733e58cd3dd117a64a4ac5bc508c6b82d45f37d25d4d5e41ef83cecb732ba35a13b66453a2a0354f32698a8ecb892465ff7e6781083d447e07851db476d5c46e3f9540461eb10feaf57858081180deae5c2317eef89ef905831b51994ea9dc0bd687848fa96e9005ab0b1ca587b94c4575863eb3dfdeadc79383dcb", 0xd4, 0x7}, {&(0x7f0000001380)="0264bce4c6f013dc3bd28587688197eaf73ab232f1a4131b5c96c4e1bf84bf4eea08ffa3b251d8589d5deb6f9b43dd11f832135a2c28824a74519e553a005a3209da754164c0993088e47fc08197b8766a062f01d3477b7d2517fd9e88528b513968d317b8e4bc7d149fc1660ed8f264ba9bb9cf30eb43b6cc9a4f052fac0c6453c2cee8c4bec26b8d721c37cf4af98cea14c9eeb388fc637261e34e706fbe4361517abd682c53572e80b3d29b741008c5708c17f170eb749ab3252732", 0xbd, 0xffffffff}], 0x82800, &(0x7f00000014c0)=ANY=[@ANYBLOB="73623d3078303030303030303030303030303030382c6d61736b3d4d41595f57524954452c6f626a5f747970653d28262f2b277d972b2829d20d008095c2548c65723d2d2c7375626a5f757365723d2d24245c2c00"])
pwrite64(r0, &(0x7f0000000040)="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", 0x1000, 0x7)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)

[ 2268.208981] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2268.265029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2268.266175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2268.267259] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2268.289561] loop3: detected capacity change from 0 to 135266304
11:42:37 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(0x0, 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

11:42:37 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 62)

[ 2268.391890] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2268.483884] FAULT_INJECTION: forcing a failure.
[ 2268.483884] name failslab, interval 1, probability 0, space 0, times 0
[ 2268.486716] CPU: 1 PID: 10292 Comm: syz-executor.2 Not tainted 5.10.261 #1
[ 2268.488380] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2268.490351] Call Trace:
[ 2268.490980]  dump_stack+0x107/0x167
[ 2268.491940]  should_fail.cold+0x5/0xa
[ 2268.492889]  ? create_object.isra.0+0x3a/0xa30
[ 2268.493993]  should_failslab+0x5/0x20
[ 2268.494927]  kmem_cache_alloc+0x5b/0x310
[ 2268.496078]  create_object.isra.0+0x3a/0xa30
[ 2268.497129]  ? __kasan_kmalloc.constprop.0+0xc9/0xd0
[ 2268.498415]  kmem_cache_alloc+0x159/0x310
[ 2268.499576]  vm_area_alloc+0x1c/0x110
[ 2268.500598]  mmap_region+0x982/0x1500
[ 2268.501652]  do_mmap+0x868/0x1370
[ 2268.502635]  vm_mmap_pgoff+0x198/0x1f0
[ 2268.503700]  ? randomize_page+0xb0/0xb0
[ 2268.504752]  ksys_mmap_pgoff+0x41c/0x560
[ 2268.505820]  ? find_mergeable_anon_vma+0x250/0x250
[ 2268.507133]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2268.508361]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2268.509583]  do_syscall_64+0x33/0x40
[ 2268.510432]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2268.511657] RIP: 0033:0x7f5d125b0b62
[ 2268.512475] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64
[ 2268.516725] RSP: 002b:00007f5d0fb260f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009
[ 2268.518343] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f5d125b0b62
[ 2268.519876] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffc000
[ 2268.521344] RBP: 0000000020ffc000 R08: 0000000000000006 R09: 0000000000000000
[ 2268.522811] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000100
[ 2268.524269] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000
[ 2268.528637] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2268.530281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2268.532070] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:42:51 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2400000010000100000000ec0000009600000900050000000000000005000080480000006fe884b7f11ac8f1810d0dc930b7fbbdfe445812bd4e3ddf303ed73209364a02ef9768d0c54531c0e48e8b51a2f78d54f00d9cdd3a5569eaaaf9d57fd00fe7eff61a89507780518151ccc61d149f11066c74aac60fe6c088582777cddc52bd82c5ef927b1c475f2e339546488ff742ba361f30616ba6000013203bece0c63d63d44a2d8033a9f2319b5d7e75aed01f84fbba37b71774867fc770eb6690f7a3c3e0d63d75b35925d7980ce0513e1600a3b9b8634496ce235be6daabe6f870e770a7124542c63a0febe8281dfa46ca86343801a72702c3c16a"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(0x0, 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

