45ec64776bc7d791c4d1fd8091cd3476bae3a05bae56ab34bcbeff5ddd1d8a65bc022525b413d13bc1a620d628d0ac", 0x70}}, 0x14) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x9, &(0x7f0000000140), 0x1, 0x1}, 0xa33) [ 1454.602186] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1454.603744] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1454.605479] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1454.610900] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1454.612856] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1454.614627] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 01:16:24 executing program 4: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 8) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091", 0x4e}}, 0x0) 01:16:24 executing program 7: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 35) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) [ 1468.157845] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1468.170994] FAULT_INJECTION: forcing a failure. [ 1468.170994] name failslab, interval 1, probability 0, space 0, times 0 [ 1468.173736] CPU: 1 PID: 9015 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 1468.173837] nfs: Unknown parameter ' ' [ 1468.175285] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1468.175292] Call Trace: [ 1468.175320] dump_stack+0x107/0x167 [ 1468.175346] should_fail.cold+0x5/0xa [ 1468.180058] ? create_object.isra.0+0x3a/0xa30 [ 1468.181092] should_failslab+0x5/0x20 [ 1468.181991] kmem_cache_alloc+0x5b/0x310 [ 1468.182922] ? mark_held_locks+0x9e/0xe0 [ 1468.183862] create_object.isra.0+0x3a/0xa30 [ 1468.184859] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1468.186026] kmem_cache_alloc_bulk+0x168/0x320 [ 1468.187071] io_submit_sqes+0x713e/0x8780 [ 1468.188019] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1468.189141] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1468.190279] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1468.191384] ? find_held_lock+0x2c/0x110 [ 1468.191664] nfs: Unknown parameter ' ' [ 1468.192313] ? io_submit_sqes+0x8780/0x8780 [ 1468.192344] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1468.194955] ? wait_for_completion_io+0x270/0x270 [ 1468.196042] ? rcu_read_lock_any_held+0x75/0xa0 [ 1468.197091] ? vfs_write+0x354/0xb10 [ 1468.197943] ? fput_many+0x2f/0x1a0 [ 1468.198779] ? ksys_write+0x1a9/0x260 [ 1468.199627] ? __ia32_sys_read+0xb0/0xb0 [ 1468.200551] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1468.201735] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1468.202912] do_syscall_64+0x33/0x40 [ 1468.203755] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1468.204920] RIP: 0033:0x7fe076d62b19 [ 1468.205767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1468.209942] RSP: 002b:00007fe0742d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1468.211672] RAX: ffffffffffffffda RBX: 00007fe076e75f60 RCX: 00007fe076d62b19 [ 1468.213276] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1468.214886] RBP: 00007fe0742d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1468.216484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1468.218087] R13: 00007ffebfddc57f R14: 00007fe0742d8300 R15: 0000000000022000 [ 1468.233904] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1468.235598] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1468.238854] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 01:16:24 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091cd3476bae3a05bae56ab34bcbeff5ddd1d8a65bc022525b413d13bc1a620d628d0ac", 0x70}}, 0x14) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x9, &(0x7f0000000140), 0x1, 0x1}, 0xa33) 01:16:24 executing program 5: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x20000000, 0x0, 0x0, 0x0) 01:16:24 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2400000010000100000000ec0000009600000900050000000000000005000080480000006fe884b7f11ac8f1810d0dc930b7fbbdfe445812bd4e3ddf303ed7320b364ab5ef9768d0c54531c0e48e8b51a2f78d54f00d9cdd3a5569eaaaf9d57fd007e7eff61a89507780518151cc0bb52f615f18e044c54fca953b368cc61d149f11066c74aac60fe6c088582777cddc52bd82c5ef927b1c475f2e339546488ff742ba361f30616ba6000013203bece0c63d63d44a2d8033a9f2319b5d7e75aed01f84fbba37b71774867fc770eb6690f7a3c3e0d63d75b35925d7980ce0513e1600a3b9b86344041999a73312ac34f870e770a7124542c63a0febe8281dfa46ca86343801872702c3c16a7816d215b6c8b12d910177eed40ffd341132a1e8e19120405d7896"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:16:24 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:16:24 executing program 3: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 20) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:16:24 executing program 1: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0x36fe, &(0x7f0000000040)={0x0, 0x8104, 0x0, 0x10}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r9, 0x0}, 0x0) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r11 = syz_mount_image$nfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRES32=r10]) syz_io_uring_submit(r5, r8, &(0x7f0000000140)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x4, 0x0, @fd=r10, 0x9, 0x0, 0x2, 0x4}, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) fcntl$addseals(r6, 0x409, 0x4) syz_io_uring_setup(0x49cd, &(0x7f0000000180)={0x0, 0xda1b, 0x20, 0x2, 0x392, 0x0, r4}, &(0x7f0000ff9000/0x7000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)=0x0) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r11, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r12, &(0x7f0000000340)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x1, 0x1, 0x1, {0x0, r13}}, 0xe5db) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000380)={{0x1, 0x1, 0x18, r11, @in_args={0x1}}, './file0\x00'}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x14) 01:16:25 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091cd3476bae3a05bae56ab34bcbeff5ddd1d8a65bc022525b413d13bc1a620d628d0ac", 0x70}}, 0x14) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x9, &(0x7f0000000140), 0x1, 0x1}, 0xa33) [ 1468.242106] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1468.254560] FAULT_INJECTION: forcing a failure. [ 1468.254560] name failslab, interval 1, probability 0, space 0, times 0 [ 1468.257418] CPU: 1 PID: 9026 Comm: syz-executor.7 Not tainted 5.10.260 #1 [ 1468.258945] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1468.260789] Call Trace: [ 1468.261392] dump_stack+0x107/0x167 [ 1468.262206] should_fail.cold+0x5/0xa [ 1468.263057] ? create_object.isra.0+0x3a/0xa30 [ 1468.264068] should_failslab+0x5/0x20 [ 1468.264921] kmem_cache_alloc+0x5b/0x310 [ 1468.265829] ? memcg_alloc_page_obj_cgroups+0x73/0x100 [ 1468.267013] create_object.isra.0+0x3a/0xa30 01:16:25 executing program 1: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x38, 0x602, 0x23456}, 0xff) r7 = dup2(0xffffffffffffffff, r6) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) r9 = dup(r8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth0_virt_wifi\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r9, 0x890c, &(0x7f0000000080)={@local, 0x78, r10}) ioctl$sock_inet6_SIOCDIFADDR(r9, 0x8916, &(0x7f0000000000)={@private0, 0x0, r10}) sendmsg$inet6(r7, &(0x7f0000000240)={&(0x7f00000001c0)={0xa, 0x4e22, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000340)="47f0c26949ee0c041a39e72bb8572d972ad4a4d4f1a801820d55c749758253229d8d6caf976a9ac69c64b76d4bb1628a447ebb8432a1365921a4354033d33d355a74b31fc116f6ececed368a9549c1a97847905cc94073966f499be6ff94ccfdcc3b157ff0ccb6207b13756d7351e3a8a83763735c4ba6a55f10517c035a3514168f010a9e956054b118e5017ebde820e72038ba6a134911026966fa4aee9ef4bafc24b5e73765201b4618d7d95b234338a9e1018098479e1aa9153726fa51be54abe9302716aca9045741984cb608ab727230f80129ab19cb4f25f73a2908631a234facbb49bc36bc487a23", 0xec}, {&(0x7f0000000480)="958ffdaa9358a2de66c95f8a45b2b215604c78b9a2d70e7df29a986a727bfb8ea5e451ca1e2bab368ae96fff06a7a419de96a6296e93aba649fc7bb5c119d880cfbff446ad17cde8c5ed146304b074c53ea743e0f00786124849a33cbf2d2551e75ee204dfd2de231a065b7df5b9bf20dbae0166e2a794c9cd3997ceeeb8eeee39979f381acd7aaa837505e5498e4c48c8f8a486eb979fd83d7fb976025ee860e4fce8a2be7caf70a01181b161934c2e20e1d82bc4f2219590c57c58f31a6a0aea73dbdceb343f3abdd75908ba9b89723bdf90218565a50d94cd8a74b0e5e7c53f5c35d341f37f9806395ad139bda95d64660b24591edc", 0xf7}], 0x2, &(0x7f0000000580)=ANY=[@ANYBLOB="280000000000000029000000390000008002029e00000000fe880000000000000000000000000001280000000000000029000000360000003b0100000000000004014001040000000000000000000000380000000000000029000000370000002f03000000000000000100c2040000001ac910fe8800000000000000000000000000010502ffc000140000000000000029000000430000000000000000000000300000000000000029000000040000002f020000000001027980000400000000000000000000000000240000000000000029000000320000000000000000000000000000000000000100000000000000", @ANYRES32=r10, @ANYBLOB="00000000e00000000000000029000000360000000618000000000000c078c82f6d89953f98124f154cf48f83aad2603723d795f763fe544f5a3ab38ff0fceeb7373f7a2bf8444f450655a7443b5fba8aa12bad68772bedf933458f73c7230d4921edefa84ad229aabb392b1da9e900b503ecf73f7b43be621de8f71aacb8c1b2428b02fd12683f9f2ff08fb0e6b4e4936961da361eef07480000000010ff040006000000000000000040000000000000090000000000000006000000000000000800000000000000018000000000000001800000000000007f0000000000000000000000140000000000000029000000430000000400000000000000"], 0x1f0}, 0x80c1) r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000004, 0x188110, r7, 0x0) syz_io_uring_submit(r11, r5, &(0x7f0000000180)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd_index=0x1, 0x0, 0x0, 0x6, 0x8, 0x1, {0x0, 0x0, r6}}, 0x7) sendmsg$802154_raw(r6, 0x0, 0x40010) [ 1468.268132] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1468.269290] __kmalloc_node+0x1ae/0x420 [ 1468.270202] memcg_alloc_page_obj_cgroups+0x73/0x100 [ 1468.271338] memcg_slab_post_alloc_hook+0x1f0/0x430 [ 1468.272459] kmem_cache_alloc_bulk+0x182/0x320 [ 1468.273464] io_submit_sqes+0x713e/0x8780 [ 1468.274421] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1468.275522] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1468.276594] ? find_held_lock+0x2c/0x110 [ 1468.277517] ? io_submit_sqes+0x8780/0x8780 [ 1468.278489] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1468.279555] ? wait_for_completion_io+0x270/0x270 [ 1468.280634] ? rcu_read_lock_any_held+0x75/0xa0 [ 1468.281660] ? vfs_write+0x354/0xb10 [ 1468.282484] ? fput_many+0x2f/0x1a0 [ 1468.283285] ? ksys_write+0x1a9/0x260 [ 1468.284127] ? __ia32_sys_read+0xb0/0xb0 [ 1468.285027] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1468.286195] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1468.287333] do_syscall_64+0x33/0x40 [ 1468.288154] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1468.289280] RIP: 0033:0x7f866e983b19 [ 1468.290114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1468.294156] RSP: 002b:00007f866bef9188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1468.295820] RAX: ffffffffffffffda RBX: 00007f866ea96f60 RCX: 00007f866e983b19 [ 1468.297398] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1468.298962] RBP: 00007f866bef91d0 R08: 0000000000000000 R09: 0000000000000000 [ 1468.300540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1468.302120] R13: 00007ffed68a0a3f R14: 00007f866bef9300 R15: 0000000000022000 [ 1468.321002] FAULT_INJECTION: forcing a failure. [ 1468.321002] name failslab, interval 1, probability 0, space 0, times 0 [ 1468.323721] CPU: 1 PID: 9024 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1468.325205] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1468.326995] Call Trace: [ 1468.327577] dump_stack+0x107/0x167 [ 1468.328368] should_fail.cold+0x5/0xa [ 1468.329197] ? create_object.isra.0+0x3a/0xa30 [ 1468.330194] should_failslab+0x5/0x20 [ 1468.331014] kmem_cache_alloc+0x5b/0x310 [ 1468.331903] create_object.isra.0+0x3a/0xa30 [ 1468.332842] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1468.333952] kmem_cache_alloc_bulk+0x168/0x320 [ 1468.334941] io_submit_sqes+0x713e/0x8780 [ 1468.335867] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1468.336936] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1468.337990] ? find_held_lock+0x2c/0x110 [ 1468.338881] ? io_submit_sqes+0x8780/0x8780 [ 1468.339805] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1468.340830] ? wait_for_completion_io+0x270/0x270 [ 1468.341871] ? rcu_read_lock_any_held+0x75/0xa0 [ 1468.342869] ? vfs_write+0x354/0xb10 [ 1468.343666] ? fput_many+0x2f/0x1a0 [ 1468.344454] ? ksys_write+0x1a9/0x260 [ 1468.345264] ? __ia32_sys_read+0xb0/0xb0 01:16:25 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2400000010000100000000ec0000009600000900050000000000000005000080480000006fe884b7f11ac8f1810d0dc930b7fbbdfe445812bd4e3ddf303ed7320b364ab5ef9768d0c54531c0e48e8b51a2f78d54f00d9cdd3a5569eaaaf9d57fd007e7eff61a89507780518151cc0bb52f615f18e044c54fca953b368cc61d149f11066c74aac60fe6c088582777cddc52bd82c5ef927b1c475f2e339546488ff742ba361f30616ba6000013203bece0c63d63d44a2d8033a9f2319b5d7e75aed01f84fbba37b71774867fc770eb6690f7a3c3e0d63d75b35925d7980ce0513e1600a3b9b86344041999a73312ac34f870e770a7124542c63a0febe8281dfa46ca86343801872702c3c16a7816d215b6c8b12d910177eed40ffd341132a1e8e19120405d7896"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1468.346139] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1468.347501] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1468.348619] do_syscall_64+0x33/0x40 [ 1468.349436] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1468.350543] RIP: 0033:0x7ffa806a4b19 01:16:25 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091cd3476bae3a05bae56ab34bcbeff5ddd1d8a65bc022525b413d13bc1a620d628d0ac0cfe3ca26247450c", 0x78}}, 0x14) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x9, &(0x7f0000000140), 0x1, 0x1}, 0xa33) [ 1468.351339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1468.355415] RSP: 002b:00007ffa7dc1a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1468.357050] RAX: ffffffffffffffda RBX: 00007ffa807b7f60 RCX: 00007ffa806a4b19 [ 1468.358580] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1468.360103] RBP: 00007ffa7dc1a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1468.361631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1468.363158] R13: 00007fff571e114f R14: 00007ffa7dc1a300 R15: 0000000000022000 [ 1468.370806] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1468.372375] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1468.383951] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1468.401975] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 01:16:25 executing program 1: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = syz_io_uring_setup(0x7d04, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1ff}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000540)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)=""/142, 0x8e}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) pipe2(&(0x7f0000000040), 0x0) r6 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe6b02, 0x0) pwritev(r6, &(0x7f0000001840)=[{0x0}, {&(0x7f0000001300)="c1", 0x1}, {&(0x7f0000001400)="17", 0x20001401}], 0x3, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/locks\x00', 0x0, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40060}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r3, 0x10058ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x24, &(0x7f0000000440)={0x0, 0x0, 0x0, 0xfffffffe}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000002a40)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000100)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x77359400}}, 0x0) syz_io_uring_setup(0x0, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f00003b7000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r10, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 01:16:25 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:16:25 executing program 5: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x2000, 0x0, 0x0) [ 1468.457543] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1468.459326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1468.461245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1468.474309] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 01:16:25 executing program 4: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 9) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091", 0x4e}}, 0x0) 01:16:25 executing program 3: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 21) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) [ 1468.540033] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1468.541753] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1468.543496] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1468.548724] FAULT_INJECTION: forcing a failure. [ 1468.548724] name failslab, interval 1, probability 0, space 0, times 0 [ 1468.550269] CPU: 0 PID: 9054 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1468.551061] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1468.552030] Call Trace: [ 1468.552344] dump_stack+0x107/0x167 [ 1468.552773] should_fail.cold+0x5/0xa [ 1468.553234] ? create_object.isra.0+0x3a/0xa30 [ 1468.553780] should_failslab+0x5/0x20 [ 1468.554231] kmem_cache_alloc+0x5b/0x310 [ 1468.554708] ? mark_held_locks+0x9e/0xe0 [ 1468.555201] create_object.isra.0+0x3a/0xa30 [ 1468.555715] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1468.556316] kmem_cache_alloc_bulk+0x168/0x320 [ 1468.556859] io_submit_sqes+0x713e/0x8780 [ 1468.557366] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1468.557968] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1468.558539] ? find_held_lock+0x2c/0x110 [ 1468.558933] FAULT_INJECTION: forcing a failure. [ 1468.558933] name failslab, interval 1, probability 0, space 0, times 0 [ 1468.559020] ? io_submit_sqes+0x8780/0x8780 [ 1468.562028] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1468.562606] ? wait_for_completion_io+0x270/0x270 [ 1468.563173] ? rcu_read_lock_any_held+0x75/0xa0 [ 1468.563720] ? vfs_write+0x354/0xb10 [ 1468.564162] ? fput_many+0x2f/0x1a0 [ 1468.564591] ? ksys_write+0x1a9/0x260 [ 1468.565034] ? __ia32_sys_read+0xb0/0xb0 [ 1468.565524] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1468.566138] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1468.566745] do_syscall_64+0x33/0x40 [ 1468.567178] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1468.567775] RIP: 0033:0x7ffa806a4b19 [ 1468.568209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1468.570363] RSP: 002b:00007ffa7dc1a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1468.571251] RAX: ffffffffffffffda RBX: 00007ffa807b7f60 RCX: 00007ffa806a4b19 [ 1468.572087] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1468.572923] RBP: 00007ffa7dc1a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1468.573785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1468.574634] R13: 00007fff571e114f R14: 00007ffa7dc1a300 R15: 0000000000022000 [ 1468.575525] CPU: 1 PID: 9052 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 1468.577065] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1468.578972] Call Trace: [ 1468.579591] dump_stack+0x107/0x167 [ 1468.580426] should_fail.cold+0x5/0xa [ 1468.581323] ? create_object.isra.0+0x3a/0xa30 [ 1468.582380] should_failslab+0x5/0x20 [ 1468.583260] kmem_cache_alloc+0x5b/0x310 [ 1468.584213] ? mark_held_locks+0x9e/0xe0 [ 1468.585152] create_object.isra.0+0x3a/0xa30 [ 1468.586167] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1468.587349] kmem_cache_alloc_bulk+0x168/0x320 [ 1468.588422] io_submit_sqes+0x713e/0x8780 [ 1468.589390] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1468.590539] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1468.591680] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1468.592779] ? find_held_lock+0x2c/0x110 [ 1468.593707] ? io_submit_sqes+0x8780/0x8780 [ 1468.594681] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1468.595751] ? wait_for_completion_io+0x270/0x270 [ 1468.596828] ? rcu_read_lock_any_held+0x75/0xa0 [ 1468.597883] ? vfs_write+0x354/0xb10 [ 1468.598755] ? fput_many+0x2f/0x1a0 [ 1468.599585] ? ksys_write+0x1a9/0x260 [ 1468.600488] ? __ia32_sys_read+0xb0/0xb0 [ 1468.601437] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1468.602654] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1468.603834] do_syscall_64+0x33/0x40 [ 1468.604690] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1468.605872] RIP: 0033:0x7fe076d62b19 [ 1468.606722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1468.610915] RSP: 002b:00007fe0742d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1468.612637] RAX: ffffffffffffffda RBX: 00007fe076e75f60 RCX: 00007fe076d62b19 [ 1468.614225] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1468.615798] RBP: 00007fe0742d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1468.617410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1468.619028] R13: 00007ffebfddc57f R14: 00007fe0742d8300 R15: 0000000000022000 01:16:39 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1482.759507] FAULT_INJECTION: forcing a failure. [ 1482.759507] name failslab, interval 1, probability 0, space 0, times 0 [ 1482.761189] CPU: 1 PID: 9064 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 1482.762121] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1482.763236] Call Trace: [ 1482.763597] dump_stack+0x107/0x167 [ 1482.764090] should_fail.cold+0x5/0xa [ 1482.764605] should_failslab+0x5/0x20 [ 1482.765116] kmem_cache_alloc_bulk+0x4b/0x320 [ 1482.765726] ? __sanitizer_cov_trace_switch+0x4b/0x80 [ 1482.766425] io_submit_sqes+0x713e/0x8780 [ 1482.767004] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1482.767676] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1482.768331] ? find_held_lock+0x2c/0x110 [ 1482.768879] ? io_submit_sqes+0x8780/0x8780 [ 1482.769465] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1482.770124] ? wait_for_completion_io+0x270/0x270 [ 1482.770772] ? rcu_read_lock_any_held+0x75/0xa0 [ 1482.771394] ? vfs_write+0x354/0xb10 [ 1482.771895] ? fput_many+0x2f/0x1a0 [ 1482.772380] ? ksys_write+0x1a9/0x260 [ 1482.772891] ? __ia32_sys_read+0xb0/0xb0 [ 1482.773438] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1482.774150] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1482.774668] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1482.774852] do_syscall_64+0x33/0x40 [ 1482.777278] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1482.777977] RIP: 0033:0x7fe076d62b19 [ 1482.778471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1482.780919] RSP: 002b:00007fe0742d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1482.781935] RAX: ffffffffffffffda RBX: 00007fe076e75f60 RCX: 00007fe076d62b19 [ 1482.782879] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1482.783827] RBP: 00007fe0742d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1482.784779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1482.785738] R13: 00007ffebfddc57f R14: 00007fe0742d8300 R15: 0000000000022000 [ 1482.812695] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1482.817788] FAULT_INJECTION: forcing a failure. [ 1482.817788] name failslab, interval 1, probability 0, space 0, times 0 [ 1482.820527] CPU: 0 PID: 9073 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1482.822100] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1482.824004] Call Trace: [ 1482.824611] dump_stack+0x107/0x167 [ 1482.825446] should_fail.cold+0x5/0xa [ 1482.826338] ? create_object.isra.0+0x3a/0xa30 [ 1482.827380] should_failslab+0x5/0x20 [ 1482.828246] kmem_cache_alloc+0x5b/0x310 [ 1482.829170] ? mark_held_locks+0x9e/0xe0 [ 1482.830108] create_object.isra.0+0x3a/0xa30 [ 1482.831113] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1482.832271] kmem_cache_alloc_bulk+0x168/0x320 [ 1482.833316] io_submit_sqes+0x713e/0x8780 [ 1482.834302] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1482.835432] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1482.836528] ? find_held_lock+0x2c/0x110 [ 1482.837458] ? io_submit_sqes+0x8780/0x8780 [ 1482.838459] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1482.839555] ? wait_for_completion_io+0x270/0x270 [ 1482.840651] ? rcu_read_lock_any_held+0x75/0xa0 [ 1482.841712] ? vfs_write+0x354/0xb10 [ 1482.842549] ? fput_many+0x2f/0x1a0 [ 1482.843353] ? ksys_write+0x1a9/0x260 [ 1482.844193] ? __ia32_sys_read+0xb0/0xb0 [ 1482.845101] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1482.846268] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1482.847405] do_syscall_64+0x33/0x40 [ 1482.848220] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1482.849343] RIP: 0033:0x7ffa806a4b19 01:16:39 executing program 5: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x4000, 0x0, 0x0) 01:16:39 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091cd3476bae3a05bae56ab34bcbeff5ddd1d8a65bc022525b413d13bc1a620d628d0ac0cfe3ca26247450c", 0x78}}, 0x14) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x9, &(0x7f0000000140), 0x1, 0x1}, 0xa33) 01:16:39 executing program 7: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 36) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:16:39 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:16:39 executing program 3: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 22) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:16:39 executing program 4: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 10) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091", 0x4e}}, 0x0) 01:16:39 executing program 1: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x46000, 0x0) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000200)={0x20000006}) syz_io_uring_submit(r1, r5, &(0x7f0000000140)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x11}, 0xabdc) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x14) [ 1482.850173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1482.854349] RSP: 002b:00007ffa7dc1a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1482.856007] RAX: ffffffffffffffda RBX: 00007ffa807b7f60 RCX: 00007ffa806a4b19 [ 1482.857572] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1482.859127] RBP: 00007ffa7dc1a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1482.860678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1482.862241] R13: 00007fff571e114f R14: 00007ffa7dc1a300 R15: 0000000000022000 01:16:39 executing program 1: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x5000)=nil, 0x5000, 0x100000f, 0x8010, r0, 0x8000000) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x10000000) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x5, 0x0, 0xffffffffffffffff, &(0x7f0000000180), r0, 0x3, 0x0, 0x1}, 0x9) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r8, 0x0}, 0x0) syz_io_uring_submit(r3, r7, &(0x7f0000000140), 0x4) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x14) 01:16:39 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091cd3476bae3a05bae56ab34bcbeff5ddd1d8a65bc022525b413d13bc1a620d628d0ac0cfe3ca26247450c", 0x78}}, 0x14) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x9, &(0x7f0000000140), 0x1, 0x1}, 0xa33) 01:16:39 executing program 5: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x200000, 0x0, 0x0) [ 1482.881077] FAULT_INJECTION: forcing a failure. [ 1482.881077] name failslab, interval 1, probability 0, space 0, times 0 [ 1482.883611] CPU: 0 PID: 9074 Comm: syz-executor.7 Not tainted 5.10.260 #1 [ 1482.885083] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1482.886875] Call Trace: [ 1482.887448] dump_stack+0x107/0x167 [ 1482.888236] should_fail.cold+0x5/0xa [ 1482.889058] ? create_object.isra.0+0x3a/0xa30 [ 1482.890050] should_failslab+0x5/0x20 [ 1482.890870] kmem_cache_alloc+0x5b/0x310 [ 1482.891743] ? mark_held_locks+0x9e/0xe0 [ 1482.892623] create_object.isra.0+0x3a/0xa30 [ 1482.893573] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1482.894674] kmem_cache_alloc_bulk+0x168/0x320 [ 1482.895668] io_submit_sqes+0x713e/0x8780 [ 1482.896595] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1482.897673] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1482.898721] ? _raw_spin_unlock_irq+0x1f/0x30 [ 1482.899684] ? _raw_spin_unlock_irq+0x27/0x30 [ 1482.900648] ? io_submit_sqes+0x8780/0x8780 [ 1482.901583] ? finish_task_switch+0x126/0x5d0 [ 1482.902544] ? finish_task_switch+0xef/0x5d0 [ 1482.903480] ? __switch_to+0x572/0xf70 [ 1482.904308] ? __switch_to_asm+0x3a/0x60 [ 1482.905173] ? __switch_to_asm+0x34/0x60 [ 1482.906048] ? __schedule+0x82c/0x1ea0 [ 1482.906887] ? io_schedule_timeout+0x140/0x140 [ 1482.907865] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 1482.908841] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 1482.910006] ? ksys_write+0x1a9/0x260 [ 1482.910827] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1482.911950] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1482.913057] do_syscall_64+0x33/0x40 [ 1482.913862] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1482.914956] RIP: 0033:0x7f866e983b19 [ 1482.915750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 01:16:39 executing program 4: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 11) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091", 0x4e}}, 0x0) [ 1482.919685] RSP: 002b:00007f866bef9188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1482.921444] RAX: ffffffffffffffda RBX: 00007f866ea96f60 RCX: 00007f866e983b19 [ 1482.922974] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1482.924487] RBP: 00007f866bef91d0 R08: 0000000000000000 R09: 0000000000000000 [ 1482.926010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 01:16:39 executing program 1: r0 = syz_io_uring_setup(0x1c2d, &(0x7f00000002c0), &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r3, r2, &(0x7f0000000340)=@IORING_OP_NOP={0x0, 0x4}, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x14) syz_io_uring_setup(0x6642, &(0x7f0000000140)={0x0, 0x1049, 0x20, 0x1, 0xe1, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x800448d4, &(0x7f0000000480)="8b1f10556547452bbf4f2627e479fc33525846969488ab2a653816b4d7b4399dc590edd30beec676752e05e10015a7816d45648094bfbb8714546a2d99123ea65e08554bebcc1a79e52ec1fa1d26ea2b05250e6c4ac9fe54920e5b4778e431980725483429df226eb767d2950706269204c92e5251105fcf0f141829c996cb1ebe200e609321111bdd8cccc29a4667f930324086de3e4ad7fdbfc92d72f5bf7bbc2b62e210f8c3d6908a18be4b2843c6d894d815fe30b953e757de4b00a1d9d7f51da88f4c815999920999527a5286ccb50dbe816694621fe0799dc763242ad7e0e77f0355") syz_mount_image$nfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRES32=r6]) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8982, &(0x7f0000000280)) r7 = fcntl$dupfd(r5, 0x0, r5) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r8}}, 0x5) syz_io_uring_submit(r1, r4, &(0x7f0000000240)=@IORING_OP_FALLOCATE={0x11, 0x5, 0x0, @fd_index=0x2, 0xfffffffffffffffa, 0x0, 0x101, 0x0, 0x0, {0x0, r8}}, 0x800) [ 1482.927534] R13: 00007ffed68a0a3f R14: 00007f866bef9300 R15: 0000000000022000 [ 1482.967751] FAULT_INJECTION: forcing a failure. [ 1482.967751] name failslab, interval 1, probability 0, space 0, times 0 [ 1482.969451] CPU: 1 PID: 9091 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 1482.970452] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1482.971658] Call Trace: [ 1482.972047] dump_stack+0x107/0x167 [ 1482.972578] should_fail.cold+0x5/0xa [ 1482.973143] ? create_object.isra.0+0x3a/0xa30 [ 1482.973820] should_failslab+0x5/0x20 [ 1482.974382] kmem_cache_alloc+0x5b/0x310 [ 1482.974976] create_object.isra.0+0x3a/0xa30 [ 1482.975616] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1482.976357] kmem_cache_alloc_bulk+0x168/0x320 [ 1482.977029] io_submit_sqes+0x713e/0x8780 [ 1482.977665] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1482.978390] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1482.979094] ? find_held_lock+0x2c/0x110 [ 1482.979688] ? io_submit_sqes+0x8780/0x8780 [ 1482.980320] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1482.981019] ? wait_for_completion_io+0x270/0x270 [ 1482.981733] ? rcu_read_lock_any_held+0x75/0xa0 [ 1482.982406] ? vfs_write+0x354/0xb10 [ 1482.982950] ? fput_many+0x2f/0x1a0 [ 1482.983481] ? ksys_write+0x1a9/0x260 [ 1482.984031] ? __ia32_sys_read+0xb0/0xb0 [ 1482.984621] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1482.985381] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1482.986140] do_syscall_64+0x33/0x40 [ 1482.986682] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1482.987424] RIP: 0033:0x7fe076d62b19 [ 1482.987961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1482.990607] RSP: 002b:00007fe0742d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1482.991696] RAX: ffffffffffffffda RBX: 00007fe076e75f60 RCX: 00007fe076d62b19 [ 1482.992721] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1482.993765] RBP: 00007fe0742d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1482.994788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1482.995814] R13: 00007ffebfddc57f R14: 00007fe0742d8300 R15: 0000000000022000 01:16:39 executing program 5: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x400000, 0x0, 0x0) [ 1483.005095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1483.006843] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1483.008652] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1483.010320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1483.019406] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1483.022316] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 01:16:39 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2400000010000100000000ec0000009600000900050000000000000005000080480000006fe884b7f11ac8f1810d0dc930b7fbbdfe445812bd4e3ddf303ed7320b364ab5ef9768d0c54531c0e48e8b51a2f78d54f00d9cdd3a5569eaaaf9d57fd007e7eff61a89507780518151cc0bb52f615f18e044c54fca953b368cc61d149f11066c74aac60fe6c088582777cddc52bd82c5ef927b1c475f2e339546488ff742ba361f30616ba6000013203bece0c63d63d44a2d8033a9f2319b5d7e75aed01f84fbba37b71774867fc770eb6690f7a3c3e0d63d75b35925d7980ce0513e1600a3b9b86344041999a73312ac34f870e770a7124542c63a0febe8281dfa46ca86343801872702c3c16a7816d215b6c8b12d910177eed40ffd341132a1e8e19120405d7896"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:16:39 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2400000010000100000000ec0000009600000900050000000000000005000080480000006fe884b7f11ac8f1810d0dc930b7fbbdfe445812bd4e3ddf303ed7320b364ab5ef9768d0c54531c0e48e8b51a2f78d54f00d9cdd3a5569eaaaf9d57fd007e7eff61a89507780518151cc0bb52f615f18e044c54fca953b368cc61d149f11066c74aac60fe6c088582777cddc52bd82c5ef927b1c475f2e339546488ff742ba361f30616ba6000013203bece0c63d63d44a2d8033a9f2319b5d7e75aed01f84fbba37b71774867fc770eb6690f7a3c3e0d63d75b35925d7980ce0513e1600a3b9b86344041999a73312ac34f870e770a7124542c63a0febe8281dfa46ca86343801872702c3c16a7816d215b6c8b12d910177eed40ffd341132a1e8e19120405d7896"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1483.069007] nfs: Unknown parameter '' 01:16:39 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091cd3476bae3a05bae56ab34bcbeff5ddd1d8a65bc022525b413d13bc1a620d628d0ac0cfe3ca26247450c82d3f2f6", 0x7c}}, 0x14) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x9, &(0x7f0000000140), 0x1, 0x1}, 0xa33) [ 1483.085650] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1483.109839] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1483.111493] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1483.113470] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 01:16:39 executing program 3: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 23) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:16:39 executing program 5: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x20000000, 0x0, 0x0) [ 1483.169353] nfs: Unknown parameter '' 01:16:39 executing program 7: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 37) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:16:39 executing program 4: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 12) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091", 0x4e}}, 0x0) [ 1483.184762] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1483.185604] FAULT_INJECTION: forcing a failure. [ 1483.185604] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1483.188149] CPU: 1 PID: 9113 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1483.189093] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1483.190063] Call Trace: [ 1483.190441] dump_stack+0x107/0x167 [ 1483.190945] should_fail.cold+0x5/0xa [ 1483.191484] __alloc_pages_nodemask+0x182/0x600 [ 1483.192133] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1483.192991] alloc_pages_current+0x187/0x280 [ 1483.193613] allocate_slab+0x26f/0x380 [ 1483.194164] ___slab_alloc+0x470/0x700 [ 1483.194709] ? io_submit_sqes+0x713e/0x8780 [ 1483.195324] ? kmem_cache_alloc_bulk+0x1ec/0x320 [ 1483.195990] kmem_cache_alloc_bulk+0x1ec/0x320 [ 1483.196630] io_submit_sqes+0x713e/0x8780 [ 1483.197231] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1483.197934] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1483.198608] ? find_held_lock+0x2c/0x110 [ 1483.199186] ? io_submit_sqes+0x8780/0x8780 [ 1483.199806] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1483.200478] ? wait_for_completion_io+0x270/0x270 [ 1483.201150] ? rcu_read_lock_any_held+0x75/0xa0 [ 1483.201810] ? vfs_write+0x354/0xb10 [ 1483.202329] ? fput_many+0x2f/0x1a0 [ 1483.202838] ? ksys_write+0x1a9/0x260 [ 1483.203360] ? __ia32_sys_read+0xb0/0xb0 [ 1483.203934] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1483.204665] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1483.205401] do_syscall_64+0x33/0x40 [ 1483.205921] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1483.206637] RIP: 0033:0x7ffa806a4b19 [ 1483.207158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1483.209722] RSP: 002b:00007ffa7dc1a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1483.210610] RAX: ffffffffffffffda RBX: 00007ffa807b7f60 RCX: 00007ffa806a4b19 [ 1483.211610] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1483.212612] RBP: 00007ffa7dc1a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1483.213622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1483.214610] R13: 00007fff571e114f R14: 00007ffa7dc1a300 R15: 0000000000022000 01:16:40 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2400000010000100000000ec0000009600000900050000000000000005000080480000006fe884b7f11ac8f1810d0dc930b7fbbdfe445812bd4e3ddf303ed7320b364ab5ef9768d0c54531c0e48e8b51a2f78d54f00d9cdd3a5569eaaaf9d57fd007e7eff61a89507780518151cc0bb52f615f18e044c54fca953b368cc61d149f11066c74aac60fe6c088582777cddc52bd82c5ef927b1c475f2e339546488ff742ba361f30616ba6000013203bece0c63d63d44a2d8033a9f2319b5d7e75aed01f84fbba37b71774867fc770eb6690f7a3c3e0d63d75b35925d7980ce0513e1600a3b9b86344041999a73312ac34f870e770a7124542c63a0febe8281dfa46ca86343801872702c3c16a7816d215b6c8b12d910177eed40ffd341132a1e8e19120405d7896"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1483.263755] FAULT_INJECTION: forcing a failure. [ 1483.263755] name failslab, interval 1, probability 0, space 0, times 0 [ 1483.265283] CPU: 1 PID: 9119 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 1483.266074] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1483.266579] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1483.267031] Call Trace: [ 1483.267051] dump_stack+0x107/0x167 [ 1483.267072] should_fail.cold+0x5/0xa [ 1483.270112] ? create_object.isra.0+0x3a/0xa30 [ 1483.270631] should_failslab+0x5/0x20 [ 1483.271071] kmem_cache_alloc+0x5b/0x310 [ 1483.271543] create_object.isra.0+0x3a/0xa30 [ 1483.272051] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1483.272684] kmem_cache_alloc_bulk+0x168/0x320 [ 1483.273241] io_submit_sqes+0x713e/0x8780 [ 1483.273749] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1483.274321] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1483.274883] ? find_held_lock+0x2c/0x110 [ 1483.274962] FAULT_INJECTION: forcing a failure. [ 1483.274962] name failslab, interval 1, probability 0, space 0, times 0 [ 1483.275351] ? io_submit_sqes+0x8780/0x8780 [ 1483.275368] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1483.275380] ? wait_for_completion_io+0x270/0x270 [ 1483.275393] ? rcu_read_lock_any_held+0x75/0xa0 [ 1483.275414] ? vfs_write+0x354/0xb10 [ 1483.280907] ? fput_many+0x2f/0x1a0 [ 1483.281332] ? ksys_write+0x1a9/0x260 [ 1483.281865] ? __ia32_sys_read+0xb0/0xb0 [ 1483.282438] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1483.283174] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1483.283905] do_syscall_64+0x33/0x40 [ 1483.284430] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1483.285144] RIP: 0033:0x7fe076d62b19 [ 1483.285679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1483.288253] RSP: 002b:00007fe0742d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1483.289319] RAX: ffffffffffffffda RBX: 00007fe076e75f60 RCX: 00007fe076d62b19 [ 1483.290330] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1483.291335] RBP: 00007fe0742d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1483.292328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1483.293329] R13: 00007ffebfddc57f R14: 00007fe0742d8300 R15: 0000000000022000 [ 1483.294369] CPU: 0 PID: 9122 Comm: syz-executor.7 Not tainted 5.10.260 #1 [ 1483.295901] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1483.297735] Call Trace: [ 1483.298319] dump_stack+0x107/0x167 [ 1483.299128] should_fail.cold+0x5/0xa [ 1483.299973] ? create_object.isra.0+0x3a/0xa30 [ 1483.300978] should_failslab+0x5/0x20 [ 1483.301824] kmem_cache_alloc+0x5b/0x310 [ 1483.302720] ? mark_held_locks+0x9e/0xe0 [ 1483.303621] create_object.isra.0+0x3a/0xa30 [ 1483.304588] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1483.305727] kmem_cache_alloc_bulk+0x168/0x320 [ 1483.306743] io_submit_sqes+0x713e/0x8780 [ 1483.307693] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1483.308791] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1483.309863] ? find_held_lock+0x2c/0x110 [ 1483.310765] ? io_submit_sqes+0x8780/0x8780 [ 1483.311723] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1483.312791] ? wait_for_completion_io+0x270/0x270 [ 1483.313865] ? rcu_read_lock_any_held+0x75/0xa0 [ 1483.314888] ? vfs_write+0x354/0xb10 [ 1483.315711] ? fput_many+0x2f/0x1a0 [ 1483.316516] ? ksys_write+0x1a9/0x260 [ 1483.317353] ? __ia32_sys_read+0xb0/0xb0 [ 1483.318264] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1483.319421] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1483.320562] do_syscall_64+0x33/0x40 [ 1483.321385] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1483.322523] RIP: 0033:0x7f866e983b19 [ 1483.323342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1483.327400] RSP: 002b:00007f866bef9188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1483.329075] RAX: ffffffffffffffda RBX: 00007f866ea96f60 RCX: 00007f866e983b19 [ 1483.330658] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1483.332227] RBP: 00007f866bef91d0 R08: 0000000000000000 R09: 0000000000000000 [ 1483.333806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1483.335380] R13: 00007ffed68a0a3f R14: 00007f866bef9300 R15: 0000000000022000 [ 1483.372601] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1483.374770] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1483.377177] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1483.399089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1483.401677] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1483.411376] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 01:16:54 executing program 5: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x20000000000000, 0x0, 0x0) 01:16:54 executing program 1: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000080)={{0x0, 0x3}}) fork() stat(0x0, 0x0) r1 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x14) 01:16:54 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2400000010000100000000ec0000009600000900050000000000000005000080480000006fe884b7f11ac8f1810d0dc930b7fbbdfe445812bd4e3ddf303ed7320b364ab5ef9768d0c54531c0e48e8b51a2f78d54f00d9cdd3a5569eaaaf9d57fd007e7eff61a89507780518151cc0bb52f615f18e044c54fca953b368cc61d149f11066c74aac60fe6c088582777cddc52bd82c5ef927b1c475f2e339546488ff742ba361f30616ba6000013203bece0c63d63d44a2d8033a9f2319b5d7e75aed01f84fbba37b71774867fc770eb6690f7a3c3e0d63d75b35925d7980ce0513e1600a3b9b86344041999a73312ac34f870e770a7124542c63a0febe8281dfa46ca86343801872702c3c16a7816d215b6c8b12d910177eed40ffd341132a1e8e19120405d7896"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:16:54 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:16:54 executing program 4: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 13) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091", 0x4e}}, 0x0) 01:16:54 executing program 3: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 24) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:16:54 executing program 7: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 38) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:16:54 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091cd3476bae3a05bae56ab34bcbeff5ddd1d8a65bc022525b413d13bc1a620d628d0ac0cfe3ca26247450c82d3f2f6", 0x7c}}, 0x14) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x9, &(0x7f0000000140), 0x1, 0x1}, 0xa33) [ 1497.894852] FAULT_INJECTION: forcing a failure. [ 1497.894852] name failslab, interval 1, probability 0, space 0, times 0 [ 1497.896268] CPU: 1 PID: 9131 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 1497.897046] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1497.898000] Call Trace: [ 1497.898309] dump_stack+0x107/0x167 [ 1497.898728] should_fail.cold+0x5/0xa [ 1497.899167] ? create_object.isra.0+0x3a/0xa30 [ 1497.899696] should_failslab+0x5/0x20 [ 1497.900132] kmem_cache_alloc+0x5b/0x310 [ 1497.900604] ? mark_held_locks+0x9e/0xe0 [ 1497.901072] create_object.isra.0+0x3a/0xa30 [ 1497.901593] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1497.902199] kmem_cache_alloc_bulk+0x168/0x320 [ 1497.902730] io_submit_sqes+0x713e/0x8780 [ 1497.903237] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1497.903823] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1497.904383] ? find_held_lock+0x2c/0x110 [ 1497.904868] ? io_submit_sqes+0x8780/0x8780 [ 1497.905384] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1497.905958] ? wait_for_completion_io+0x270/0x270 [ 1497.906529] ? rcu_read_lock_any_held+0x75/0xa0 [ 1497.907075] ? vfs_write+0x354/0xb10 [ 1497.907512] ? fput_many+0x2f/0x1a0 [ 1497.907936] ? ksys_write+0x1a9/0x260 [ 1497.908382] ? __ia32_sys_read+0xb0/0xb0 [ 1497.908858] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1497.909476] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1497.910095] do_syscall_64+0x33/0x40 [ 1497.910531] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1497.911133] RIP: 0033:0x7fe076d62b19 [ 1497.911568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1497.913737] RSP: 002b:00007fe0742d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1497.914630] RAX: ffffffffffffffda RBX: 00007fe076e75f60 RCX: 00007fe076d62b19 [ 1497.915466] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1497.916306] RBP: 00007fe0742d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1497.917146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1497.917991] R13: 00007ffebfddc57f R14: 00007fe0742d8300 R15: 0000000000022000 [ 1497.920909] FAULT_INJECTION: forcing a failure. [ 1497.920909] name failslab, interval 1, probability 0, space 0, times 0 [ 1497.922343] CPU: 1 PID: 9136 Comm: syz-executor.7 Not tainted 5.10.260 #1 [ 1497.923143] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1497.924116] Call Trace: [ 1497.924424] dump_stack+0x107/0x167 [ 1497.924852] should_fail.cold+0x5/0xa [ 1497.925303] ? create_object.isra.0+0x3a/0xa30 [ 1497.925854] should_failslab+0x5/0x20 [ 1497.926306] kmem_cache_alloc+0x5b/0x310 [ 1497.926788] create_object.isra.0+0x3a/0xa30 [ 1497.927305] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1497.927452] FAULT_INJECTION: forcing a failure. [ 1497.927452] name failslab, interval 1, probability 0, space 0, times 0 [ 1497.927915] kmem_cache_alloc_bulk+0x168/0x320 [ 1497.931347] io_submit_sqes+0x713e/0x8780 [ 1497.931852] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1497.932443] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1497.933010] ? find_held_lock+0x2c/0x110 [ 1497.933497] ? io_submit_sqes+0x8780/0x8780 [ 1497.934016] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1497.934591] ? wait_for_completion_io+0x270/0x270 [ 1497.935158] ? rcu_read_lock_any_held+0x75/0xa0 [ 1497.935707] ? vfs_write+0x354/0xb10 [ 1497.936147] ? fput_many+0x2f/0x1a0 [ 1497.936580] ? ksys_write+0x1a9/0x260 [ 1497.937025] ? __ia32_sys_read+0xb0/0xb0 [ 1497.937513] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1497.938147] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1497.938761] do_syscall_64+0x33/0x40 [ 1497.939201] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1497.939803] RIP: 0033:0x7f866e983b19 [ 1497.940242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1497.942424] RSP: 002b:00007f866bef9188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1497.943324] RAX: ffffffffffffffda RBX: 00007f866ea96f60 RCX: 00007f866e983b19 [ 1497.944172] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1497.945014] RBP: 00007f866bef91d0 R08: 0000000000000000 R09: 0000000000000000 [ 1497.945870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1497.946722] R13: 00007ffed68a0a3f R14: 00007f866bef9300 R15: 0000000000022000 [ 1497.947575] CPU: 0 PID: 9135 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1497.949073] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1497.950867] Call Trace: [ 1497.951440] dump_stack+0x107/0x167 [ 1497.952224] should_fail.cold+0x5/0xa [ 1497.953044] ? create_object.isra.0+0x3a/0xa30 [ 1497.954042] should_failslab+0x5/0x20 [ 1497.954861] kmem_cache_alloc+0x5b/0x310 [ 1497.955742] ? mark_held_locks+0x9e/0xe0 [ 1497.956616] create_object.isra.0+0x3a/0xa30 [ 1497.957558] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1497.958665] kmem_cache_alloc_bulk+0x168/0x320 [ 1497.959657] io_submit_sqes+0x713e/0x8780 [ 1497.960582] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1497.961650] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1497.962699] ? find_held_lock+0x2c/0x110 [ 1497.963579] ? io_submit_sqes+0x8780/0x8780 [ 1497.964515] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1497.965562] ? wait_for_completion_io+0x270/0x270 [ 1497.966605] ? rcu_read_lock_any_held+0x75/0xa0 [ 1497.967593] ? vfs_write+0x354/0xb10 [ 1497.968405] ? fput_many+0x2f/0x1a0 [ 1497.969185] ? ksys_write+0x1a9/0x260 [ 1497.970012] ? __ia32_sys_read+0xb0/0xb0 [ 1497.970888] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1497.972017] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1497.973132] do_syscall_64+0x33/0x40 [ 1497.973941] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1497.975044] RIP: 0033:0x7ffa806a4b19 [ 1497.975844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1497.979781] RSP: 002b:00007ffa7dc1a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1497.981410] RAX: ffffffffffffffda RBX: 00007ffa807b7f60 RCX: 00007ffa806a4b19 [ 1497.982949] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1497.984474] RBP: 00007ffa7dc1a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1497.986005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1497.987526] R13: 00007fff571e114f R14: 00007ffa7dc1a300 R15: 0000000000022000 [ 1497.993043] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1498.009077] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 01:16:54 executing program 4: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 14) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091", 0x4e}}, 0x0) [ 1498.037777] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1498.039383] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1498.050003] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1498.073868] FAULT_INJECTION: forcing a failure. [ 1498.073868] name failslab, interval 1, probability 0, space 0, times 0 [ 1498.075418] CPU: 1 PID: 9150 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 1498.076211] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1498.077177] Call Trace: [ 1498.077499] dump_stack+0x107/0x167 [ 1498.077925] should_fail.cold+0x5/0xa [ 1498.078379] ? create_object.isra.0+0x3a/0xa30 [ 1498.078905] should_failslab+0x5/0x20 [ 1498.079351] kmem_cache_alloc+0x5b/0x310 [ 1498.079822] ? mark_held_locks+0x9e/0xe0 [ 1498.080310] create_object.isra.0+0x3a/0xa30 [ 1498.080818] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1498.081411] kmem_cache_alloc_bulk+0x168/0x320 [ 1498.081962] io_submit_sqes+0x713e/0x8780 [ 1498.082463] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1498.083048] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1498.083604] ? find_held_lock+0x2c/0x110 [ 1498.084082] ? io_submit_sqes+0x8780/0x8780 [ 1498.084598] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1498.085160] ? wait_for_completion_io+0x270/0x270 [ 1498.085719] ? rcu_read_lock_any_held+0x75/0xa0 [ 1498.086271] ? vfs_write+0x354/0xb10 [ 1498.086705] ? fput_many+0x2f/0x1a0 [ 1498.087132] ? ksys_write+0x1a9/0x260 [ 1498.087575] ? __ia32_sys_read+0xb0/0xb0 [ 1498.088047] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1498.088668] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1498.089272] do_syscall_64+0x33/0x40 [ 1498.089705] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1498.090315] RIP: 0033:0x7fe076d62b19 [ 1498.090745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1498.092894] RSP: 002b:00007fe0742d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1498.093778] RAX: ffffffffffffffda RBX: 00007fe076e75f60 RCX: 00007fe076d62b19 [ 1498.094593] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1498.095418] RBP: 00007fe0742d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1498.096248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1498.097086] R13: 00007ffebfddc57f R14: 00007fe0742d8300 R15: 0000000000022000 [ 1498.098247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1498.099059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1498.100012] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 01:17:13 executing program 7: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 39) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:17:13 executing program 3: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 25) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:17:13 executing program 1: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x6) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x14) 01:17:13 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091cd3476bae3a05bae56ab34bcbeff5ddd1d8a65bc022525b413d13bc1a620d628d0ac0cfe3ca26247450c82d3f2f6", 0x7c}}, 0x14) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x9, &(0x7f0000000140), 0x1, 0x1}, 0xa33) [ 1516.662093] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1516.663781] FAULT_INJECTION: forcing a failure. [ 1516.663781] name failslab, interval 1, probability 0, space 0, times 0 [ 1516.665520] CPU: 1 PID: 9165 Comm: syz-executor.7 Not tainted 5.10.260 #1 [ 1516.666516] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1516.667716] Call Trace: [ 1516.668108] dump_stack+0x107/0x167 [ 1516.668640] should_fail.cold+0x5/0xa [ 1516.669210] ? create_object.isra.0+0x3a/0xa30 [ 1516.669453] FAULT_INJECTION: forcing a failure. [ 1516.669453] name failslab, interval 1, probability 0, space 0, times 0 [ 1516.669882] should_failslab+0x5/0x20 [ 1516.673095] kmem_cache_alloc+0x5b/0x310 [ 1516.673694] ? mark_held_locks+0x9e/0xe0 [ 1516.674633] create_object.isra.0+0x3a/0xa30 [ 1516.675739] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1516.677017] kmem_cache_alloc_bulk+0x168/0x320 [ 1516.678193] io_submit_sqes+0x713e/0x8780 [ 1516.679225] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1516.680336] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1516.681426] ? find_held_lock+0x2c/0x110 [ 1516.682350] ? io_submit_sqes+0x8780/0x8780 [ 1516.683325] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1516.684412] ? wait_for_completion_io+0x270/0x270 [ 1516.685489] ? rcu_read_lock_any_held+0x75/0xa0 [ 1516.686533] ? vfs_write+0x354/0xb10 [ 1516.687365] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 1516.688383] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 1516.689588] ? ksys_write+0x1a9/0x260 [ 1516.690447] ? __ia32_sys_read+0xb0/0xb0 [ 1516.691364] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1516.692530] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1516.693683] do_syscall_64+0x33/0x40 [ 1516.694529] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1516.695668] RIP: 0033:0x7f866e983b19 [ 1516.696501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1516.700603] RSP: 002b:00007f866bef9188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1516.702312] RAX: ffffffffffffffda RBX: 00007f866ea96f60 RCX: 00007f866e983b19 [ 1516.703895] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1516.705491] RBP: 00007f866bef91d0 R08: 0000000000000000 R09: 0000000000000000 [ 1516.707091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1516.708679] R13: 00007ffed68a0a3f R14: 00007f866bef9300 R15: 0000000000022000 [ 1516.710366] CPU: 0 PID: 9176 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 1516.712032] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1516.714027] Call Trace: [ 1516.714677] dump_stack+0x107/0x167 [ 1516.715561] should_fail.cold+0x5/0xa [ 1516.716480] ? create_object.isra.0+0x3a/0xa30 [ 1516.717578] should_failslab+0x5/0x20 [ 1516.718512] kmem_cache_alloc+0x5b/0x310 [ 1516.719491] ? mark_held_locks+0x9e/0xe0 [ 1516.720472] create_object.isra.0+0x3a/0xa30 [ 1516.721530] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1516.722771] kmem_cache_alloc_bulk+0x168/0x320 [ 1516.723885] io_submit_sqes+0x713e/0x8780 [ 1516.724933] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1516.726138] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1516.727298] ? find_held_lock+0x2c/0x110 [ 1516.728284] ? io_submit_sqes+0x8780/0x8780 [ 1516.729334] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1516.730504] ? wait_for_completion_io+0x270/0x270 [ 1516.731666] ? rcu_read_lock_any_held+0x75/0xa0 [ 1516.732770] ? vfs_write+0x354/0xb10 [ 1516.733665] ? fput_many+0x2f/0x1a0 [ 1516.734542] ? ksys_write+0x1a9/0x260 [ 1516.735446] ? __ia32_sys_read+0xb0/0xb0 [ 1516.736417] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1516.737663] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1516.738905] do_syscall_64+0x33/0x40 [ 1516.739793] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1516.741011] RIP: 0033:0x7fe076d62b19 [ 1516.741897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1516.744840] FAULT_INJECTION: forcing a failure. [ 1516.744840] name failslab, interval 1, probability 0, space 0, times 0 [ 1516.746374] RSP: 002b:00007fe0742d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1516.746401] RAX: ffffffffffffffda RBX: 00007fe076e75f60 RCX: 00007fe076d62b19 [ 1516.746414] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1516.746428] RBP: 00007fe0742d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1516.746442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1516.746471] R13: 00007ffebfddc57f R14: 00007fe0742d8300 R15: 0000000000022000 [ 1516.759328] CPU: 1 PID: 9169 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1516.760865] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1516.762745] Call Trace: [ 1516.763350] dump_stack+0x107/0x167 [ 1516.764171] should_fail.cold+0x5/0xa [ 1516.765034] ? create_object.isra.0+0x3a/0xa30 [ 1516.766077] should_failslab+0x5/0x20 [ 1516.766933] kmem_cache_alloc+0x5b/0x310 [ 1516.767844] ? mark_held_locks+0x9e/0xe0 [ 1516.768773] create_object.isra.0+0x3a/0xa30 [ 1516.769767] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1516.770921] kmem_cache_alloc_bulk+0x168/0x320 [ 1516.771960] io_submit_sqes+0x713e/0x8780 [ 1516.772935] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1516.774060] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1516.775156] ? find_held_lock+0x2c/0x110 [ 1516.776082] ? io_submit_sqes+0x8780/0x8780 [ 1516.777061] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1516.778164] ? wait_for_completion_io+0x270/0x270 [ 1516.779256] ? rcu_read_lock_any_held+0x75/0xa0 [ 1516.780296] ? vfs_write+0x354/0xb10 [ 1516.781142] ? fput_many+0x2f/0x1a0 [ 1516.781972] ? ksys_write+0x1a9/0x260 [ 1516.782835] ? __ia32_sys_read+0xb0/0xb0 [ 1516.783761] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1516.784955] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1516.786132] do_syscall_64+0x33/0x40 [ 1516.786978] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1516.788135] RIP: 0033:0x7ffa806a4b19 [ 1516.788981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1516.793144] RSP: 002b:00007ffa7dc1a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1516.794868] RAX: ffffffffffffffda RBX: 00007ffa807b7f60 RCX: 00007ffa806a4b19 [ 1516.796481] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1516.798109] RBP: 00007ffa7dc1a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1516.799727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1516.801344] R13: 00007fff571e114f R14: 00007ffa7dc1a300 R15: 0000000000022000 [ 1516.819624] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 01:17:13 executing program 5: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x40000000000000, 0x0, 0x0) 01:17:13 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:17:13 executing program 4: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 15) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091", 0x4e}}, 0x0) 01:17:13 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:17:13 executing program 7: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 40) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:17:13 executing program 1: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x14) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x989680}, 0x1, 0x1, 0x1, {0x0, r7}}, 0x2) [ 1516.857301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1516.859160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1516.878937] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1516.893564] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1516.895346] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1516.897198] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 01:17:13 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091cd3476bae3a05bae56ab34bcbeff5ddd1d8a65bc022525b413d13bc1a620d628d0ac0cfe3ca26247450c82d3f2f6bc0c", 0x7e}}, 0x14) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x9, &(0x7f0000000140), 0x1, 0x1}, 0xa33) 01:17:13 executing program 5: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x2000000000000000, 0x0, 0x0) 01:17:13 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1516.976728] FAULT_INJECTION: forcing a failure. [ 1516.976728] name failslab, interval 1, probability 0, space 0, times 0 [ 1516.979544] CPU: 1 PID: 9187 Comm: syz-executor.7 Not tainted 5.10.260 #1 [ 1516.981087] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1516.982968] Call Trace: [ 1516.983573] dump_stack+0x107/0x167 [ 1516.984415] should_fail.cold+0x5/0xa [ 1516.985291] ? create_object.isra.0+0x3a/0xa30 [ 1516.986336] should_failslab+0x5/0x20 [ 1516.987192] kmem_cache_alloc+0x5b/0x310 [ 1516.988115] ? mark_held_locks+0x9e/0xe0 [ 1516.989040] create_object.isra.0+0x3a/0xa30 [ 1516.990040] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1516.991210] kmem_cache_alloc_bulk+0x168/0x320 [ 1516.992257] io_submit_sqes+0x713e/0x8780 [ 1516.993251] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1516.994387] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1516.995488] ? find_held_lock+0x2c/0x110 [ 1516.996425] ? io_submit_sqes+0x8780/0x8780 [ 1516.997416] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1516.998520] ? vfs_write+0x344/0xb10 [ 1516.999364] ? wait_for_completion_io+0x270/0x270 [ 1517.000458] ? rcu_read_lock_any_held+0x75/0xa0 [ 1517.001500] ? vfs_write+0x354/0xb10 [ 1517.002359] ? fput_many+0x2f/0x1a0 [ 1517.003184] ? ksys_write+0x1a9/0x260 [ 1517.004045] ? __ia32_sys_read+0xb0/0xb0 [ 1517.004974] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1517.006177] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1517.007350] do_syscall_64+0x33/0x40 [ 1517.008195] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1517.009346] RIP: 0033:0x7f866e983b19 [ 1517.010207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1517.014379] RSP: 002b:00007f866bef9188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1517.016102] RAX: ffffffffffffffda RBX: 00007f866ea96f60 RCX: 00007f866e983b19 [ 1517.017701] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1517.019326] RBP: 00007f866bef91d0 R08: 0000000000000000 R09: 0000000000000000 [ 1517.020934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1517.022547] R13: 00007ffed68a0a3f R14: 00007f866bef9300 R15: 0000000000022000 01:17:13 executing program 3: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 26) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:17:13 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2400000010000100000000ec0000009600000900050000000000000005000080480000006fe884b7f11ac8f1810d0dc930b7fbbdfe445812bd4e3ddf303ed7320b364ab5ef9768d0c54531c0e48e8b51a2f78d54f00d9cdd3a5569eaaaf9d57fd007e7eff61a89507780518151cc0bb52f615f18e044c54fca953b368cc61d149f11066c74aac60fe6c088582777cddc52bd82c5ef927b1c475f2e339546488ff742ba361f30616ba6000013203bece0c63d63d44a2d8033a9f2319b5d7e75aed01f84fbba37b71774867fc770eb6690f7a3c3e0d63d75b35925d7980ce0513e1600a3b9b86344041999a73312ac34f870e770a7124542c63a0febe8281dfa46ca86343801872702c3c16a7816d215b6c8b12d910177eed40ffd341132a1e8e19120405d7896"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1517.064101] FAULT_INJECTION: forcing a failure. [ 1517.064101] name failslab, interval 1, probability 0, space 0, times 0 [ 1517.067063] CPU: 0 PID: 9195 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1517.068696] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1517.070674] Call Trace: [ 1517.071310] dump_stack+0x107/0x167 [ 1517.072183] should_fail.cold+0x5/0xa [ 1517.073094] ? create_object.isra.0+0x3a/0xa30 [ 1517.074194] should_failslab+0x5/0x20 [ 1517.075103] kmem_cache_alloc+0x5b/0x310 [ 1517.076087] create_object.isra.0+0x3a/0xa30 [ 1517.077133] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1517.078359] kmem_cache_alloc_bulk+0x168/0x320 [ 1517.079463] io_submit_sqes+0x713e/0x8780 [ 1517.080502] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1517.081697] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1517.082868] ? find_held_lock+0x2c/0x110 [ 1517.083849] ? io_submit_sqes+0x8780/0x8780 [ 1517.084897] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1517.086071] ? wait_for_completion_io+0x270/0x270 [ 1517.087238] ? rcu_read_lock_any_held+0x75/0xa0 [ 1517.088332] ? vfs_write+0x354/0xb10 [ 1517.088484] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1517.089230] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 1517.089258] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 1517.089276] ? ksys_write+0x1a9/0x260 [ 1517.089295] ? __ia32_sys_read+0xb0/0xb0 [ 1517.089325] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1517.089350] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1517.089379] do_syscall_64+0x33/0x40 [ 1517.098799] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1517.100016] RIP: 0033:0x7ffa806a4b19 [ 1517.100889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1517.105262] RSP: 002b:00007ffa7dc1a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1517.107082] RAX: ffffffffffffffda RBX: 00007ffa807b7f60 RCX: 00007ffa806a4b19 [ 1517.108783] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1517.110492] RBP: 00007ffa7dc1a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1517.112183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1517.113872] R13: 00007fff571e114f R14: 00007ffa7dc1a300 R15: 0000000000022000 [ 1517.127823] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 01:17:13 executing program 5: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000) 01:17:13 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091cd3476bae3a05bae56ab34bcbeff5ddd1d8a65bc022525b413d13bc1a620d628d0ac0cfe3ca26247450c82d3f2f6bc0c", 0x7e}}, 0x14) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x9, &(0x7f0000000140), 0x1, 0x1}, 0xa33) [ 1517.174826] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1517.176782] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1517.178656] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1517.204743] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1517.206461] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1517.208361] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 01:17:14 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:17:14 executing program 1: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000180)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r5, 0x0}, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000140)=@IORING_OP_NOP={0x0, 0x3}, 0x80) r6 = syz_io_uring_setup(0x1941, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffe}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000140)) io_uring_enter(r6, 0x27d9, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r6, 0x58ab, 0x0, 0x1, 0x0, 0xfffffe60) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x14) 01:17:14 executing program 7: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 41) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:17:14 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0x0, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:17:14 executing program 4: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 16) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091", 0x4e}}, 0x0) 01:17:14 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091cd3476bae3a05bae56ab34bcbeff5ddd1d8a65bc022525b413d13bc1a620d628d0ac0cfe3ca26247450c82d3f2f6bc0c", 0x7e}}, 0x14) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x9, &(0x7f0000000140), 0x1, 0x1}, 0xa33) [ 1517.395582] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1517.431680] FAULT_INJECTION: forcing a failure. [ 1517.431680] name failslab, interval 1, probability 0, space 0, times 0 [ 1517.434667] CPU: 1 PID: 9218 Comm: syz-executor.7 Not tainted 5.10.260 #1 [ 1517.436235] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1517.438114] Call Trace: [ 1517.438725] dump_stack+0x107/0x167 [ 1517.439554] should_fail.cold+0x5/0xa [ 1517.440429] ? create_object.isra.0+0x3a/0xa30 [ 1517.441463] should_failslab+0x5/0x20 [ 1517.442344] kmem_cache_alloc+0x5b/0x310 [ 1517.443269] ? mark_held_locks+0x9e/0xe0 [ 1517.444196] create_object.isra.0+0x3a/0xa30 [ 1517.445186] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1517.446358] kmem_cache_alloc_bulk+0x168/0x320 [ 1517.447409] io_submit_sqes+0x713e/0x8780 [ 1517.448399] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1517.449525] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1517.450636] ? find_held_lock+0x2c/0x110 [ 1517.451564] ? io_submit_sqes+0x8780/0x8780 [ 1517.452565] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1517.453658] ? wait_for_completion_io+0x270/0x270 [ 1517.454763] ? rcu_read_lock_any_held+0x75/0xa0 [ 1517.455813] ? vfs_write+0x354/0xb10 [ 1517.456655] ? fput_many+0x2f/0x1a0 [ 1517.457478] ? ksys_write+0x1a9/0x260 [ 1517.458344] ? __ia32_sys_read+0xb0/0xb0 [ 1517.459290] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1517.460473] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1517.461649] do_syscall_64+0x33/0x40 [ 1517.462503] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1517.463664] RIP: 0033:0x7f866e983b19 [ 1517.464512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1517.468684] RSP: 002b:00007f866bef9188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1517.470414] RAX: ffffffffffffffda RBX: 00007f866ea96f60 RCX: 00007f866e983b19 [ 1517.472036] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1517.473657] RBP: 00007f866bef91d0 R08: 0000000000000000 R09: 0000000000000000 [ 1517.475272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1517.476907] R13: 00007ffed68a0a3f R14: 00007f866bef9300 R15: 0000000000022000 [ 1517.491105] FAULT_INJECTION: forcing a failure. [ 1517.491105] name failslab, interval 1, probability 0, space 0, times 0 [ 1517.494133] CPU: 0 PID: 9223 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 1517.495762] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1517.497762] Call Trace: [ 1517.498421] dump_stack+0x107/0x167 [ 1517.499301] should_fail.cold+0x5/0xa [ 1517.500214] ? create_object.isra.0+0x3a/0xa30 [ 1517.501302] should_failslab+0x5/0x20 [ 1517.502219] kmem_cache_alloc+0x5b/0x310 [ 1517.503189] ? mark_held_locks+0x9e/0xe0 [ 1517.504167] create_object.isra.0+0x3a/0xa30 [ 1517.505210] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1517.506434] kmem_cache_alloc_bulk+0x168/0x320 [ 1517.507533] io_submit_sqes+0x713e/0x8780 [ 1517.508567] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1517.509753] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1517.510927] ? find_held_lock+0x2c/0x110 [ 1517.511908] ? io_submit_sqes+0x8780/0x8780 [ 1517.512952] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1517.514113] ? wait_for_completion_io+0x270/0x270 [ 1517.515267] ? rcu_read_lock_any_held+0x75/0xa0 [ 1517.516366] ? vfs_write+0x354/0xb10 [ 1517.517257] ? fput_many+0x2f/0x1a0 [ 1517.518135] ? ksys_write+0x1a9/0x260 [ 1517.519041] ? __ia32_sys_read+0xb0/0xb0 [ 1517.520011] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1517.521264] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1517.522507] do_syscall_64+0x33/0x40 [ 1517.523397] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1517.524615] RIP: 0033:0x7fe076d62b19 [ 1517.525503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1517.529975] RSP: 002b:00007fe0742d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1517.531806] RAX: ffffffffffffffda RBX: 00007fe076e75f60 RCX: 00007fe076d62b19 [ 1517.533536] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1517.535260] RBP: 00007fe0742d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1517.536979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1517.538714] R13: 00007ffebfddc57f R14: 00007fe0742d8300 R15: 0000000000022000 [ 1517.553393] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1517.577060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1517.578793] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1517.580561] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1517.592058] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1517.593872] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1517.595824] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 01:17:31 executing program 3: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 27) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:17:31 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:17:31 executing program 1: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) r7 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000b, 0x10010, r0, 0x10000000) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$nfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRES32=r8]) r9 = syz_open_dev$tty20(0xc, 0x4, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r11}}, 0x5) syz_io_uring_submit(r4, r7, &(0x7f0000000140)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x3, 0x0, 0xffffffffffffffff, 0x0, r8, 0x2, 0x0, 0x0, {0x0, r11}}, 0x3) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x14) io_uring_enter(0xffffffffffffffff, 0x27d9, 0x0, 0x0, 0x0, 0x0) [ 1535.148810] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1535.164878] FAULT_INJECTION: forcing a failure. [ 1535.164878] name failslab, interval 1, probability 0, space 0, times 0 [ 1535.167558] CPU: 1 PID: 9241 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 1535.168781] FAULT_INJECTION: forcing a failure. [ 1535.168781] name failslab, interval 1, probability 0, space 0, times 0 [ 1535.168996] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1535.169013] Call Trace: [ 1535.173959] dump_stack+0x107/0x167 [ 1535.174737] should_fail.cold+0x5/0xa [ 1535.175522] ? create_object.isra.0+0x3a/0xa30 [ 1535.176460] should_failslab+0x5/0x20 [ 1535.177255] kmem_cache_alloc+0x5b/0x310 [ 1535.178103] ? mark_held_locks+0x9e/0xe0 [ 1535.178971] create_object.isra.0+0x3a/0xa30 [ 1535.179918] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1535.180967] kmem_cache_alloc_bulk+0x168/0x320 [ 1535.181943] io_submit_sqes+0x713e/0x8780 [ 1535.182848] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1535.183878] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1535.184908] ? find_held_lock+0x2c/0x110 [ 1535.185757] ? io_submit_sqes+0x8780/0x8780 [ 1535.186682] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1535.187678] ? wait_for_completion_io+0x270/0x270 [ 1535.188715] ? rcu_read_lock_any_held+0x75/0xa0 [ 1535.189709] ? vfs_write+0x354/0xb10 [ 1535.190491] ? fput_many+0x2f/0x1a0 [ 1535.191235] ? ksys_write+0x1a9/0x260 [ 1535.192015] ? __ia32_sys_read+0xb0/0xb0 [ 1535.192851] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1535.193965] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1535.195096] do_syscall_64+0x33/0x40 [ 1535.195898] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1535.196993] RIP: 0033:0x7fe076d62b19 [ 1535.197783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1535.201577] RSP: 002b:00007fe0742d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1535.203163] RAX: ffffffffffffffda RBX: 00007fe076e75f60 RCX: 00007fe076d62b19 [ 1535.204630] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1535.206098] RBP: 00007fe0742d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1535.207569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1535.209032] R13: 00007ffebfddc57f R14: 00007fe0742d8300 R15: 0000000000022000 [ 1535.210626] CPU: 0 PID: 9237 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1535.212131] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1535.213896] Call Trace: [ 1535.214478] dump_stack+0x107/0x167 [ 1535.215267] should_fail.cold+0x5/0xa [ 1535.216091] ? create_object.isra.0+0x3a/0xa30 [ 1535.217070] should_failslab+0x5/0x20 [ 1535.217889] kmem_cache_alloc+0x5b/0x310 [ 1535.218772] ? mark_held_locks+0x9e/0xe0 [ 1535.219669] create_object.isra.0+0x3a/0xa30 [ 1535.220622] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1535.221702] kmem_cache_alloc_bulk+0x168/0x320 [ 1535.222106] FAULT_INJECTION: forcing a failure. [ 1535.222106] name failslab, interval 1, probability 0, space 0, times 0 [ 1535.222698] io_submit_sqes+0x713e/0x8780 [ 1535.222761] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1535.226912] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1535.227948] ? find_held_lock+0x2c/0x110 [ 1535.228824] ? io_submit_sqes+0x8780/0x8780 [ 1535.229746] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1535.230792] ? wait_for_completion_io+0x270/0x270 [ 1535.231815] ? rcu_read_lock_any_held+0x75/0xa0 [ 1535.232804] ? vfs_write+0x354/0xb10 [ 1535.233613] ? fput_many+0x2f/0x1a0 [ 1535.234393] ? ksys_write+0x1a9/0x260 [ 1535.235202] ? __ia32_sys_read+0xb0/0xb0 [ 1535.236072] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1535.237187] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1535.238304] do_syscall_64+0x33/0x40 [ 1535.239097] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1535.240183] RIP: 0033:0x7ffa806a4b19 [ 1535.240979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1535.244894] RSP: 002b:00007ffa7dc1a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1535.246509] RAX: ffffffffffffffda RBX: 00007ffa807b7f60 RCX: 00007ffa806a4b19 [ 1535.248025] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1535.249573] RBP: 00007ffa7dc1a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1535.251128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1535.252624] R13: 00007fff571e114f R14: 00007ffa7dc1a300 R15: 0000000000022000 [ 1535.254193] CPU: 1 PID: 9242 Comm: syz-executor.7 Not tainted 5.10.260 #1 01:17:31 executing program 5: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x4000) 01:17:31 executing program 4: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 17) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091", 0x4e}}, 0x0) 01:17:31 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091cd3476bae3a05bae56ab34bcbeff5ddd1d8a65bc022525b413d13bc1a620d628d0ac0cfe3ca26247450c82d3f2f6bc0c2a", 0x7f}}, 0x14) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x9, &(0x7f0000000140), 0x1, 0x1}, 0xa33) 01:17:31 executing program 7: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 42) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:17:31 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0x0, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1535.255648] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1535.257525] Call Trace: [ 1535.258101] dump_stack+0x107/0x167 [ 1535.258897] should_fail.cold+0x5/0xa [ 1535.259715] ? create_object.isra.0+0x3a/0xa30 [ 1535.260671] should_failslab+0x5/0x20 [ 1535.261462] kmem_cache_alloc+0x5b/0x310 [ 1535.262323] ? mark_held_locks+0x9e/0xe0 [ 1535.263192] create_object.isra.0+0x3a/0xa30 [ 1535.264113] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1535.265165] kmem_cache_alloc_bulk+0x168/0x320 [ 1535.266139] io_submit_sqes+0x713e/0x8780 [ 1535.267051] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1535.268118] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1535.269136] ? find_held_lock+0x2c/0x110 [ 1535.270016] ? io_submit_sqes+0x8780/0x8780 [ 1535.270956] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1535.271969] ? wait_for_completion_io+0x270/0x270 [ 1535.272960] ? rcu_read_lock_any_held+0x75/0xa0 [ 1535.273946] ? vfs_write+0x354/0xb10 [ 1535.274756] ? fput_many+0x2f/0x1a0 [ 1535.275523] ? ksys_write+0x1a9/0x260 [ 1535.276340] ? __ia32_sys_read+0xb0/0xb0 [ 1535.277220] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1535.278360] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1535.279476] do_syscall_64+0x33/0x40 [ 1535.280255] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1535.281541] RIP: 0033:0x7f866e983b19 [ 1535.282513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1535.286470] RSP: 002b:00007f866bef9188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1535.288044] RAX: ffffffffffffffda RBX: 00007f866ea96f60 RCX: 00007f866e983b19 [ 1535.289529] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1535.291165] RBP: 00007f866bef91d0 R08: 0000000000000000 R09: 0000000000000000 [ 1535.292674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1535.294171] R13: 00007ffed68a0a3f R14: 00007f866bef9300 R15: 0000000000022000 [ 1535.311852] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1535.328634] nfs: Unknown parameter '' [ 1535.331954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1535.333827] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1535.335488] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1535.347093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1535.348841] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1535.350622] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 01:17:32 executing program 5: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x200000) 01:17:32 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091cd3476bae3a05bae56ab34bcbeff5ddd1d8a65bc022525b413d13bc1a620d628d0ac0cfe3ca26247450c82d3f2f6bc0c2a", 0x7f}}, 0x14) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x9, &(0x7f0000000140), 0x1, 0x1}, 0xa33) [ 1535.425872] nfs: Unknown parameter '' 01:17:32 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0x0, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2400000010000100000000ec0000009600000900050000000000000005000080480000006fe884b7f11ac8f1810d0dc930b7fbbdfe445812bd4e3ddf303ed7320b364ab5ef9768d0c54531c0e48e8b51a2f78d54f00d9cdd3a5569eaaaf9d57fd007e7eff61a89507780518151cc0bb52f615f18e044c54fca953b368cc61d149f11066c74aac60fe6c088582777cddc52bd82c5ef927b1c475f2e339546488ff742ba361f30616ba6000013203bece0c63d63d44a2d8033a9f2319b5d7e75aed01f84fbba37b71774867fc770eb6690f7a3c3e0d63d75b35925d7980ce0513e1600a3b9b86344041999a73312ac34f870e770a7124542c63a0febe8281dfa46ca86343801872702c3c16a7816d215b6c8b12d910177eed40ffd341132a1e8e19120405d7896"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:17:32 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0x0, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1535.483117] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1535.502746] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 01:17:32 executing program 4: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 18) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091", 0x4e}}, 0x0) 01:17:32 executing program 1: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) io_uring_enter(r4, 0x27d9, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x518b, &(0x7f0000000140)={0x0, 0xdb70, 0x20, 0x3, 0x3b7, 0x0, r4}, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x14) [ 1535.563604] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1535.565188] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1535.568396] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 01:17:32 executing program 5: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x400000) [ 1535.602637] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1535.604214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1535.605835] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1535.619528] FAULT_INJECTION: forcing a failure. [ 1535.619528] name failslab, interval 1, probability 0, space 0, times 0 [ 1535.622465] CPU: 0 PID: 9266 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 1535.623912] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1535.625668] Call Trace: [ 1535.626242] dump_stack+0x107/0x167 [ 1535.627025] should_fail.cold+0x5/0xa [ 1535.627842] ? create_object.isra.0+0x3a/0xa30 [ 1535.628822] should_failslab+0x5/0x20 [ 1535.629627] kmem_cache_alloc+0x5b/0x310 [ 1535.630502] ? mark_held_locks+0x9e/0xe0 [ 1535.631370] create_object.isra.0+0x3a/0xa30 [ 1535.632300] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1535.633380] kmem_cache_alloc_bulk+0x168/0x320 [ 1535.634453] io_submit_sqes+0x713e/0x8780 [ 1535.635440] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1535.636516] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1535.637540] ? find_held_lock+0x2c/0x110 [ 1535.638549] ? io_submit_sqes+0x8780/0x8780 [ 1535.639496] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1535.640513] ? wait_for_completion_io+0x270/0x270 [ 1535.641529] ? rcu_read_lock_any_held+0x75/0xa0 [ 1535.642513] ? vfs_write+0x354/0xb10 [ 1535.643308] ? fput_many+0x2f/0x1a0 [ 1535.644067] ? ksys_write+0x1a9/0x260 [ 1535.644870] ? __ia32_sys_read+0xb0/0xb0 [ 1535.645733] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1535.646850] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1535.647941] do_syscall_64+0x33/0x40 [ 1535.648738] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1535.649828] RIP: 0033:0x7fe076d62b19 [ 1535.650617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1535.654508] RSP: 002b:00007fe0742d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1535.656112] RAX: ffffffffffffffda RBX: 00007fe076e75f60 RCX: 00007fe076d62b19 [ 1535.657612] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1535.659123] RBP: 00007fe0742d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1535.660644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1535.662142] R13: 00007ffebfddc57f R14: 00007fe0742d8300 R15: 0000000000022000 01:17:32 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1535.718815] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1535.771864] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1535.773369] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1535.775024] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 01:17:48 executing program 7: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 43) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:17:48 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0x0, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:17:48 executing program 4: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 19) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091", 0x4e}}, 0x0) 01:17:48 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:17:48 executing program 1: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000004, 0x102070, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x36fe, &(0x7f0000000040)={0x0, 0x0, 0x10}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) io_uring_enter(r4, 0x27d9, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r4, 0x7da4, 0x3546, 0x1, &(0x7f0000000040)={[0x5]}, 0x8) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x14) 01:17:48 executing program 5: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x20000000) 01:17:48 executing program 3: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 28) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:17:48 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091cd3476bae3a05bae56ab34bcbeff5ddd1d8a65bc022525b413d13bc1a620d628d0ac0cfe3ca26247450c82d3f2f6bc0c2a", 0x7f}}, 0x14) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x9, &(0x7f0000000140), 0x1, 0x1}, 0xa33) [ 1551.807913] FAULT_INJECTION: forcing a failure. [ 1551.807913] name failslab, interval 1, probability 0, space 0, times 0 [ 1551.809427] CPU: 1 PID: 9282 Comm: syz-executor.7 Not tainted 5.10.260 #1 [ 1551.810206] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1551.811222] Call Trace: [ 1551.811551] dump_stack+0x107/0x167 [ 1551.812003] should_fail.cold+0x5/0xa [ 1551.812485] ? create_object.isra.0+0x3a/0xa30 [ 1551.813049] should_failslab+0x5/0x20 [ 1551.813535] kmem_cache_alloc+0x5b/0x310 [ 1551.814044] ? mark_held_locks+0x9e/0xe0 [ 1551.814560] create_object.isra.0+0x3a/0xa30 [ 1551.815108] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1551.815749] kmem_cache_alloc_bulk+0x168/0x320 [ 1551.816321] io_submit_sqes+0x713e/0x8780 [ 1551.816860] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1551.817487] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1551.818095] ? find_held_lock+0x2c/0x110 [ 1551.818610] ? io_submit_sqes+0x8780/0x8780 [ 1551.819154] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1551.819654] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1551.819766] ? wait_for_completion_io+0x270/0x270 [ 1551.822697] ? rcu_read_lock_any_held+0x75/0xa0 [ 1551.823267] ? vfs_write+0x354/0xb10 [ 1551.823740] ? fput_many+0x2f/0x1a0 [ 1551.824198] ? ksys_write+0x1a9/0x260 [ 1551.824663] ? __ia32_sys_read+0xb0/0xb0 [ 1551.825159] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1551.825800] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1551.826450] do_syscall_64+0x33/0x40 [ 1551.826912] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1551.827544] RIP: 0033:0x7f866e983b19 [ 1551.828006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1551.830278] RSP: 002b:00007f866bef9188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1551.831235] RAX: ffffffffffffffda RBX: 00007f866ea96f60 RCX: 00007f866e983b19 [ 1551.832112] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1551.832976] RBP: 00007f866bef91d0 R08: 0000000000000000 R09: 0000000000000000 [ 1551.833853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1551.834745] R13: 00007ffed68a0a3f R14: 00007f866bef9300 R15: 0000000000022000 [ 1551.837589] FAULT_INJECTION: forcing a failure. [ 1551.837589] name failslab, interval 1, probability 0, space 0, times 0 [ 1551.839054] CPU: 1 PID: 9290 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 1551.839867] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1551.840857] Call Trace: [ 1551.841179] dump_stack+0x107/0x167 [ 1551.841612] should_fail.cold+0x5/0xa [ 1551.842076] should_failslab+0x5/0x20 [ 1551.842547] kmem_cache_alloc_bulk+0x4b/0x320 [ 1551.843086] io_submit_sqes+0x713e/0x8780 [ 1551.843609] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1551.844213] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1551.844794] ? find_held_lock+0x2c/0x110 [ 1551.845287] ? io_submit_sqes+0x8780/0x8780 [ 1551.845778] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1551.846359] ? wait_for_completion_io+0x270/0x270 [ 1551.846950] ? rcu_read_lock_any_held+0x75/0xa0 [ 1551.847512] ? vfs_write+0x354/0xb10 [ 1551.847957] ? fput_many+0x2f/0x1a0 [ 1551.848394] ? ksys_write+0x1a9/0x260 [ 1551.848847] ? __ia32_sys_read+0xb0/0xb0 [ 1551.849346] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1551.849973] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1551.850599] do_syscall_64+0x33/0x40 [ 1551.851051] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1551.851671] RIP: 0033:0x7fe076d62b19 [ 1551.852121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1551.854321] RSP: 002b:00007fe0742d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1551.855199] RAX: ffffffffffffffda RBX: 00007fe076e75f60 RCX: 00007fe076d62b19 [ 1551.856040] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1551.856905] RBP: 00007fe0742d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1551.857753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1551.858605] R13: 00007ffebfddc57f R14: 00007fe0742d8300 R15: 0000000000022000 [ 1551.878698] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1551.885685] FAULT_INJECTION: forcing a failure. [ 1551.885685] name failslab, interval 1, probability 0, space 0, times 0 [ 1551.888465] CPU: 0 PID: 9285 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1551.889946] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1551.891770] Call Trace: [ 1551.892353] dump_stack+0x107/0x167 [ 1551.893147] should_fail.cold+0x5/0xa [ 1551.893984] should_failslab+0x5/0x20 [ 1551.894818] kmem_cache_alloc_bulk+0x4b/0x320 [ 1551.895804] io_submit_sqes+0x713e/0x8780 [ 1551.896739] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1551.897819] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1551.898877] ? find_held_lock+0x2c/0x110 01:17:48 executing program 7: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 44) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) [ 1551.899755] ? io_submit_sqes+0x8780/0x8780 [ 1551.900862] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1551.901892] ? wait_for_completion_io+0x270/0x270 [ 1551.902932] ? rcu_read_lock_any_held+0x75/0xa0 [ 1551.903915] ? vfs_write+0x354/0xb10 [ 1551.904750] ? fput_many+0x2f/0x1a0 [ 1551.905536] ? ksys_write+0x1a9/0x260 [ 1551.906359] ? __ia32_sys_read+0xb0/0xb0 [ 1551.907247] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1551.908353] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1551.909480] do_syscall_64+0x33/0x40 01:17:48 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091cd3476bae3a05bae56ab34bcbeff5ddd1d8a65bc022525b413d13bc1a620d628d0ac0cfe3ca26247450c82d3f2f6bc0c2a5c", 0x80}}, 0x0) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x9, &(0x7f0000000140), 0x1, 0x1}, 0xa33) [ 1551.910281] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1551.911427] RIP: 0033:0x7ffa806a4b19 [ 1551.912213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1551.916092] RSP: 002b:00007ffa7dc1a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1551.917722] RAX: ffffffffffffffda RBX: 00007ffa807b7f60 RCX: 00007ffa806a4b19 [ 1551.919252] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1551.920762] RBP: 00007ffa7dc1a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1551.922298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1551.923808] R13: 00007fff571e114f R14: 00007ffa7dc1a300 R15: 0000000000022000 [ 1551.943872] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1551.944838] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1551.945812] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1551.970701] FAULT_INJECTION: forcing a failure. [ 1551.970701] name failslab, interval 1, probability 0, space 0, times 0 [ 1551.972059] CPU: 1 PID: 9308 Comm: syz-executor.7 Not tainted 5.10.260 #1 [ 1551.972849] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1551.973792] Call Trace: [ 1551.974103] dump_stack+0x107/0x167 [ 1551.974531] should_fail.cold+0x5/0xa [ 1551.974975] ? memcg_alloc_page_obj_cgroups+0x73/0x100 [ 1551.975580] should_failslab+0x5/0x20 [ 1551.976021] __kmalloc_node+0x76/0x420 [ 1551.976476] memcg_alloc_page_obj_cgroups+0x73/0x100 [ 1551.977060] memcg_slab_post_alloc_hook+0x1f0/0x430 [ 1551.977643] kmem_cache_alloc_bulk+0x182/0x320 [ 1551.978179] io_submit_sqes+0x713e/0x8780 [ 1551.978685] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1551.979266] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1551.979939] ? find_held_lock+0x2c/0x110 [ 1551.980454] ? io_submit_sqes+0x8780/0x8780 [ 1551.981049] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1551.981764] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1551.982448] ? trace_hardirqs_on+0x5b/0x180 [ 1551.982961] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1551.983599] ? fput_many+0x2f/0x1a0 [ 1551.984104] ? fput_many+0x121/0x1a0 [ 1551.984605] ? ksys_write+0x1a9/0x260 [ 1551.985133] ? __ia32_sys_read+0xb0/0xb0 [ 1551.985619] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1551.986271] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1551.986878] do_syscall_64+0x33/0x40 [ 1551.987305] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1551.987900] RIP: 0033:0x7f866e983b19 [ 1551.988329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1551.990582] RSP: 002b:00007f866bef9188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1551.991516] RAX: ffffffffffffffda RBX: 00007f866ea96f60 RCX: 00007f866e983b19 [ 1551.992334] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1551.993162] RBP: 00007f866bef91d0 R08: 0000000000000000 R09: 0000000000000000 [ 1551.993976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1551.994803] R13: 00007ffed68a0a3f R14: 00007f866bef9300 R15: 0000000000022000 [ 1552.001050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1552.003401] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 01:17:48 executing program 4: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 20) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091", 0x4e}}, 0x0) 01:17:48 executing program 1: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r7}}, 0x5) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x0, @fd=r4, 0x0, 0xaae, 0xeb, 0x10, 0x0, {0x3, r7}}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x14) [ 1552.014466] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 01:17:48 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091cd3476bae3a05bae56ab34bcbeff5ddd1d8a65bc022525b413d13bc1a620d628d0ac0cfe3ca26247450c82d3f2f6bc0c2a5c", 0x80}}, 0x0) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x9, &(0x7f0000000140), 0x1, 0x1}, 0xa33) 01:17:48 executing program 5: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x20000000000000) [ 1552.060231] FAULT_INJECTION: forcing a failure. [ 1552.060231] name failslab, interval 1, probability 0, space 0, times 0 [ 1552.061591] CPU: 1 PID: 9312 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 1552.062387] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1552.063535] Call Trace: [ 1552.063867] dump_stack+0x107/0x167 [ 1552.064285] should_fail.cold+0x5/0xa [ 1552.064730] ? create_object.isra.0+0x3a/0xa30 [ 1552.065283] should_failslab+0x5/0x20 [ 1552.065808] kmem_cache_alloc+0x5b/0x310 [ 1552.066306] create_object.isra.0+0x3a/0xa30 [ 1552.066912] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1552.067617] kmem_cache_alloc_bulk+0x168/0x320 [ 1552.068261] io_submit_sqes+0x713e/0x8780 [ 1552.068805] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1552.069392] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1552.069953] ? find_held_lock+0x2c/0x110 [ 1552.070444] ? io_submit_sqes+0x8780/0x8780 [ 1552.071046] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1552.071627] ? wait_for_completion_io+0x270/0x270 [ 1552.072202] ? rcu_read_lock_any_held+0x75/0xa0 [ 1552.072790] ? vfs_write+0x354/0xb10 [ 1552.073300] ? fput_many+0x2f/0x1a0 [ 1552.073814] ? ksys_write+0x1a9/0x260 [ 1552.074381] ? __ia32_sys_read+0xb0/0xb0 [ 1552.074858] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1552.075459] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1552.076064] do_syscall_64+0x33/0x40 [ 1552.076583] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1552.077217] RIP: 0033:0x7fe076d62b19 [ 1552.077646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1552.079786] RSP: 002b:00007fe0742d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1552.080664] RAX: ffffffffffffffda RBX: 00007fe076e75f60 RCX: 00007fe076d62b19 [ 1552.081486] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1552.082310] RBP: 00007fe0742d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1552.083231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1552.084213] R13: 00007ffebfddc57f R14: 00007fe0742d8300 R15: 0000000000022000 01:17:48 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0x0, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2400000010000100000000ec0000009600000900050000000000000005000080480000006fe884b7f11ac8f1810d0dc930b7fbbdfe445812bd4e3ddf303ed7320b364ab5ef9768d0c54531c0e48e8b51a2f78d54f00d9cdd3a5569eaaaf9d57fd007e7eff61a89507780518151cc0bb52f615f18e044c54fca953b368cc61d149f11066c74aac60fe6c088582777cddc52bd82c5ef927b1c475f2e339546488ff742ba361f30616ba6000013203bece0c63d63d44a2d8033a9f2319b5d7e75aed01f84fbba37b71774867fc770eb6690f7a3c3e0d63d75b35925d7980ce0513e1600a3b9b86344041999a73312ac34f870e770a7124542c63a0febe8281dfa46ca86343801872702c3c16a7816d215b6c8b12d910177eed40ffd341132a1e8e19120405d7896"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:17:48 executing program 7: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 45) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:17:48 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091cd3476bae3a05bae56ab34bcbeff5ddd1d8a65bc022525b413d13bc1a620d628d0ac0cfe3ca26247450c82d3f2f6bc0c2a5c", 0x80}}, 0x0) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x9, &(0x7f0000000140), 0x1, 0x1}, 0xa33) 01:17:48 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1552.159774] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1552.181993] FAULT_INJECTION: forcing a failure. [ 1552.181993] name failslab, interval 1, probability 0, space 0, times 0 [ 1552.183558] CPU: 1 PID: 9324 Comm: syz-executor.7 Not tainted 5.10.260 #1 [ 1552.184349] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1552.185301] Call Trace: [ 1552.185612] dump_stack+0x107/0x167 [ 1552.186020] should_fail.cold+0x5/0xa [ 1552.186454] ? create_object.isra.0+0x3a/0xa30 [ 1552.186987] should_failslab+0x5/0x20 [ 1552.187428] kmem_cache_alloc+0x5b/0x310 [ 1552.187911] create_object.isra.0+0x3a/0xa30 [ 1552.188419] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1552.189029] kmem_cache_alloc_bulk+0x168/0x320 [ 1552.189575] io_submit_sqes+0x713e/0x8780 [ 1552.190081] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1552.190666] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1552.191226] ? find_held_lock+0x2c/0x110 [ 1552.191702] ? io_submit_sqes+0x8780/0x8780 [ 1552.192214] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1552.192779] ? wait_for_completion_io+0x270/0x270 [ 1552.193352] ? rcu_read_lock_any_held+0x75/0xa0 [ 1552.193891] ? vfs_write+0x354/0xb10 [ 1552.194306] ? fput_many+0x2f/0x1a0 [ 1552.194711] ? ksys_write+0x1a9/0x260 [ 1552.195157] ? __ia32_sys_read+0xb0/0xb0 [ 1552.195631] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1552.196210] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1552.196817] do_syscall_64+0x33/0x40 [ 1552.197230] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1552.197828] RIP: 0033:0x7f866e983b19 [ 1552.198262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1552.200422] RSP: 002b:00007f866bef9188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1552.201255] RAX: ffffffffffffffda RBX: 00007f866ea96f60 RCX: 00007f866e983b19 [ 1552.202033] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1552.202813] RBP: 00007f866bef91d0 R08: 0000000000000000 R09: 0000000000000000 [ 1552.203629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1552.204442] R13: 00007ffed68a0a3f R14: 00007f866bef9300 R15: 0000000000022000 [ 1552.223084] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1552.240592] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1552.241458] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1552.242359] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1552.266036] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1552.266861] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1552.267805] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1567.341645] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 01:18:04 executing program 3: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 29) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:18:04 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:18:04 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091cd3476bae3a05bae56ab34bcbeff5ddd1d8a65bc022525b413d13bc1a620d628d0ac0cfe3ca26247450c82d3f2f6bc0c2a5c", 0x80}}, 0x14) syz_io_uring_setup(0x0, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x9, &(0x7f0000000140), 0x1, 0x1}, 0xa33) 01:18:04 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:18:04 executing program 1: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r5, 0x0}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x80010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r3, r6, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x2, 0x4004, @fd=r0, 0xffffffff, &(0x7f0000000180)="e0b650b73f041c9a55e155f385c155646edf74cd4cb69bc5196e43a9bd5b51d72bcb1a7b26324b5874ad7a9be09aa4f80af32aa3ae57dd5dfe722853ba158878494861eead814d7d06db7a5ca0002fc1ec0ef5a86e9be67ed5b3ecd0defb9d0f874d742bb668f0ecfad3df5b45659301788625dc3e1c1015eb83d2ba626088aec425fce67d3bab50b308c4bac72573c1f201bfffd2afae595ac3c6b6930194d7a58e08a92f9ad83d0ab31e89f07028", 0xaf, 0x0, 0x1}, 0x16e) io_uring_enter(r0, 0x1d2a, 0x2531, 0x2, &(0x7f0000000140)={[0x3]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0x4, 0x80010, r0, 0x10000000) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x1000006, 0x12, r0, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r2, &(0x7f0000000280)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd_index=0x6, 0x0, 0x0, 0x4, 0x5, 0x1, {0x0, r9}}, 0x1) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x14) 01:18:04 executing program 5: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x40000000000000) 01:18:04 executing program 7: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 46) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:18:04 executing program 4: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 21) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091", 0x4e}}, 0x0) [ 1567.345824] FAULT_INJECTION: forcing a failure. [ 1567.345824] name failslab, interval 1, probability 0, space 0, times 0 [ 1567.347173] CPU: 1 PID: 9340 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 1567.347955] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1567.348902] Call Trace: [ 1567.349211] dump_stack+0x107/0x167 [ 1567.349633] should_fail.cold+0x5/0xa [ 1567.350079] ? create_object.isra.0+0x3a/0xa30 [ 1567.350609] should_failslab+0x5/0x20 [ 1567.351045] kmem_cache_alloc+0x5b/0x310 [ 1567.351510] ? mark_held_locks+0x9e/0xe0 [ 1567.351981] create_object.isra.0+0x3a/0xa30 [ 1567.352485] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1567.353066] kmem_cache_alloc_bulk+0x168/0x320 [ 1567.353595] io_submit_sqes+0x713e/0x8780 [ 1567.354087] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1567.354668] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1567.355222] ? find_held_lock+0x2c/0x110 [ 1567.355691] ? io_submit_sqes+0x8780/0x8780 [ 1567.356184] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1567.356731] ? wait_for_completion_io+0x270/0x270 [ 1567.357281] ? rcu_read_lock_any_held+0x75/0xa0 [ 1567.357803] ? vfs_write+0x354/0xb10 [ 1567.358228] ? fput_many+0x2f/0x1a0 [ 1567.358651] ? ksys_write+0x1a9/0x260 [ 1567.359084] ? __ia32_sys_read+0xb0/0xb0 [ 1567.359553] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1567.360144] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1567.360738] do_syscall_64+0x33/0x40 [ 1567.361165] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1567.361754] RIP: 0033:0x7fe076d62b19 [ 1567.362177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1567.364270] RSP: 002b:00007fe0742d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1567.365133] RAX: ffffffffffffffda RBX: 00007fe076e75f60 RCX: 00007fe076d62b19 [ 1567.365942] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1567.366754] RBP: 00007fe0742d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1567.367563] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1567.368366] R13: 00007ffebfddc57f R14: 00007fe0742d8300 R15: 0000000000022000 01:18:04 executing program 5: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000000000000000) [ 1567.387102] FAULT_INJECTION: forcing a failure. [ 1567.387102] name failslab, interval 1, probability 0, space 0, times 0 [ 1567.388419] CPU: 1 PID: 9349 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1567.389196] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1567.390134] Call Trace: [ 1567.390447] dump_stack+0x107/0x167 [ 1567.390879] should_fail.cold+0x5/0xa [ 1567.391322] ? memcg_alloc_page_obj_cgroups+0x73/0x100 [ 1567.391925] should_failslab+0x5/0x20 [ 1567.392358] __kmalloc_node+0x76/0x420 [ 1567.392811] memcg_alloc_page_obj_cgroups+0x73/0x100 [ 1567.393391] memcg_slab_post_alloc_hook+0x1f0/0x430 [ 1567.393975] kmem_cache_alloc_bulk+0x182/0x320 [ 1567.394489] io_submit_sqes+0x713e/0x8780 [ 1567.394992] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1567.395534] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1567.396105] ? find_held_lock+0x2c/0x110 [ 1567.396575] ? io_submit_sqes+0x8780/0x8780 [ 1567.397077] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1567.397627] ? wait_for_completion_io+0x270/0x270 [ 1567.398179] ? rcu_read_lock_any_held+0x75/0xa0 [ 1567.398719] ? vfs_write+0x354/0xb10 [ 1567.399146] ? fput_many+0x2f/0x1a0 [ 1567.399559] ? ksys_write+0x1a9/0x260 [ 1567.399991] ? __ia32_sys_read+0xb0/0xb0 [ 1567.400459] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1567.401056] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1567.401650] do_syscall_64+0x33/0x40 [ 1567.402071] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1567.402662] RIP: 0033:0x7ffa806a4b19 [ 1567.403086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1567.405175] RSP: 002b:00007ffa7dc1a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1567.406046] RAX: ffffffffffffffda RBX: 00007ffa807b7f60 RCX: 00007ffa806a4b19 [ 1567.406869] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1567.407683] RBP: 00007ffa7dc1a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1567.408498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1567.409309] R13: 00007fff571e114f R14: 00007ffa7dc1a300 R15: 0000000000022000 [ 1567.418595] FAULT_INJECTION: forcing a failure. [ 1567.418595] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1567.420271] CPU: 