11:42:51 executing program 1:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

[ 2282.095227] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
11:42:51 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)

11:42:51 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 63)

11:42:51 executing program 6:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:42:51 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x9)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x4000007ffffffc)
r2 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r5, 0x0, &(0x7f0000000240), 0x800)
syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r2, 0x14c4, 0xc0fe, 0x0, 0x0, 0x0)

11:42:51 executing program 5:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x5000, 0x0, 0x0, 0x0)

11:42:51 executing program 7:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x48080, 0x0)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0xc0fe, 0x0, 0x0, 0x0)

[ 2282.178092] FAULT_INJECTION: forcing a failure.
[ 2282.178092] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2282.180778] CPU: 1 PID: 10315 Comm: syz-executor.2 Not tainted 5.10.261 #1
[ 2282.182288] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2282.184116] Call Trace:
[ 2282.184704]  dump_stack+0x107/0x167
[ 2282.185500]  should_fail.cold+0x5/0xa
[ 2282.186339]  __alloc_pages_nodemask+0x182/0x600
[ 2282.187385]  ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320
[ 2282.188699]  ? walk_mem_res+0x170/0x170
[ 2282.189561]  alloc_pages_current+0x187/0x280
[ 2282.190529]  pte_alloc_one+0x16/0x1a0
[ 2282.191381]  __pte_alloc+0x1d/0x330
[ 2282.192188]  remap_pfn_range_internal+0x9a3/0xf60
[ 2282.193252]  ? lookup_memtype+0x5b/0x200
[ 2282.194140]  ? apply_to_existing_page_range+0x40/0x40
[ 2282.195293]  remap_pfn_range+0xcd/0x160
[ 2282.196145]  ? remap_pfn_range_notrack+0x70/0x70
[ 2282.197163]  ? memcg_slab_post_alloc_hook+0x17a/0x430
[ 2282.198272]  io_uring_mmap+0x398/0x530
[ 2282.199119]  mmap_file+0x5e/0xe0
[ 2282.199838]  mmap_region+0xc4d/0x1500
[ 2282.200670]  do_mmap+0x868/0x1370
[ 2282.201415]  vm_mmap_pgoff+0x198/0x1f0
[ 2282.202253]  ? randomize_page+0xb0/0xb0
[ 2282.203145]  ksys_mmap_pgoff+0x41c/0x560
[ 2282.204018]  ? find_mergeable_anon_vma+0x250/0x250
[ 2282.205080]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2282.206200]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2282.207345]  do_syscall_64+0x33/0x40
[ 2282.208164]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2282.209262] RIP: 0033:0x7f5d125b0b62
[ 2282.210063] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64
[ 2282.214023] RSP: 002b:00007f5d0fb260f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009
[ 2282.214081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2282.215675] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f5d125b0b62
[ 2282.215688] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffc000
[ 2282.215711] RBP: 0000000020ffc000 R08: 0000000000000006 R09: 0000000000000000
[ 2282.217260] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2282.218753] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000100
[ 2282.218770] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000
11:42:51 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmmsg$inet(r1, &(0x7f0000002f40)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001280)=[@ip_retopts={{0x18, 0x0, 0x7, {[@timestamp_addr={0x44, 0x4, 0x54}, @timestamp={0x44, 0x4}]}}}], 0x18}}], 0x1, 0x0)
ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x1, 0x6, 0x9, 0x1, 0x5})
creat(&(0x7f0000000040)='./file0\x00', 0x44)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x12, r0, 0x8000000)