1 PID: 9348 Comm: syz-executor.7 Not tainted 5.10.260 #1 [ 1567.421053] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1567.421995] Call Trace: [ 1567.422299] dump_stack+0x107/0x167 [ 1567.422725] should_fail.cold+0x5/0xa [ 1567.423163] _copy_to_user+0x2e/0x180 [ 1567.423602] simple_read_from_buffer+0xcc/0x160 [ 1567.424139] proc_fail_nth_read+0x198/0x230 [ 1567.424635] ? proc_sessionid_read+0x230/0x230 [ 1567.425156] ? security_file_permission+0xb1/0xe0 [ 1567.425707] ? proc_sessionid_read+0x230/0x230 [ 1567.426226] vfs_read+0x228/0x620 [ 1567.426628] ksys_read+0x12d/0x260 [ 1567.427028] ? vfs_write+0xb10/0xb10 [ 1567.427439] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1567.428038] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1567.428606] do_syscall_64+0x33/0x40 [ 1567.429034] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1567.429619] RIP: 0033:0x7f866e93669c [ 1567.430044] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1567.432142] RSP: 002b:00007f866bef9170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1567.433021] RAX: ffffffffffffffda RBX: 000000000000030e RCX: 00007f866e93669c [ 1567.433837] RDX: 000000000000000f RSI: 00007f866bef91e0 RDI: 0000000000000005 [ 1567.434655] RBP: 00007f866bef91d0 R08: 0000000000000000 R09: 0000000000000000 [ 1567.435469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1567.436276] R13: 00007ffed68a0a3f R14: 00007f866bef9300 R15: 0000000000022000 01:18:04 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091cd3476bae3a05bae56ab34bcbeff5ddd1d8a65bc022525b413d13bc1a620d628d0ac0cfe3ca26247450c82d3f2f6bc0c2a5c", 0x80}}, 0x14) syz_io_uring_setup(0x0, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x9, &(0x7f0000000140), 0x1, 0x1}, 0xa33) [ 1567.446821] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1567.447974] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1567.449061] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 01:18:20 executing program 4: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 22) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091", 0x4e}}, 0x0) 01:18:20 executing program 1: r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0)={0x0, 0x0, 0x20}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000200)=""/186, 0xba}, {&(0x7f0000000340)=""/76, 0xffffffffffffffcb}, {&(0x7f00000006c0)=""/173, 0xad}], 0x3, &(0x7f0000000140)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}, 0x40000122) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000001780)={{0x1, 0x1, 0x18, r0, {0xff}}, './file0\x00'}) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f00000017c0)=r3, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x14) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$nfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRES32=r5]) ioctl$VFAT_IOCTL_READDIR_SHORT(r5, 0x82307202, &(0x7f0000000480)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 01:18:20 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091cd3476bae3a05bae56ab34bcbeff5ddd1d8a65bc022525b413d13bc1a620d628d0ac0cfe3ca26247450c82d3f2f6bc0c2a5c", 0x80}}, 0x14) syz_io_uring_setup(0x0, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x9, &(0x7f0000000140), 0x1, 0x1}, 0xa33) 01:18:20 executing program 7: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:18:20 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1583.352729] FAULT_INJECTION: forcing a failure. [ 1583.352729] name failslab, interval 1, probability 0, space 0, times 0 [ 1583.355488] CPU: 1 PID: 9370 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 1583.356940] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1583.358699] Call Trace: [ 1583.359274] dump_stack+0x107/0x167 [ 1583.360056] should_fail.cold+0x5/0xa [ 1583.360872] ? create_object.isra.0+0x3a/0xa30 [ 1583.361840] should_failslab+0x5/0x20 [ 1583.362651] kmem_cache_alloc+0x5b/0x310 [ 1583.363533] ? mark_held_locks+0x9e/0xe0 [ 1583.364411] create_object.isra.0+0x3a/0xa30 [ 1583.365358] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1583.366455] kmem_cache_alloc_bulk+0x168/0x320 [ 1583.367706] io_submit_sqes+0x713e/0x8780 [ 1583.368639] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1583.369693] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1583.370720] ? find_held_lock+0x2c/0x110 [ 1583.371579] ? io_submit_sqes+0x8780/0x8780 01:18:20 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2400000010000100000000ec0000009600000900050000000000000005000080480000006fe884b7f11ac8f1810d0dc930b7fbbdfe445812bd4e3ddf303ed7320b364ab5ef9768d0c54531c0e48e8b51a2f78d54f00d9cdd3a5569eaaaf9d57fd007e7eff61a89507780518151cc0bb52f615f18e044c54fca953b368cc61d149f11066c74aac60fe6c088582777cddc52bd82c5ef927b1c475f2e339546488ff742ba361f30616ba6000013203bece0c63d63d44a2d8033a9f2319b5d7e75aed01f84fbba37b71774867fc770eb6690f7a3c3e0d63d75b35925d7980ce0513e1600a3b9b86344041999a73312ac34f870e770a7124542c63a0febe8281dfa46ca86343801872702c3c16a7816d215b6c8b12d910177eed40ffd341132a1e8e19120405d7896"], 0x24}}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:18:20 executing program 5: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000008, 0x1010, r0, 0x10000000) syz_io_uring_submit(r1, r3, &(0x7f0000000140)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x1, 0x2004, @fd_index=0x3, 0x6, 0x0, 0x0, 0x1, 0x1, {0x3}}, 0x1000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 01:18:20 executing program 3: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 30) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) [ 1583.372502] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1583.373614] ? wait_for_completion_io+0x270/0x270 [ 1583.374629] ? rcu_read_lock_any_held+0x75/0xa0 [ 1583.375620] ? vfs_write+0x354/0xb10 [ 1583.376410] ? fput_many+0x2f/0x1a0 [ 1583.377179] ? ksys_write+0x1a9/0x260 [ 1583.377984] ? __ia32_sys_read+0xb0/0xb0 [ 1583.378858] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1583.379974] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1583.381081] do_syscall_64+0x33/0x40 [ 1583.381877] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1583.382971] RIP: 0033:0x7fe076d62b19 [ 1583.383759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1583.387683] RSP: 002b:00007fe0742d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1583.388449] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1583.389296] RAX: ffffffffffffffda RBX: 00007fe076e75f60 RCX: 00007fe076d62b19 [ 1583.389308] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1583.389319] RBP: 00007fe0742d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1583.389330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1583.389342] R13: 00007ffebfddc57f R14: 00007fe0742d8300 R15: 0000000000022000 [ 1583.418615] FAULT_INJECTION: forcing a failure. [ 1583.418615] name failslab, interval 1, probability 0, space 0, times 0 [ 1583.421103] CPU: 1 PID: 9379 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1583.422565] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1583.424346] Call Trace: [ 1583.424913] dump_stack+0x107/0x167 [ 1583.425691] should_fail.cold+0x5/0xa [ 1583.426504] ? create_object.isra.0+0x3a/0xa30 [ 1583.427483] should_failslab+0x5/0x20 [ 1583.428301] kmem_cache_alloc+0x5b/0x310 [ 1583.429171] ? mark_held_locks+0x9e/0xe0 [ 1583.430039] create_object.isra.0+0x3a/0xa30 [ 1583.430983] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1583.432072] kmem_cache_alloc_bulk+0x168/0x320 [ 1583.433055] io_submit_sqes+0x713e/0x8780 [ 1583.433981] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1583.435049] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1583.436079] ? find_held_lock+0x2c/0x110 [ 1583.436960] ? io_submit_sqes+0x8780/0x8780 [ 1583.437882] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1583.438918] ? wait_for_completion_io+0x270/0x270 [ 1583.439950] ? rcu_read_lock_any_held+0x75/0xa0 [ 1583.440931] ? vfs_write+0x354/0xb10 [ 1583.441728] ? fput_many+0x2f/0x1a0 [ 1583.442500] ? ksys_write+0x1a9/0x260 [ 1583.443314] ? __ia32_sys_read+0xb0/0xb0 [ 1583.444197] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1583.445312] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1583.446414] do_syscall_64+0x33/0x40 [ 1583.447220] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1583.448311] RIP: 0033:0x7ffa806a4b19 [ 1583.449099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1583.453024] RSP: 002b:00007ffa7dc1a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1583.454634] RAX: ffffffffffffffda RBX: 00007ffa807b7f60 RCX: 00007ffa806a4b19 [ 1583.456185] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1583.457698] RBP: 00007ffa7dc1a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1583.459230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1583.460757] R13: 00007fff571e114f R14: 00007ffa7dc1a300 R15: 0000000000022000 01:18:20 executing program 7: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:18:20 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091cd3476bae3a05bae56ab34bcbeff5ddd1d8a65bc022525b413d13bc1a620d628d0ac0cfe3ca26247450c82d3f2f6bc0c2a5c", 0x80}}, 0x14) syz_io_uring_setup(0x36fe, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x9, &(0x7f0000000140), 0x1, 0x1}, 0xa33) [ 1583.536316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1583.538403] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1583.540383] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 01:18:20 executing program 5: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)=0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x4a8302, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)={0x151c, 0x2f, 0x4, 0x70bd28, 0x25dfdbfd, {0xe}, [@nested={0x36c, 0x2b, 0x0, 0x1, [@typed={0x8, 0x36, 0x0, 0x0, @fd=r0}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@remote}, @generic="f7ac4a84bbf881fa2b0d4394b8d7bbfd2d5cf265e1d47b4fc473325174a7a10c87cc0b76f9dfb4e12bbbe9ccfa31532a92153fdca3232f4087908d1f", @generic="0c3ae8d9addc78ada28f303a9e58c34f2cc65906c794a9bfe8fb6f0db7f7e91efb9fc776b64981d8af419917c526", @typed={0x17, 0x6c, 0x0, 0x0, @binary="7657b60ac8f96d3143e878af4bc02bca2fb1cc"}, @generic="d403b0d25c8f5433c87244dfa44f080c5e635fb41bf9e2df3132147c9dcde7b0215b2c268bc765bb472506e44b68744c3cbfb909c11097fcbd54ec3631b62f000997d52b07c987f6d29352f28f393cb8b0e4ff45359ae02fe7a4fbe7fae282bfefcd6998dd3350b3bde80df939795f4274ba372e9951466842eec0e4f7feb79ddc3ca589c5c5f2c2b5c07129a7826c0fae080969b937614f1245c1336182e86df2bf45ff927661da6d5216c55226fc59cf4794d17c37ff3d94688eb713b34f11a44820dd9c3ca375fac6e5d1081c6c7d0c7c6c4fa990829048a6dc8a54e83b0d9b0f03b5d6e8bb599eac4e3a", @generic="cc37f11c1cbbe9f16310a59bc2e429e579bb9893f9e15d3163e52b8885f60624146240903db95ac23b365f296901f34fd5ed91abeadbbbcc0b6b03fceea67043d7de7c99a4428353002ea988ac80e2b252f7a14ece9f2b26ff5c189b707bc464ac8f8447211e7fb90b7522c9d3ad7667a41269aee9c9487592dd01a1848081e6fefb4196832ebba85afc43a2ce6cde8da1df9f5961ce1dcf547d1208e56acb1d95ca8987b6b48bf71d0459e04d0d51cc10d27a6d4650d94506f6f8d3a6785fb59b469ce02aab076c47fdb99ddeb37861859a35e6f26305faaad1566b32f40a5f9a955f41a1d7c749e709b39ea1ce3678", @generic="50e89f6e04b5e2bd4d7d97dcb5478495efb79601a4a42698dea164ec4f2fa9da154b5c437a7f82cd67c9ce1f12be269711419b718d6b023eeed7b1bd602bdbf7e95025b5c9d0f32d494865a1bbc58c371384991c54e3d0923678f469b5ad3d5175b6c556f9aab63971811ab1269acba7ed0ff96a5ad7cc80e225e7dbb038b03f56a4b172b3827db9026e22b683c507711ecae3ac28a6c4f17e3e51673107592768214b9376ef7f0227ed36e02bc96098a91b7166198ca869493a9c9acb262da0b58e803c82c9b0574b70874a097cf4d1bfa2e131082caaf1e0ce88fb1fa568af34bd5dfcbb2a2f0ab3d75712bbd6"]}, @generic="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", @nested={0x53, 0x4e, 0x0, 0x1, [@typed={0x8, 0x3d, 0x0, 0x0, @pid=r3}, @generic="bcd339f91ccea18011dbeb5cf1c2b0cb3845f8fe0e57021deff59bcdcb1daaaacdb59ed86a2a82f52d5e3928ff048b88debbcbe2693fb75e3ce165ab3277fc", @typed={0x8, 0x26, 0x0, 0x0, @fd=r4}]}, @nested={0x50, 0x35, 0x0, 0x1, [@typed={0x14, 0x85, 0x0, 0x0, @ipv6=@private0}, @typed={0x8, 0x29, 0x0, 0x0, @fd}, @typed={0x14, 0x23, 0x0, 0x0, @ipv6=@empty}, @typed={0x8, 0x6a, 0x0, 0x0, @u32=0x4}, @typed={0x14, 0x16, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}]}, @typed={0xc, 0x6, 0x0, 0x0, @u64=0xfffffffeffffffff}, @nested={0x8b, 0x2, 0x0, 0x1, [@typed={0x8, 0x6e, 0x0, 0x0, @ipv4=@loopback}, @generic="b2802447f59afc342dc54d748994b419a828585d0e99fa7e8732cdcdeca43d13b0e4de2aa81a80b87a52c1f000fa22fa364039ea04c62cde796b22ba33ff52b3c3", @typed={0x8, 0x68, 0x0, 0x0, @pid}, @typed={0x8, 0x25, 0x0, 0x0, @str='{*\\\x00'}, @typed={0x8, 0x8b, 0x0, 0x0, @uid=0xee01}, @typed={0x4, 0x61}, @generic="e568d2087f097fd5df5958accd6c13f63a7dae33c65389182b6e79fda83d796e4b4a"]}, @typed={0xc, 0x6c, 0x0, 0x0, @u64=0x5cd7}, @generic="8fbbd25b77564aab379d3f0048b5b9b882de0fc83184622f05a4edcd436db994ed44e5d40a54e5b8e46ac7c010b81d415ce49bbe21871b501c635851f53b5341b7ea3ffa9d9ff4a21864f6e6a1cab0af1baf209b"]}, 0x151c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 01:18:20 executing program 4: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 23) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091", 0x4e}}, 0x0) 01:18:20 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2400000010000100000000ec0000009600000900050000000000000005000080480000006fe884b7f11ac8f1810d0dc930b7fbbdfe445812bd4e3ddf303ed7320b364ab5ef9768d0c54531c0e48e8b51a2f78d54f00d9cdd3a5569eaaaf9d57fd007e7eff61a89507780518151cc0bb52f615f18e044c54fca953b368cc61d149f11066c74aac60fe6c088582777cddc52bd82c5ef927b1c475f2e339546488ff742ba361f30616ba6000013203bece0c63d63d44a2d8033a9f2319b5d7e75aed01f84fbba37b71774867fc770eb6690f7a3c3e0d63d75b35925d7980ce0513e1600a3b9b86344041999a73312ac34f870e770a7124542c63a0febe8281dfa46ca86343801872702c3c16a7816d215b6c8b12d910177eed40ffd341132a1e8e19120405d7896"], 0x24}}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:18:20 executing program 1: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) r3 = syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) r4 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xc, 0x2010, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000180)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}, 0xaa0c) io_uring_enter(r3, 0x27d9, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r3, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) rt_sigtimedwait(&(0x7f00000001c0)={[0x4]}, 0x0, &(0x7f0000000200), 0x8) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x14) 01:18:20 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1583.690083] FAULT_INJECTION: forcing a failure. [ 1583.690083] name failslab, interval 1, probability 0, space 0, times 0 [ 1583.692961] CPU: 1 PID: 9395 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 1583.694571] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1583.696510] Call Trace: [ 1583.697133] dump_stack+0x107/0x167 [ 1583.697985] should_fail.cold+0x5/0xa [ 1583.698891] ? create_object.isra.0+0x3a/0xa30 [ 1583.699973] should_failslab+0x5/0x20 [ 1583.700870] kmem_cache_alloc+0x5b/0x310 [ 1583.701823] ? mark_held_locks+0x9e/0xe0 [ 1583.702789] create_object.isra.0+0x3a/0xa30 [ 1583.703833] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1583.705029] kmem_cache_alloc_bulk+0x168/0x320 [ 1583.706105] io_submit_sqes+0x713e/0x8780 [ 1583.707129] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1583.708306] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1583.709437] ? find_held_lock+0x2c/0x110 [ 1583.710395] ? io_submit_sqes+0x8780/0x8780 [ 1583.711423] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1583.712555] ? wait_for_completion_io+0x270/0x270 [ 1583.713688] ? rcu_read_lock_any_held+0x75/0xa0 [ 1583.714779] ? vfs_write+0x354/0xb10 [ 1583.715652] ? fput_many+0x2f/0x1a0 [ 1583.716500] ? ksys_write+0x1a9/0x260 [ 1583.717374] ? __ia32_sys_read+0xb0/0xb0 [ 1583.718322] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1583.719551] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1583.720746] do_syscall_64+0x33/0x40 [ 1583.721611] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1583.722812] RIP: 0033:0x7fe076d62b19 [ 1583.723677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1583.727932] RSP: 002b:00007fe0742d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1583.729693] RAX: ffffffffffffffda RBX: 00007fe076e75f60 RCX: 00007fe076d62b19 [ 1583.731363] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1583.733059] RBP: 00007fe0742d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1583.734763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1583.736462] R13: 00007ffebfddc57f R14: 00007fe0742d8300 R15: 0000000000022000 01:18:20 executing program 3: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 31) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:18:20 executing program 1: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x4, 0x0, 0x1, 0x7, 0x6, @remote}, 0x14) r4 = perf_event_open(&(0x7f0000000140)={0x1, 0xffffffffffffffa6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xff, 0x3, 0x2, 0x6, 0x0, 0x3, 0x40, 0x4, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0x3}, 0x100, 0x6, 0x6, 0x2, 0x6, 0x6, 0x7, 0x0, 0x7, 0x0, 0x2}, 0x0, 0xc, r4, 0xa) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x14) [ 1583.770087] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 01:18:20 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091cd3476bae3a05bae56ab34bcbeff5ddd1d8a65bc022525b413d13bc1a620d628d0ac0cfe3ca26247450c82d3f2f6bc0c2a5c", 0x80}}, 0x14) syz_io_uring_setup(0x36fe, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x9, &(0x7f0000000140), 0x1, 0x1}, 0xa33) 01:18:20 executing program 7: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2000, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:18:20 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1583.860053] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1583.861572] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1583.863388] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1583.875466] FAULT_INJECTION: forcing a failure. [ 1583.875466] name failslab, interval 1, probability 0, space 0, times 0 [ 1583.878114] CPU: 1 PID: 9409 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1583.879647] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1583.881510] Call Trace: [ 1583.882107] dump_stack+0x107/0x167 [ 1583.882941] should_fail.cold+0x5/0xa [ 1583.883817] ? create_object.isra.0+0x3a/0xa30 [ 1583.884848] should_failslab+0x5/0x20 [ 1583.885709] kmem_cache_alloc+0x5b/0x310 [ 1583.886638] ? mark_held_locks+0x9e/0xe0 [ 1583.887571] create_object.isra.0+0x3a/0xa30 [ 1583.888559] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1583.889710] kmem_cache_alloc_bulk+0x168/0x320 [ 1583.890750] io_submit_sqes+0x713e/0x8780 [ 1583.891735] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1583.892867] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1583.893964] ? find_held_lock+0x2c/0x110 [ 1583.894895] ? io_submit_sqes+0x8780/0x8780 [ 1583.895866] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1583.896944] ? wait_for_completion_io+0x270/0x270 [ 1583.898024] ? rcu_read_lock_any_held+0x75/0xa0 [ 1583.899059] ? vfs_write+0x354/0xb10 [ 1583.899893] ? fput_many+0x2f/0x1a0 [ 1583.900698] ? ksys_write+0x1a9/0x260 [ 1583.901540] ? __ia32_sys_read+0xb0/0xb0 [ 1583.902448] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1583.903629] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1583.904777] do_syscall_64+0x33/0x40 [ 1583.905608] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1583.906745] RIP: 0033:0x7ffa806a4b19 [ 1583.907582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1583.911661] RSP: 002b:00007ffa7dc1a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1583.913320] RAX: ffffffffffffffda RBX: 00007ffa807b7f60 RCX: 00007ffa806a4b19 [ 1583.914890] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1583.916467] RBP: 00007ffa7dc1a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1583.918025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1583.919594] R13: 00007fff571e114f R14: 00007ffa7dc1a300 R15: 0000000000022000 01:18:33 executing program 3: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 32) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:18:33 executing program 5: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r5, 0x0}, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xa, 0x8010, r0, 0x10000000) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$nfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRES32=r7]) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r6, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r7, &(0x7f00000001c0)=0x80, &(0x7f0000000200)=@hci, 0x0, 0x80800, 0x0, {0x0, r8}}, 0x7fff) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r10 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={r10, 0x8, 0xf3d8, 0xffffffffffffffce}) ioctl$sock_inet6_SIOCSIFDSTADDR(r11, 0x8918, &(0x7f0000000180)={@empty, 0x1}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 01:18:33 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:18:33 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091cd3476bae3a05bae56ab34bcbeff5ddd1d8a65bc022525b413d13bc1a620d628d0ac0cfe3ca26247450c82d3f2f6bc0c2a5c", 0x80}}, 0x14) syz_io_uring_setup(0x36fe, 0x0, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x9, &(0x7f0000000140), 0x1, 0x1}, 0xa33) 01:18:33 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2400000010000100000000ec0000009600000900050000000000000005000080480000006fe884b7f11ac8f1810d0dc930b7fbbdfe445812bd4e3ddf303ed7320b364ab5ef9768d0c54531c0e48e8b51a2f78d54f00d9cdd3a5569eaaaf9d57fd007e7eff61a89507780518151cc0bb52f615f18e044c54fca953b368cc61d149f11066c74aac60fe6c088582777cddc52bd82c5ef927b1c475f2e339546488ff742ba361f30616ba6000013203bece0c63d63d44a2d8033a9f2319b5d7e75aed01f84fbba37b71774867fc770eb6690f7a3c3e0d63d75b35925d7980ce0513e1600a3b9b86344041999a73312ac34f870e770a7124542c63a0febe8281dfa46ca86343801872702c3c16a7816d215b6c8b12d910177eed40ffd341132a1e8e19120405d7896"], 0x24}}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:18:33 executing program 1: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000200)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r0, 0x3, 0x0, 0x3, 0x4, 0x1, {0x0, r7}}, 0x73a2) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0xa2000, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x40, 0x0, 0x7f, 0x33, 0x0, 0x8, 