[ 2282.267831] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:42:51 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2400000010000100000000ec0000009600000900050000000000000005000080480000006fe884b7f11ac8f1810d0dc930b7fbbdfe445812bd4e3ddf303ed73209364a02ef9768d0c54531c0e48e8b51a2f78d54f00d9cdd3a5569eaaaf9d57fd00fe7eff61a89507780518151ccc61d149f11066c74aac60fe6c088582777cddc52bd82c5ef927b1c475f2e339546488ff742ba361f30616ba6000013203bece0c63d63d44a2d8033a9f2319b5d7e75aed01f84fbba37b71774867fc770eb6690f7a3c3e0d63d75b35925d7980ce0513e1600a3b9b8634496ce235be6daabe6f870e770a7124542c63a0febe8281dfa46ca86343801a72702c3c16a"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(0x0, 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

11:42:51 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x96001, 0x0)
r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x8010, r0, 0x8000000)

[ 2282.444381] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2282.513613] ------------[ cut here ]------------
[ 2282.514875] WARNING: CPU: 1 PID: 10315 at arch/x86/mm/pat/memtype.c:1019 get_pat_info+0x216/0x270
[ 2282.516856] Modules linked in:
[ 2282.517601] CPU: 1 PID: 10315 Comm: syz-executor.2 Not tainted 5.10.261 #1
[ 2282.519163] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2282.521008] RIP: 0010:get_pat_info+0x216/0x270
[ 2282.522033] Code: c1 ea 03 80 3c 02 00 75 71 49 89 1e eb 8e e8 f1 96 2e 00 0f 0b e9 97 fe ff ff 41 bc ea ff ff ff e9 77 ff ff ff e8 da 96 2e 00 <0f> 0b 41 bc ea ff ff ff e9 65 ff ff ff 4c 89 ff e8 a5 b9 5a 00 e9
[ 2282.531833] RSP: 0018:ffff8880445d7890 EFLAGS: 00010216
[ 2282.533034] RAX: 0000000000016025 RBX: ffff88800d4a1800 RCX: ffffc90004e16000
[ 2282.534628] RDX: 0000000000040000 RSI: ffffffff811255f6 RDI: 0000000000000007
[ 2282.536231] RBP: ffff8880445d7948 R08: 0000000000000000 R09: ffff8880445d7818
[ 2282.537822] R10: 0000000000000020 R11: 0000000000000001 R12: 0000000000000028
[ 2282.539414] R13: 1ffff110088baf12 R14: 0000000000000000 R15: ffff88800d4a1850
[ 2282.541012] FS:  00007f5d0fb26700(0000) GS:ffff88806cf00000(0000) knlGS:0000000000000000
[ 2282.542794] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2282.544109] CR2: 0000000000000004 CR3: 0000000044082000 CR4: 0000000000350ee0
[ 2282.545672] Call Trace:
[ 2282.546239]  ? pgprot_writethrough+0xc0/0xc0
[ 2282.547277]  ? finish_task_switch+0x126/0x5d0
[ 2282.548283]  ? finish_task_switch+0xef/0x5d0
[ 2282.549284]  untrack_pfn+0xdc/0x240
[ 2282.550114]  ? track_pfn_insert+0x150/0x150
[ 2282.551106]  ? lock_downgrade+0x6d0/0x6d0
[ 2282.552040]  ? uprobe_munmap+0x95/0x670
[ 2282.552945]  unmap_single_vma+0x1bc/0x300
[ 2282.553653] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2282.553891]  zap_page_range_single+0x2ce/0x450
[ 2282.555459] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2282.556423]  ? unmap_single_vma+0x300/0x300
[ 2282.558754]  ? remap_pfn_range_internal+0xc56/0xf60
[ 2282.559907]  ? lookup_memtype+0x5b/0x200
[ 2282.560833]  ? apply_to_existing_page_range+0x40/0x40
[ 2282.561990]  remap_pfn_range+0x139/0x160
[ 2282.562270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 2282.562917]  ? remap_pfn_range_notrack+0x70/0x70
[ 2282.562952]  ? memcg_slab_post_alloc_hook+0x17a/0x430
[ 2282.562990]  io_uring_mmap+0x398/0x530
[ 2282.563017]  mmap_file+0x5e/0xe0
[ 2282.563037]  mmap_region+0xc4d/0x1500
[ 2282.563070]  do_mmap+0x868/0x1370
[ 2282.563098]  vm_mmap_pgoff+0x198/0x1f0
[ 2282.563122]  ? randomize_page+0xb0/0xb0
[ 2282.563156]  ksys_mmap_pgoff+0x41c/0x560
[ 2282.563178]  ? find_mergeable_anon_vma+0x250/0x250
[ 2282.563202]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2282.563226]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2282.563250]  do_syscall_64+0x33/0x40
[ 2282.563271]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2282.563285] RIP: 0033:0x7f5d125b0b62
[ 2282.563304] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64
[ 2282.563315] RSP: 002b:00007f5d0fb260f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009
[ 2282.563337] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f5d125b0b62
[ 2282.563349] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffc000
[ 2282.563361] RBP: 0000000020ffc000 R08: 0000000000000006 R09: 0000000000000000
[ 2282.563372] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000100
[ 2282.563384] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000
[ 2282.563412] irq event stamp: 2823
[ 2282.563436] hardirqs last  enabled at (2829): [<ffffffff8129eaa0>] vprintk_emit+0x490/0x4e0
[ 2282.563458] hardirqs last disabled at (2834): [<ffffffff8129ea32>] vprintk_emit+0x422/0x4e0
[ 2282.563482] softirqs last  enabled at (2368): [<ffffffff84001092>] asm_call_irq_on_stack+0x12/0x20
[ 2282.563505] softirqs last disabled at (2315): [<ffffffff84001092>] asm_call_irq_on_stack+0x12/0x20
[ 2282.563522] ---[ end trace 9fc1ff6d4969bf0a ]---
11:42:52 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x0, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

11:42:52 executing program 3:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000040), 0x4, 0x140)
syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f00003b7000/0x4000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="01"], 0x34}}, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000005c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x0}}, 0x0)
r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000008, 0x30, r1, 0x10000000)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmmsg$inet(r6, &(0x7f0000002f40)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001280)=[@ip_retopts={{0x18, 0x0, 0x7, {[@timestamp_addr={0x44, 0x4, 0x54}, @timestamp={0x44, 0x4}]}}}], 0x18}}], 0x1, 0x0)
r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r8 = signalfd4(r7, &(0x7f0000000140)={[0x1]}, 0x8, 0x800)
r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6000, @fd=r8, 0x7, 0x0, 0x0, 0x2}, 0x8)
sendmsg$AUDIT_ADD_RULE(r8, &(0x7f0000001c80)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001800)={0x424, 0x3f3, 0x200, 0x70bd27, 0x25dfdbff, {0x2, 0x2, 0x22, [0x7fffffff, 0xab8, 0x0, 0x8, 0x3ff, 0xfffffffc, 0x841, 0x800, 0x1, 0x81, 0xbe1, 0x3, 0x0, 0x34f, 0x5, 0xa20, 0x10001, 0x2, 0x5, 0x7c165890, 0xffff, 0x200, 0x580, 0x6, 0x4, 0x8, 0x3, 0x401, 0x4, 0x9, 0x3, 0x80000000, 0x7ff, 0xa7fb, 0x7, 0x2, 0x5d4, 0x0, 0x93, 0xfff, 0x6, 0x3, 0x8, 0x20, 0xe7f2, 0x6, 0x8d0, 0x9, 0x6, 0x101, 0x2, 0x6, 0x7, 0x5, 0x4, 0x5, 0x8, 0x2, 0x15c, 0x35f, 0x7, 0x3, 0x2, 0xffffff80], [0x8, 0x3d, 0x8, 0x4, 0x1, 0x2, 0x79, 0x80000000, 0x90d, 0x4, 0x8, 0x400, 0x6050, 0x5, 0xfffffffb, 0x4, 0x8001, 0x7, 0xffffffff, 0x7fffffff, 0x5, 0x7ff, 0x101, 0xfff, 0x8, 0x43, 0x7ff, 0x3, 0x400, 0x0, 0x1000, 0x5, 0x6, 0x2, 0x7, 0x9, 0x81, 0x1e4, 0xfb, 0x6, 0xffff0001, 0x1, 0xda, 0x81, 0x9, 0xe2fc, 0x0, 0x9, 0x5, 0x20, 0x6, 0x0, 0x9b, 0x0, 0x400, 0x6, 0x9, 0x1, 0x2, 0xfffffffa, 0x0, 0x80000001, 0xfffffffb, 0x5], [0xfffffff9, 0xfff, 0xffff, 0xf76, 0x2, 0xac, 0x0, 0x1, 0x8001, 0x3ff, 0x9, 0x8001, 0x6, 0x11, 0x2, 0x5e, 0x40, 0x80000, 0x5, 0x0, 0x1f, 0x47, 0x8, 0x45a1, 0x0, 0x400, 0x934b, 0x7, 0x2, 0xb7c1, 0x0, 0x0, 0x2749, 0x40, 0x188807d6, 0x0, 0x6, 0x14b, 0xb7, 0xffffffff, 0x9878, 0x3e934a4b, 0x8, 0x1, 0x800, 0x7, 0x3, 0x2a6e, 0x7ff, 0xfff, 0x1, 0x8, 0x1, 0x1, 0x3ff, 0xfff, 0x9, 0x8001, 0x6, 0x2, 0x8, 0x0, 0x6, 0x9a72], [0xf25a, 0x9, 0x10001, 0xb, 0x4d6, 0x7f, 0xdf56, 0x7f5, 0x4e, 0x3, 0xffff, 0xfffffff8, 0x8, 0x4, 0x5d, 0x1ff, 0x80000000, 0x9, 0x1, 0x4, 0x7fff, 0x40, 0x1, 0x2, 0x6, 0x32, 0x4, 0x81, 0xfffffff7, 0x2c1, 0x0, 0x5ee1, 0x7, 0xfffffffa, 0x7215, 0xb10, 0x6a9, 0x400, 0x3ff, 0x0, 0xd5, 0x6, 0x0, 0x401, 0x740, 0x7, 0x0, 0x669, 0x2, 0x66d0, 0x8, 0x3, 0xffffffff, 0x800, 0x7f, 0x8001, 0x0, 0x8, 0x40, 0x6, 0x0, 0x7, 0x401, 0xfffffffe], 0x1, ['\x00']}, [""]}, 0x424}}, 0x4810)
r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0)
syz_io_uring_submit(r9, 0x0, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)="8746dacb024638f474f76951d1690df5d45d65833db44ea3906a3585d0c3d65170c77e6f6737b5191ea0a9ea2a29f5ecda0a2425db63f586e743e6e0dc40c761b47363300c2509d97384afe42430314a87a5c177c0a6fc7829e1ddeed3a0eead7db95795dab9dcc6adf38d8b559e861ad05b2c69dcf7230df9ae", 0x7a, 0x40000040, 0x0, {0x0, r10}}, 0x9)
syz_io_uring_submit(r2, r5, &(0x7f0000001780)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, r6, 0x0, &(0x7f0000001740)={&(0x7f0000000080)=@caif=@dbg, 0x80, &(0x7f00000015c0)=[{&(0x7f0000000100)=""/102, 0x66}, {&(0x7f0000000180)=""/53, 0x35}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/42, 0x2a}, {&(0x7f0000001200)=""/215, 0xd7}, {&(0x7f0000001300)=""/200, 0xc8}, {&(0x7f0000001400)=""/189, 0xbd}, {&(0x7f00000014c0)=""/224, 0xe0}], 0x8, &(0x7f0000001640)=""/205, 0xcd}, 0x0, 0x40, 0x0, {0x3, r10}}, 0x1000)
perf_event_open(0x0, 0x0, 0x0, r1, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)