0x5835fc3a774bc149, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, @perf_bp={&(0x7f0000000280), 0x16d78d6417ec053a}, 0x0, 0x8, 0x8000, 0x4, 0x20000000000, 0x17d4, 0x400, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xa, 0xffffffffffffffff, 0xa) syz_mount_image$nfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRES32=r8]) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x2, 0x2007, @fd, 0x6, 0x0, 0x0, 0x1, 0x1, {0x1}}, 0x1) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x14) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x6200, 0x0) pidfd_getfd(r9, r0, 0x0) 01:18:33 executing program 7: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x4000, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:18:33 executing program 4: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 24) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091", 0x4e}}, 0x0) [ 1597.077987] nfs: Unknown parameter '' [ 1597.084458] FAULT_INJECTION: forcing a failure. [ 1597.084458] name failslab, interval 1, probability 0, space 0, times 0 [ 1597.087429] CPU: 1 PID: 9422 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1597.089072] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1597.091090] Call Trace: [ 1597.091733] dump_stack+0x107/0x167 [ 1597.092623] should_fail.cold+0x5/0xa [ 1597.093555] ? create_object.isra.0+0x3a/0xa30 [ 1597.094652] should_failslab+0x5/0x20 [ 1597.095090] nfs: Unknown parameter '' [ 1597.095570] kmem_cache_alloc+0x5b/0x310 [ 1597.095594] ? mark_held_locks+0x9e/0xe0 [ 1597.098055] create_object.isra.0+0x3a/0xa30 [ 1597.099125] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1597.100357] kmem_cache_alloc_bulk+0x168/0x320 [ 1597.101470] io_submit_sqes+0x713e/0x8780 [ 1597.102520] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1597.103736] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1597.103764] ? find_held_lock+0x2c/0x110 [ 1597.103795] ? io_submit_sqes+0x8780/0x8780 [ 1597.103827] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1597.103853] ? wait_for_completion_io+0x270/0x270 [ 1597.103880] ? rcu_read_lock_any_held+0x75/0xa0 [ 1597.103900] ? vfs_write+0x354/0xb10 [ 1597.103923] ? fput_many+0x2f/0x1a0 [ 1597.103943] ? ksys_write+0x1a9/0x260 [ 1597.103961] ? __ia32_sys_read+0xb0/0xb0 [ 1597.103990] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1597.104013] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1597.104042] do_syscall_64+0x33/0x40 [ 1597.104065] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1597.104079] RIP: 0033:0x7ffa806a4b19 [ 1597.104099] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1597.104111] RSP: 002b:00007ffa7dc1a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1597.104134] RAX: ffffffffffffffda RBX: 00007ffa807b7f60 RCX: 00007ffa806a4b19 [ 1597.104147] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1597.104159] RBP: 00007ffa7dc1a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1597.104171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1597.104184] R13: 00007fff571e114f R14: 00007ffa7dc1a300 R15: 0000000000022000 [ 1597.127000] FAULT_INJECTION: forcing a failure. [ 1597.127000] name failslab, interval 1, probability 0, space 0, times 0 [ 1597.127036] CPU: 1 PID: 9438 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 1597.127047] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1597.127054] Call Trace: [ 1597.127082] dump_stack+0x107/0x167 [ 1597.127115] should_fail.cold+0x5/0xa [ 1597.127144] ? create_object.isra.0+0x3a/0xa30 [ 1597.127166] should_failslab+0x5/0x20 [ 1597.127187] kmem_cache_alloc+0x5b/0x310 [ 1597.127209] ? mark_held_locks+0x9e/0xe0 [ 1597.127237] create_object.isra.0+0x3a/0xa30 [ 1597.127256] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1597.127286] kmem_cache_alloc_bulk+0x168/0x320 [ 1597.127319] io_submit_sqes+0x713e/0x8780 [ 1597.127385] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1597.127405] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1597.127433] ? find_held_lock+0x2c/0x110 [ 1597.127463] ? io_submit_sqes+0x8780/0x8780 [ 1597.127495] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1597.127522] ? wait_for_completion_io+0x270/0x270 [ 1597.127548] ? rcu_read_lock_any_held+0x75/0xa0 [ 1597.127563] ? vfs_write+0x354/0xb10 [ 1597.127587] ? fput_many+0x2f/0x1a0 [ 1597.127606] ? ksys_write+0x1a9/0x260 [ 1597.127624] ? __ia32_sys_read+0xb0/0xb0 [ 1597.127653] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1597.127676] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1597.127704] do_syscall_64+0x33/0x40 [ 1597.127726] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1597.127740] RIP: 0033:0x7fe076d62b19 [ 1597.127758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1597.127770] RSP: 002b:00007fe0742d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1597.127794] RAX: ffffffffffffffda RBX: 00007fe076e75f60 RCX: 00007fe076d62b19 [ 1597.127806] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1597.127818] RBP: 00007fe0742d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1597.127830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1597.127843] R13: 00007ffebfddc57f R14: 00007fe0742d8300 R15: 0000000000022000 [ 1597.129716] nfs: Unknown parameter '' 01:18:47 executing program 7: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x200000, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:18:47 executing program 1: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x78d8, &(0x7f0000000140)={0x0, 0xd398, 0x0, 0x1, 0x149, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_setup(0x6868, &(0x7f0000000340)={0x0, 0x3e37, 0x25, 0x0, 0x15d, 0x0, r0}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) syz_io_uring_submit(0x0, r4, &(0x7f0000000280)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x7, 0x1, &(0x7f0000000240)='\b', 0x40, 0x0, 0x1, {0x3}}, 0x5) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x14) 01:18:47 executing program 5: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_freeze_timeout', 0x301082, 0x82) 01:18:47 executing program 4: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 25) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091", 0x4e}}, 0x0) 01:18:47 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:18:47 executing program 3: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 33) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:18:47 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091cd3476bae3a05bae56ab34bcbeff5ddd1d8a65bc022525b413d13bc1a620d628d0ac0cfe3ca26247450c82d3f2f6bc0c2a5c", 0x80}}, 0x14) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x9, &(0x7f0000000140), 0x1, 0x1}, 0xa33) 01:18:47 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2400000010000100000000ec0000009600000900050000000000000005000080480000006fe884b7f11ac8f1810d0dc930b7fbbdfe445812bd4e3ddf303ed7320b364ab5ef9768d0c54531c0e48e8b51a2f78d54f00d9cdd3a5569eaaaf9d57fd007e7eff61a89507780518151cc0bb52f615f18e044c54fca953b368cc61d149f11066c74aac60fe6c088582777cddc52bd82c5ef927b1c475f2e339546488ff742ba361f30616ba6000013203bece0c63d63d44a2d8033a9f2319b5d7e75aed01f84fbba37b71774867fc770eb6690f7a3c3e0d63d75b35925d7980ce0513e1600a3b9b86344041999a73312ac34f870e770a7124542c63a0febe8281dfa46ca86343801872702c3c16a7816d215b6c8b12d910177eed40ffd341132a1e8e19120405d7896"], 0x24}}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1611.024959] FAULT_INJECTION: forcing a failure. [ 1611.024959] name failslab, interval 1, probability 0, space 0, times 0 [ 1611.027675] CPU: 1 PID: 9458 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 1611.029137] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1611.030899] Call Trace: [ 1611.031476] dump_stack+0x107/0x167 [ 1611.032252] should_fail.cold+0x5/0xa [ 1611.033071] ? create_object.isra.0+0x3a/0xa30 [ 1611.034040] should_failslab+0x5/0x20 [ 1611.034843] FAULT_INJECTION: forcing a failure. [ 1611.034843] name failslab, interval 1, probability 0, space 0, times 0 [ 1611.037202] kmem_cache_alloc+0x5b/0x310 [ 1611.038038] ? mark_held_locks+0x9e/0xe0 [ 1611.038910] create_object.isra.0+0x3a/0xa30 [ 1611.039852] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1611.040932] kmem_cache_alloc_bulk+0x168/0x320 [ 1611.041920] io_submit_sqes+0x713e/0x8780 [ 1611.042851] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1611.043932] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1611.044957] ? find_held_lock+0x2c/0x110 [ 1611.045836] ? io_submit_sqes+0x8780/0x8780 [ 1611.046766] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1611.047810] ? wait_for_completion_io+0x270/0x270 [ 1611.048840] ? rcu_read_lock_any_held+0x75/0xa0 [ 1611.049822] ? vfs_write+0x354/0xb10 [ 1611.050617] ? fput_many+0x2f/0x1a0 [ 1611.051405] ? ksys_write+0x1a9/0x260 [ 1611.052207] ? __ia32_sys_read+0xb0/0xb0 [ 1611.053091] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1611.054221] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1611.055328] do_syscall_64+0x33/0x40 [ 1611.056117] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1611.057199] RIP: 0033:0x7fe076d62b19 [ 1611.057989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1611.061880] RSP: 002b:00007fe0742d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1611.063498] RAX: ffffffffffffffda RBX: 00007fe076e75f60 RCX: 00007fe076d62b19 [ 1611.065011] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1611.066536] RBP: 00007fe0742d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1611.068080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1611.069618] R13: 00007ffebfddc57f R14: 00007fe0742d8300 R15: 0000000000022000 [ 1611.071219] CPU: 0 PID: 9457 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1611.072756] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1611.074559] Call Trace: [ 1611.075158] dump_stack+0x107/0x167 [ 1611.075957] should_fail.cold+0x5/0xa [ 1611.076796] ? create_object.isra.0+0x3a/0xa30 [ 1611.077787] should_failslab+0x5/0x20 [ 1611.078619] kmem_cache_alloc+0x5b/0x310 [ 1611.079510] ? create_object.isra.0+0x3ad/0xa30 [ 1611.080530] create_object.isra.0+0x3a/0xa30 [ 1611.081484] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1611.082597] __kmalloc_node+0x1ae/0x420 [ 1611.083482] memcg_alloc_page_obj_cgroups+0x73/0x100 [ 1611.084600] memcg_slab_post_alloc_hook+0x1f0/0x430 [ 1611.085689] ? trace_hardirqs_on+0x5b/0x180 [ 1611.086632] kmem_cache_alloc_bulk+0x182/0x320 [ 1611.087633] io_submit_sqes+0x713e/0x8780 [ 1611.088552] ? percpu_ref_tryget_many+0x21c/0x2d0 [ 1611.089617] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1611.090701] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1611.091750] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1611.092918] ? io_submit_sqes+0x8780/0x8780 [ 1611.093851] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1611.095002] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1611.096173] ? trace_hardirqs_on+0x5b/0x180 [ 1611.097105] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1611.098286] ? ksys_write+0x20b/0x260 [ 1611.099117] ? __sanitizer_cov_trace_pc+0x52/0x60 [ 1611.100161] ? ksys_write+0x1a9/0x260 [ 1611.100986] ? __ia32_sys_read+0xb0/0xb0 [ 1611.101866] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1611.102993] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1611.104124] do_syscall_64+0x33/0x40 [ 1611.104925] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1611.106032] RIP: 0033:0x7ffa806a4b19 [ 1611.106840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1611.110801] RSP: 002b:00007ffa7dc1a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1611.112444] RAX: ffffffffffffffda RBX: 00007ffa807b7f60 RCX: 00007ffa806a4b19 [ 1611.113972] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1611.115513] RBP: 00007ffa7dc1a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1611.117046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1611.118575] R13: 00007fff571e114f R14: 00007ffa7dc1a300 R15: 0000000000022000 01:18:48 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:18:48 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091cd3476bae3a05bae56ab34bcbeff5ddd1d8a65bc022525b413d13bc1a620d628d0ac0cfe3ca26247450c82d3f2f6bc0c2a5c", 0x80}}, 0x14) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x9, &(0x7f0000000140), 0x1, 0x1}, 0xa33) 01:18:48 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:18:48 executing program 5: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x608800, 0x0) io_uring_enter(r3, 0x4f0b, 0x4266, 0x0, &(0x7f0000000180)={[0x7fffffff]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) io_uring_enter(r4, 0x34c2, 0xd005, 0x3, &(0x7f0000000200)={[0x5]}, 0x8) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 01:18:48 executing program 7: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x400000, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:18:48 executing program 1: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x14) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x565240, 0x0) r5 = syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) io_uring_enter(r5, 0x27d9, 0x0, 0x0, 0x0, 0x0) write$binfmt_misc(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0xef) syz_io_uring_setup(0x1b19, &(0x7f0000000180)={0x0, 0x93b3, 0x20, 0x3, 0x37a, 0x0, r5}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 01:18:48 executing program 4: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 26) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091", 0x4e}}, 0x0) 01:18:48 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091cd3476bae3a05bae56ab34bcbeff5ddd1d8a65bc022525b413d13bc1a620d628d0ac0cfe3ca26247450c82d3f2f6bc0c2a5c", 0x80}}, 0x14) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x9, &(0x7f0000000140), 0x1, 0x1}, 0xa33) 01:18:48 executing program 7: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x20000000, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:18:48 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:18:48 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:18:48 executing program 5: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$nfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRES32=r4]) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r7, 0x0}, 0x0) getsockname(r7, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000200)=0x80) syz_io_uring_submit(r3, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r8, 0x0, 0x0, 0x0, 0x800}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1611.521041] FAULT_INJECTION: forcing a failure. [ 1611.521041] name failslab, interval 1, probability 0, space 0, times 0 [ 1611.523777] CPU: 0 PID: 9492 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 1611.525267] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1611.527070] Call Trace: [ 1611.527670] dump_stack+0x107/0x167 [ 1611.528465] should_fail.cold+0x5/0xa [ 1611.529296] ? create_object.isra.0+0x3a/0xa30 [ 1611.530285] should_failslab+0x5/0x20 [ 1611.531124] kmem_cache_alloc+0x5b/0x310 [ 1611.531982] create_object.isra.0+0x3a/0xa30 [ 1611.532898] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1611.533977] kmem_cache_alloc_bulk+0x168/0x320 [ 1611.534946] io_submit_sqes+0x713e/0x8780 [ 1611.535872] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1611.536921] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1611.537945] ? find_held_lock+0x2c/0x110 [ 1611.538806] ? io_submit_sqes+0x8780/0x8780 [ 1611.539733] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1611.540749] ? wait_for_completion_io+0x270/0x270 [ 1611.541765] ? rcu_read_lock_any_held+0x75/0xa0 [ 1611.542736] ? vfs_write+0x354/0xb10 [ 1611.543529] ? fput_many+0x2f/0x1a0 [ 1611.544292] ? ksys_write+0x1a9/0x260 [ 1611.545083] ? __ia32_sys_read+0xb0/0xb0 [ 1611.545933] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1611.547045] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1611.548143] do_syscall_64+0x33/0x40 [ 1611.548928] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1611.550007] RIP: 0033:0x7fe076d62b19 [ 1611.550787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1611.554662] RSP: 002b:00007fe0742d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1611.556276] RAX: ffffffffffffffda RBX: 00007fe076e75f60 RCX: 00007fe076d62b19 [ 1611.557770] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1611.559278] RBP: 00007fe0742d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1611.560771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1611.562264] R13: 00007ffebfddc57f R14: 00007fe0742d8300 R15: 0000000000022000 01:18:48 executing program 3: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 34) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:18:48 executing program 1: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x7, 0xfa, 0x2, 0x0, 0x2, 0x1e, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0x2000, 0x4, 0xf0a, 0x8, 0x8, 0x5, 0x9, 0x0, 0xff, 0x0, 0x101}, 0x0, 0xf, r4, 0x9) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x14) 01:18:48 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091cd3476bae3a05bae56ab34bcbeff5ddd1d8a65bc022525b413d13bc1a620d628d0ac0cfe3ca26247450c82d3f2f6bc0c2a5c", 0x80}}, 0x14) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x9, &(0x7f0000000140), 0x1, 0x1}, 0xa33) [ 1611.728661] FAULT_INJECTION: forcing a failure. [ 1611.728661] name failslab, interval 1, probability 0, space 0, times 0 [ 1611.731604] CPU: 1 PID: 9509 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1611.733237] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1611.735245] Call Trace: [ 1611.735883] dump_stack+0x107/0x167 [ 1611.736760] should_fail.cold+0x5/0xa [ 1611.737676] ? create_object.isra.0+0x3a/0xa30 [ 1611.738763] should_failslab+0x5/0x20 [ 1611.739685] kmem_cache_alloc+0x5b/0x310 [ 1611.740660] ? mark_held_locks+0x9e/0xe0 [ 1611.741655] create_object.isra.0+0x3a/0xa30 [ 1611.742714] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1611.743934] kmem_cache_alloc_bulk+0x168/0x320 [ 1611.745033] io_submit_sqes+0x713e/0x8780 [ 1611.746077] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1611.747281] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1611.748445] ? find_held_lock+0x2c/0x110 [ 1611.749430] ? io_submit_sqes+0x8780/0x8780 [ 1611.750479] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1611.751662] ? wait_for_completion_io+0x270/0x270 [ 1611.752799] ? rcu_read_lock_any_held+0x75/0xa0 [ 1611.753883] ? vfs_write+0x354/0xb10 [ 1611.754758] ? fput_many+0x2f/0x1a0 [ 1611.755628] ? ksys_write+0x1a9/0x260 [ 1611.756527] ? __ia32_sys_read+0xb0/0xb0 [ 1611.757483] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1611.758707] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1611.759926] do_syscall_64+0x33/0x40 [ 1611.760797] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1611.761998] RIP: 0033:0x7ffa806a4b19 [ 1611.762876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1611.767196] RSP: 002b:00007ffa7dc1a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1611.768976] RAX: ffffffffffffffda RBX: 00007ffa807b7f60 RCX: 00007ffa806a4b19 [ 1611.770641] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1611.772312] RBP: 00007ffa7dc1a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1611.773956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1611.775608] R13: 00007fff571e114f R14: 00007ffa7dc1a300 R15: 0000000000022000 01:19:02 executing program 3: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 35) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:19:02 executing program 5: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x6056, &(0x7f0000000140)={0x0, 0xa2ae, 0x1, 0x2, 0xfc, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000200)) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x278) sendfile(r4, r5, 0x0, 0x100000001) syz_io_uring_submit(r3, r2, &(0x7f0000000240)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x1, 0x0, r5, 0x0, r0}, 0x10000) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 01:19:02 executing program 4: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 27) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091", 0x4e}}, 0x0) 01:19:02 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091cd3476bae3a05bae56ab34bcbeff5ddd1d8a65bc022525b413d13bc1a620d628d0ac0cfe3ca26247450c82d3f2f6bc0c2a5c", 0x80}}, 0x14) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x9, &(0x7f0000000140), 0x1, 0x1}, 0xa33) 01:19:02 executing program 1: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x278) syz_io_uring_setup(0x7ba6, &(0x7f00000001c0)={0x0, 0xb281, 0x2, 0x1, 0x281, 0x0, r5}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000280)) sendfile(r4, r5, 0x0, 0x100000001) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x39, 0x8, 0x9, 0xfd, 0x0, 0x10000, 0x90004, 0x5, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x101, 0x80000001}, 0x0, 0x0, 0x7fff, 0x6, 0x7, 0x76, 0x32e, 0x0, 0x401, 0x0, 0xffffffff80000001}, 0xffffffffffffffff, 0x10, r5, 0xa) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x14) 01:19:02 executing program 7: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x2000, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:19:02 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:19:02 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1625.834994] FAULT_INJECTION: forcing a failure. [ 1625.834994] name failslab, interval 1, probability 0, space 0, times 0 [ 1625.836335] CPU: 1 PID: 9519 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 1625.837102] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1625.838026] Call Trace: [ 1625.838334] dump_stack+0x107/0x167 [ 1625.838752] should_fail.cold+0x5/0xa [ 1625.839183] ? create_object.isra.0+0x3a/0xa30 [ 1625.839717] should_failslab+0x5/0x20 [ 1625.840148] kmem_cache_alloc+0x5b/0x310 [ 1625.840608] ? mark_held_locks+0x9e/0xe0 [ 1625.841119] create_object.isra.0+0x3a/0xa30 [ 1625.841727] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1625.842444] kmem_cache_alloc_bulk+0x168/0x320 [ 1625.843093] io_submit_sqes+0x713e/0x8780 [ 1625.843729] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1625.844427] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1625.845121] ? find_held_lock+0x2c/0x110 [ 1625.845707] ? io_submit_sqes+0x8780/0x8780 [ 1625.846324] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1625.847018] ? wait_for_completion_io+0x270/0x270 [ 1625.847685] ? rcu_read_lock_any_held+0x75/0xa0 [ 1625.848427] ? vfs_write+0x354/0xb10 [ 