[ 2282.731849] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2282.807375] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2282.809067] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2282.810685] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:42:52 executing program 3:
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x2a0, 0x34, 0x400, 0x70bd27, 0x25dfdbfe, {0x12}, [@typed={0x4, 0x46}, @nested={0x22, 0x9, 0x0, 0x1, [@generic="53b8b31bd82ce9b88c40aaf95b65dddc948ee8896e929086d6dc73ec57f5"]}, @generic="8f26be33972d96d9e3afa3f07d2586d707358d6430244b69b5", @generic="295cd591c99ad8dcfd37ab2c751cd704347a9e5b29ec3b49d9ee2f8f489378efcf3f47113a3fbf084c23b263bc70385b495d8ec4489fe068e6fc119c261cb02bd656ff6e41d4b448ecc46051b511dbc01b7cf5eeb34809331b2d1bd72529883888c73efcf69b813c16dbc13a7f4d07c71b2d20422a7a45ad3a064b7e9f5e3a070465443bf75ef3c8ad071e918faec660f7632588c88a9bc2ed3b4bfeb3649fb9a6eccc9b883b1f1455c241265cc98af6b6925fd33ceb8c4f147f1414f8ce5dcb80321fc297e34cb9c2f90911b6b8beff8b9ed9629b21b408404acb6d4a2d129fbe7961616b6b4d9ff4", @nested={0x15e, 0x6d, 0x0, 0x1, [@generic="e204470ba1d65da0cb431ec2f2eed3501a4300be442888d60ee673392104f2950dc4c2faddd69d575831460aa2cbe6a55a3fe8ca04066e311080e3e7dc12a663349e951ceb1272ad2e5f4fe68bb2693772bbec2e37a8b7355dfa09673cac5c72a27ea2dc2e08d4aeb7b404aa0169a6476b4f82b04b6a2a81c0307ce9a651bacdcf692fd589d9a89d4010a54a0662ec2d3ace265f6c3ab828b035789e3bb5937cacdb932dc839f3938e74761253d442813366fb3a120c1de43669", @generic="2dcd6a1f572f6ed990438f103e9f8f97ad61d88f0490cd2f2f762a09a5fc005915173dfde52925dd6719eaf48d10641bd54ed7589e76997fd3817469915ee38c8db09b3d6ea4b5b6812642d84331f5178d58823a7e13e9e0121bd604af2c38cd172e619beefb420bbd46db8fc1024b650abd7fd6b7be1e60bbb332e640bbb59c3252bd81ce2b40c041d16929879a730e9a463e90", @typed={0xc, 0xd, 0x0, 0x0, @u64}]}]}, 0x2a0}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)

11:42:52 executing program 0:
r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x91}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002100)=ANY=[@ANYBLOB="e000000000008000000000000000", @ANYRES64=r0, @ANYBLOB="0100000000000d143aa14dd7469c08000300", @ANYRESOCT=r0, @ANYBLOB="18005a80140000800500140008", @ANYRES16=r0], 0x34}, 0x1, 0x0, 0x0, 0x4091}, 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x301000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000200)=ANY=[@ANYBLOB="e00073799b8f2dbe70adb1c7", @ANYRES32=<r2=>r1, @ANYBLOB='\b \x00\x00\x00\x00\x00\x00./file1\x00'])
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a})
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0x508)
r3 = syz_open_dev$vcsa(&(0x7f0000000180), 0x0, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r3, 0x8000000)
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x4, 0x6, 0x3f, 0x7, 0x0, 0x4, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x2, @perf_bp={&(0x7f0000000280), 0x2}, 0x13322, 0x8afb, 0x800, 0x2, 0x5, 0x8000, 0x4, 0x0, 0x2}, 0xffffffffffffffff, 0x1, r3, 0x3)
fallocate(0xffffffffffffffff, 0x2, 0xd4f4, 0xffffffff)
ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0)
syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0)
r4 = semget$private(0x0, 0x1, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, 0x0)
semctl$SEM_STAT_ANY(r4, 0x0, 0x14, &(0x7f0000000300)=""/85)

11:42:52 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x8000000)
syz_io_uring_setup(0x7895, &(0x7f00000001c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000100)) (fail_nth: 64)

[ 2283.019187] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2283.064027] FAULT_INJECTION: forcing a failure.
[ 2283.064027] name failslab, interval 1, probability 0, space 0, times 0
[ 2283.066137] CPU: 1 PID: 10346 Comm: syz-executor.2 Tainted: G        W         5.10.261 #1
11:42:52 executing program 1:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

11:42:52 executing program 6:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x0, 0x0, 0x0, 0x0)

[ 2283.067599] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014
[ 2283.069313] Call Trace:
[ 2283.069784]  dump_stack+0x107/0x167
[ 2283.070417]  should_fail.cold+0x5/0xa
[ 2283.071111]  ? ptlock_alloc+0x1d/0x70
[ 2283.071770]  should_failslab+0x5/0x20
[ 2283.072434]  kmem_cache_alloc+0x5b/0x310
[ 2283.073141]  ptlock_alloc+0x1d/0x70
[ 2283.073778]  pte_alloc_one+0x68/0x1a0
[ 2283.074446]  __pte_alloc+0x1d/0x330
[ 2283.075107]  remap_pfn_range_internal+0x9a3/0xf60
[ 2283.075931]  ? lookup_memtype+0x5b/0x200
[ 2283.076629]  ? apply_to_existing_page_range+0x40/0x40
[ 2283.077507]  remap_pfn_range+0xcd/0x160
[ 2283.078177]  ? remap_pfn_range_notrack+0x70/0x70
[ 2283.079001]  ? memcg_slab_post_alloc_hook+0x17a/0x430
[ 2283.079889]  io_uring_mmap+0x398/0x530
[ 2283.080559]  mmap_file+0x5e/0xe0
[ 2283.081144]  mmap_region+0xc4d/0x1500
[ 2283.081801]  do_mmap+0x868/0x1370
[ 2283.082389]  vm_mmap_pgoff+0x198/0x1f0
[ 2283.083073]  ? randomize_page+0xb0/0xb0
[ 2283.083763]  ksys_mmap_pgoff+0x41c/0x560
[ 2283.084470]  ? find_mergeable_anon_vma+0x250/0x250
11:42:52 executing program 3:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000180), 0x5, 0x400)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7, 0x13, r1, 0x8000000)
bind$802154_dgram(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newpolicy={0xb8, 0x13, 0x1, 0x0, 0x0, {{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x3c}}}, 0xb8}}, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x8000000)
r3 = getpgrp(0x0)
r4 = pidfd_open(r3, 0x0)
r5 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000040)={<r6=>r0, 0x7, 0xcc3, 0x7ff})
kcmp(0xffffffffffffffff, r3, 0x1, r6, r0)
fadvise64(r4, 0x100000000, 0x8000, 0x0)

[ 2283.085301]  ? lockdep_hardirqs_on_prepare+0x277/0x3e0
[ 2283.086293]  ? syscall_enter_from_user_mode+0x1d/0x50
[ 2283.087228]  do_syscall_64+0x33/0x40
[ 2283.087851]  entry_SYSCALL_64_after_hwframe+0x67/0xd1
[ 2283.088720] RIP: 0033:0x7f5d125b0b62
[ 2283.089346] Code: 00 00 00 00 00 0f 1f 00 41 f7 c1 ff 0f 00 00 75 27 55 48 89 fd 53 89 cb 48 85 ff 74 3b 41 89 da 48 89 ef b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 5b 5d c3 0f 1f 00 48 c7 c0 bc ff ff ff 64
[ 2283.092442] RSP: 002b:00007f5d0fb260f8 EFLAGS: 00000206 ORIG_RAX: 0000000000000009
[ 2283.093715] RAX: ffffffffffffffda RBX: 0000000000008011 RCX: 00007f5d125b0b62
[ 2283.094910] RDX: 0000000000000003 RSI: 0000000000120140 RDI: 0000000020ffc000
11:42:52 executing program 7:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x48080, 0x0)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0xe803, 0x0, 0x0, 0x0)

[ 2283.096123] RBP: 0000000020ffc000 R08: 0000000000000006 R09: 0000000000000000
[ 2283.097424] R10: 0000000000008011 R11: 0000000000000206 R12: 0000000020000100
[ 2283.098484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2283.098648] R13: 0000000020ffb000 R14: 0000000020000040 R15: 0000000020ffc000
[ 2283.101624] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2283.103445] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:42:52 executing program 4:
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x9)
sendfile(r1, 0xffffffffffffffff, 0x0, 0x4000007ffffffc)
r2 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r5, 0x0, &(0x7f0000000240), 0x800)
syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r2, 0x14c4, 0xe803, 0x0, 0x0, 0x0)

11:42:52 executing program 5:
r0 = openat(0xffffffffffffffff, 0x0, 0x48080, 0x0)
socket$netlink(0x10, 0x3, 0x9)
r1 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_open_procfs(0x0, &(0x7f0000000340)='net/ip_mr_cache\x00')
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @empty}}, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4(r4, &(0x7f0000000180)=@in={0x2, 0x0, @private}, &(0x7f0000000240)=0x80, 0x800)
syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r0, 0x0}, 0x8001)
io_uring_enter(r1, 0x14c4, 0x5e00, 0x0, 0x0, 0x0)

11:42:52 executing program 3:
openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1)


VM DIAGNOSIS:
11:42:52  Registers:
info registers vcpu 0
RAX=0000000000000000 RBX=1ffff110088bcf84 RCX=0000000000000000 RDX=dffffc0000000000
RSI=0000000000000000 RDI=ffffffff850a85b8 RBP=0000000000000000 RSP=ffff8880445e7ab0
R8 =0000000000000001 R9 =0000000000000001 R10=0000000000000046 R11=0000000000000001
R12=ffff88804282b480 R13=0000000000000000 R14=ffffffff850a85b8 R15=0000000000000000
RIP=ffffffff8126fc74 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007fc0ebe38700 00000000 00000000
GS =0000 ffff88806ce00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f62ac403d00 CR3=000000001776c000 CR4=00350ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff
XMM02=ffffffffffffffffffffffffffffffff XMM03=ffffffffffffffffffffffffffffffff
XMM04=ffffffffffffffffffffff0000000000 XMM05=00000000000000000000000000000000
XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000
XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000
info registers vcpu 1
RAX=0000000000000036 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff822eaf01 RDI=ffffffff879fc240 RBP=ffffffff879fc200 RSP=ffff8880445d7228
R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000000 R11=0000000000000001
R12=0000000000000036 R13=0000000000000036 R14=ffffffff879fc200 R15=dffffc0000000000
RIP=ffffffff822eaf58 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 00000000 00000000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 00000000 00000000
FS =0000 00007f5d0fb26700 00000000 00000000
GS =0000 ffff88806cf00000 00000000 00000000
LDT=0000 fffffe0000000000 00000000 00000000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000000000000004 CR3=0000000044082000 CR4=00350ee0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00ff0000000000000000000000000000 XMM01=00010000000000000000000000000000
XMM02=7463656a6e695f31313230385f7a7973 XMM03=00007f31a64947c800007f31a64947c0
XMM04=ffffffffffff0000ffffffff00000000 XMM05=00000000000000000000000000000000
XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000
XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000
XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000
XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000
XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000