1625.848880] ? fput_many+0x2f/0x1a0 [ 1625.849290] ? ksys_write+0x1a9/0x260 [ 1625.849796] ? __ia32_sys_read+0xb0/0xb0 [ 1625.850464] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1625.851463] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1625.852469] do_syscall_64+0x33/0x40 [ 1625.853161] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1625.854032] RIP: 0033:0x7fe076d62b19 [ 1625.854634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1625.857754] RSP: 002b:00007fe0742d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1625.858928] RAX: ffffffffffffffda RBX: 00007fe076e75f60 RCX: 00007fe076d62b19 [ 1625.860083] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1625.861202] RBP: 00007fe0742d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1625.861421] FAULT_INJECTION: forcing a failure. [ 1625.861421] name failslab, interval 1, probability 0, space 0, times 0 [ 1625.862313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1625.862322] R13: 00007ffebfddc57f R14: 00007fe0742d8300 R15: 0000000000022000 [ 1625.868741] CPU: 0 PID: 9528 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1625.870353] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1625.872330] Call Trace: [ 1625.872965] dump_stack+0x107/0x167 [ 1625.873832] should_fail.cold+0x5/0xa [ 1625.874740] ? create_object.isra.0+0x3a/0xa30 [ 1625.875827] should_failslab+0x5/0x20 [ 1625.876692] kmem_cache_alloc+0x5b/0x310 [ 1625.877608] ? mark_held_locks+0x9e/0xe0 [ 1625.878537] create_object.isra.0+0x3a/0xa30 [ 1625.879535] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1625.880688] kmem_cache_alloc_bulk+0x168/0x320 [ 1625.881727] io_submit_sqes+0x713e/0x8780 [ 1625.882706] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1625.883843] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1625.884942] ? find_held_lock+0x2c/0x110 [ 1625.885865] ? io_submit_sqes+0x8780/0x8780 [ 1625.886852] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1625.887955] ? wait_for_completion_io+0x270/0x270 [ 1625.889048] ? rcu_read_lock_any_held+0x75/0xa0 [ 1625.890088] ? vfs_write+0x354/0xb10 [ 1625.890941] ? fput_many+0x2f/0x1a0 [ 1625.891775] ? ksys_write+0x1a9/0x260 [ 1625.892634] ? __ia32_sys_read+0xb0/0xb0 [ 1625.893560] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1625.894750] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1625.895927] do_syscall_64+0x33/0x40 [ 1625.896767] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1625.897923] RIP: 0033:0x7ffa806a4b19 [ 1625.898761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1625.902919] RSP: 002b:00007ffa7dc1a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1625.904658] RAX: ffffffffffffffda RBX: 00007ffa807b7f60 RCX: 00007ffa806a4b19 [ 1625.906267] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1625.907892] RBP: 00007ffa7dc1a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1625.909494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1625.911107] R13: 00007fff571e114f R14: 00007ffa7dc1a300 R15: 0000000000022000 [ 1626.756622] syz-executor.1 (9541) used greatest stack depth: 22512 bytes left [ 1643.029953] FAULT_INJECTION: forcing a failure. [ 1643.029953] name failslab, interval 1, probability 0, space 0, times 0 [ 1643.031595] CPU: 0 PID: 9554 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1643.032530] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1643.033961] Call Trace: [ 1643.034338] dump_stack+0x107/0x167 [ 1643.034846] should_fail.cold+0x5/0xa [ 1643.035376] ? create_object.isra.0+0x3a/0xa30 [ 1643.035827] FAULT_INJECTION: forcing a failure. [ 1643.035827] name failslab, interval 1, probability 0, space 0, times 0 [ 1643.036022] should_failslab+0x5/0x20 [ 1643.039157] kmem_cache_alloc+0x5b/0x310 [ 1643.039727] ? mark_held_locks+0x9e/0xe0 [ 1643.040287] create_object.isra.0+0x3a/0xa30 [ 1643.040889] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1643.041590] kmem_cache_alloc_bulk+0x168/0x320 [ 1643.042230] io_submit_sqes+0x713e/0x8780 [ 1643.042826] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1643.043514] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1643.044178] ? find_held_lock+0x2c/0x110 [ 1643.044737] ? io_submit_sqes+0x8780/0x8780 [ 1643.045340] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1643.045996] ? wait_for_completion_io+0x270/0x270 [ 1643.046658] ? rcu_read_lock_any_held+0x75/0xa0 [ 1643.047290] ? vfs_write+0x354/0xb10 [ 1643.047809] ? fput_many+0x2f/0x1a0 [ 1643.048313] ? ksys_write+0x1a9/0x260 [ 1643.048833] ? __ia32_sys_read+0xb0/0xb0 [ 1643.049395] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1643.050109] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1643.050820] do_syscall_64+0x33/0x40 [ 1643.051331] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1643.052038] RIP: 0033:0x7ffa806a4b19 [ 1643.052546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1643.055061] RSP: 002b:00007ffa7dc1a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1643.056106] RAX: ffffffffffffffda RBX: 00007ffa807b7f60 RCX: 00007ffa806a4b19 [ 1643.057086] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1643.058060] RBP: 00007ffa7dc1a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1643.059044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1643.060031] R13: 00007fff571e114f R14: 00007ffa7dc1a300 R15: 0000000000022000 01:19:19 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091cd3476bae3a05bae56ab34bcbeff5ddd1d8a65bc022525b413d13bc1a620d628d0ac0cfe3ca26247450c82d3f2f6bc0c2a5c", 0x80}}, 0x14) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, 0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x9, &(0x7f0000000140), 0x1, 0x1}, 0xa33) 01:19:19 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:19:19 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:19:19 executing program 5: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 01:19:19 executing program 7: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x4000, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:19:19 executing program 4: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 28) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091", 0x4e}}, 0x0) 01:19:19 executing program 3: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 36) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:19:19 executing program 1: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0x10, 0x80000) r1 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000001c0)={0x5, 0x7, 0x10001, 0x3, 0x4}, 0x14) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x40, 0x0, 0x25, 0x0, 0x0, 0x48e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) io_uring_enter(r5, 0x27d9, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x200000c, 0x13, r5, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x14) [ 1643.061044] CPU: 1 PID: 9550 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 1643.062889] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1643.064878] Call Trace: [ 1643.065512] dump_stack+0x107/0x167 [ 1643.066391] should_fail.cold+0x5/0xa [ 1643.067309] should_failslab+0x5/0x20 [ 1643.068226] kmem_cache_alloc_bulk+0x4b/0x320 [ 1643.069314] io_submit_sqes+0x713e/0x8780 [ 1643.070355] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1643.071560] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1643.072722] ? find_held_lock+0x2c/0x110 [ 1643.073704] ? io_submit_sqes+0x8780/0x8780 [ 1643.074747] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1643.075916] ? wait_for_completion_io+0x270/0x270 [ 1643.077075] ? rcu_read_lock_any_held+0x75/0xa0 [ 1643.078188] ? vfs_write+0x354/0xb10 [ 1643.079097] ? fput_many+0x2f/0x1a0 [ 1643.079977] ? ksys_write+0x1a9/0x260 [ 1643.080883] ? __ia32_sys_read+0xb0/0xb0 [ 1643.081839] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1643.083074] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1643.084307] do_syscall_64+0x33/0x40 [ 1643.085187] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1643.086383] RIP: 0033:0x7fe076d62b19 [ 1643.087253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1643.091564] RSP: 002b:00007fe0742d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1643.093348] RAX: ffffffffffffffda RBX: 00007fe076e75f60 RCX: 00007fe076d62b19 [ 1643.095023] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1643.096695] RBP: 00007fe0742d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1643.098376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1643.100047] R13: 00007ffebfddc57f R14: 00007fe0742d8300 R15: 0000000000022000 01:19:19 executing program 7: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x200000, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:19:19 executing program 1: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) io_uring_enter(r4, 0x27d9, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x14) 01:19:19 executing program 7: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x400000, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:19:20 executing program 5: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$nfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRES32=r4]) r5 = signalfd4(r0, &(0x7f0000000140)={[0xffffffff]}, 0x8, 0x80000) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$nfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRES32=r6]) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0x0, 0x7, r4, &(0x7f0000000180)={r5, r6, 0x6}) 01:19:20 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:19:20 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:19:20 executing program 1: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0xffffffff, 0x112}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4040}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x278) sendfile(0xffffffffffffffff, r4, 0x0, 0x100000001) perf_event_open(&(0x7f0000000240)={0x5, 0x80, 0x0, 0x8, 0xff, 0xe0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xff, 0x1, @perf_bp={&(0x7f0000000140), 0x3}, 0x2001, 0xc7, 0x9d, 0x8, 0xb5, 0x8001, 0x0, 0x0, 0x4, 0x0, 0x8d7}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x1) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x14) [ 1643.263995] nfs: Unknown parameter '' 01:19:20 executing program 3: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 37) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:19:20 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091cd3476bae3a05bae56ab34bcbeff5ddd1d8a65bc022525b413d13bc1a620d628d0ac0cfe3ca26247450c82d3f2f6bc0c2a5c", 0x80}}, 0x14) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x9, &(0x7f0000000140), 0x1, 0x1}, 0xa33) [ 1643.293222] nfs: Unknown parameter '' 01:19:20 executing program 7: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x20000000, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:19:20 executing program 5: r0 = syz_io_uring_setup(0x1c29, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x16a}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$nfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRES32=r4]) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/tracepoint', 0x117241, 0x1b9) openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x2200, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$nfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRES32=r7]) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_FILES_UPDATE={0x14, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)=[r4, r5, r6, r7], 0x4}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1643.361950] FAULT_INJECTION: forcing a failure. [ 1643.361950] name failslab, interval 1, probability 0, space 0, times 0 [ 1643.364973] CPU: 1 PID: 9588 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1643.366564] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1643.368513] Call Trace: [ 1643.369134] dump_stack+0x107/0x167 [ 1643.369990] should_fail.cold+0x5/0xa [ 1643.370886] should_failslab+0x5/0x20 [ 1643.371798] kmem_cache_alloc_bulk+0x4b/0x320 [ 1643.372857] io_submit_sqes+0x713e/0x8780 [ 1643.373870] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1643.375030] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1643.376168] ? find_held_lock+0x2c/0x110 [ 1643.377116] ? io_submit_sqes+0x8780/0x8780 [ 1643.378133] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1643.379254] ? wait_for_completion_io+0x270/0x270 [ 1643.380379] ? rcu_read_lock_any_held+0x75/0xa0 [ 1643.381452] ? vfs_write+0x354/0xb10 [ 1643.382320] ? fput_many+0x2f/0x1a0 [ 1643.383169] ? ksys_write+0x1a9/0x260 [ 1643.384060] ? __ia32_sys_read+0xb0/0xb0 [ 1643.385015] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1643.386220] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1643.387420] do_syscall_64+0x33/0x40 [ 1643.388285] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1643.389465] RIP: 0033:0x7ffa806a4b19 [ 1643.390320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1643.394558] RSP: 002b:00007ffa7dc1a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1643.396312] RAX: ffffffffffffffda RBX: 00007ffa807b7f60 RCX: 00007ffa806a4b19 [ 1643.397959] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1643.399611] RBP: 00007ffa7dc1a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1643.401251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1643.402887] R13: 00007fff571e114f R14: 00007ffa7dc1a300 R15: 0000000000022000 01:19:20 executing program 4: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 29) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091", 0x4e}}, 0x0) 01:19:20 executing program 1: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r7, 0x0}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000540)=@IORING_OP_SEND={0x1a, 0x2, 0x0, r4, 0x0, &(0x7f0000000500)="baa3eda9fee241dd271590b2fd83bc27c6eacb769327af8a63b244b8654d4438690652a3cd07ea2e142b003872dab11a", 0x30, 0x4000050, 0x0, {0x0, r8}}, 0x5) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)=@abs, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f0000000340)=""/37, 0x25}], 0x2, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x62) pipe2(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x6, 0x5c, 0x5, 0x9, 0x0, 0xc42c, 0x203, 0x5, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7032, 0x2, @perf_config_ext={0x6, 0x2ac3f8da}, 0xa, 0x6c22, 0x3, 0x2, 0x7ff, 0x8ea, 0x97aa, 0x0, 0x9}, r9, 0x7, r10, 0x3) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x14) r11 = inotify_init() syz_mount_image$nfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRES32]) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000005c0)) syz_io_uring_submit(0x0, r2, &(0x7f0000000580)=@IORING_OP_FADVISE={0x18, 0x3, 0x0, @fd, 0x80000000, 0x0, 0x2, 0x4, 0x1}, 0x800) sendfile(r11, 0xffffffffffffffff, &(0x7f00000004c0)=0x7fffffff, 0x81) 01:19:20 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1643.420626] FAULT_INJECTION: forcing a failure. [ 1643.420626] name failslab, interval 1, probability 0, space 0, times 0 [ 1643.421991] CPU: 0 PID: 9595 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 1643.422779] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1643.423759] Call Trace: [ 1643.424071] dump_stack+0x107/0x167 [ 1643.424497] should_fail.cold+0x5/0xa [ 1643.424946] should_failslab+0x5/0x20 [ 1643.425386] kmem_cache_alloc_bulk+0x4b/0x320 [ 1643.425909] ? __sanitizer_cov_trace_switch+0x37/0x80 [ 1643.426513] io_submit_sqes+0x713e/0x8780 [ 1643.427014] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1643.427602] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1643.428165] ? find_held_lock+0x2c/0x110 [ 1643.428636] ? io_submit_sqes+0x8780/0x8780 [ 1643.429148] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1643.429707] ? wait_for_completion_io+0x270/0x270 [ 1643.430271] ? rcu_read_lock_any_held+0x75/0xa0 [ 1643.430809] ? vfs_write+0x354/0xb10 [ 1643.431241] ? fput_many+0x2f/0x1a0 [ 1643.431669] ? ksys_write+0x1a9/0x260 [ 1643.432106] ? __ia32_sys_read+0xb0/0xb0 [ 1643.432580] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1643.433191] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1643.433792] do_syscall_64+0x33/0x40 [ 1643.434224] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1643.434816] RIP: 0033:0x7fe076d62b19 [ 1643.435248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1643.437379] RSP: 002b:00007fe0742d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1643.438264] RAX: ffffffffffffffda RBX: 00007fe076e75f60 RCX: 00007fe076d62b19 [ 1643.439095] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1643.439928] RBP: 00007fe0742d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1643.440752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1643.441573] R13: 00007ffebfddc57f R14: 00007fe0742d8300 R15: 0000000000022000 [ 1643.445360] nfs: Unknown parameter 'ÿÿÿÿ' [ 1643.462925] nfs: Unknown parameter 'ÿÿÿÿ' 01:19:20 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091cd3476bae3a05bae56ab34bcbeff5ddd1d8a65bc022525b413d13bc1a620d628d0ac0cfe3ca26247450c82d3f2f6bc0c2a5c", 0x80}}, 0x14) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x9, &(0x7f0000000140), 0x1, 0x1}, 0xa33) 01:19:20 executing program 7: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x20000000000000, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:19:20 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1643.509952] nfs: Unknown parameter ' ' 01:19:20 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091cd3476bae3a05bae56ab34bcbeff5ddd1d8a65bc022525b413d13bc1a620d628d0ac0cfe3ca26247450c82d3f2f6bc0c2a5c", 0x80}}, 0x14) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x9, &(0x7f0000000140), 0x1, 0x1}, 0xa33) 01:19:20 executing program 1: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$nfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRES32=r3]) pread64(r3, &(0x7f0000000140)=""/19, 0x13, 0xa8f6) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x14) [ 1643.557473] nfs: Unknown parameter ' ' 01:19:20 executing program 4: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 30) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091", 0x4e}}, 0x0) 01:19:20 executing program 7: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x40000000000000, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) [ 1643.625518] FAULT_INJECTION: forcing a failure. [ 1643.625518] name failslab, interval 1, probability 0, space 0, times 0 [ 1643.626867] CPU: 0 PID: 9619 Comm: syz-executor.4 Not tainted 5.10.260 #1 01:19:20 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1643.627653] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1643.628744] Call Trace: [ 1643.629072] dump_stack+0x107/0x167 [ 1643.629496] should_fail.cold+0x5/0xa [ 1643.629942] ? create_object.isra.0+0x3a/0xa30 [ 1643.630468] should_failslab+0x5/0x20 [ 1643.630909] kmem_cache_alloc+0x5b/0x310 [ 1643.631384] ? mark_held_locks+0x9e/0xe0 [ 1643.631867] create_object.isra.0+0x3a/0xa30 [ 1643.632373] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1643.632964] kmem_cache_alloc_bulk+0x168/0x320 [ 1643.633505] io_submit_sqes+0x713e/0x8780 [ 1643.634004] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1643.634585] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1643.635152] ? find_held_lock+0x2c/0x110 [ 1643.635635] ? io_submit_sqes+0x8780/0x8780 [ 1643.636143] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1643.636700] ? wait_for_completion_io+0x270/0x270 [ 1643.637265] ? rcu_read_lock_any_held+0x75/0xa0 [ 1643.637801] ? vfs_write+0x354/0xb10 [ 1643.638238] ? fput_many+0x2f/0x1a0 [ 1643.638659] ? ksys_write+0x1a9/0x260 [ 1643.639099] ? __ia32_sys_read+0xb0/0xb0 [ 1643.639579] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1643.640195] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1643.640799] do_syscall_64+0x33/0x40 [ 1643.641229] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1643.641822] RIP: 0033:0x7fe076d62b19 [ 1643.642255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1643.644380] RSP: 002b:00007fe0742d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1643.645263] RAX: ffffffffffffffda RBX: 00007fe076e75f60 RCX: 00007fe076d62b19 [ 1643.646088] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1643.646915] RBP: 00007fe0742d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1643.647748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1643.648572] R13: 00007ffebfddc57f R14: 00007fe0742d8300 R15: 0000000000022000 01:19:20 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:19:34 executing program 3: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 38) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:19:34 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091cd3476bae3a05bae56ab34bcbeff5ddd1d8a65bc022525b413d13bc1a620d628d0ac0cfe3ca26247450c82d3f2f6bc0c2a5c", 0x80}}, 0x14) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x9, &(0x7f0000000140), 0x1, 0x1}, 0xa33) 01:19:34 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:19:34 executing program 1: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x14) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$nfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRES32=r5]) dup2(r5, r4) syz_io_uring_setup(0x1037, &(0x7f0000000140)={0x0, 0x88be, 0x8, 0x2, 0x4e}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x20010, r0, 0x8000000) 01:19:34 executing program 4: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 31) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091", 0x4e}}, 0x0) 01:19:34 executing program 7: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x2000000000000000, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:19:34 executing program 5: r0 = syz_io_uring_setup(0x607d, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x278) sendfile(r3, r4, 0x0, 0x100000001) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x1, 0x0, r3, &(0x7f0000000140), &(0x7f0000000240)='./file0\x00', 0x1, 0x4000, 0x1}, 0x10000) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$BLKFRASET(r4, 0x1264, &(0x7f0000000280)=0xfff) 01:19:34 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1657.486890] FAULT_INJECTION: forcing a failure. [ 1657.486890] name failslab, interval 1, probability 0, space 0, times 0 [ 1657.490191] CPU: 1 PID: 9639 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 1657.492271] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1657.494743] Call Trace: [ 1657.495513] dump_stack+0x107/0x167 [ 1657.496552] should_fail.cold+0x5/0xa [ 1657.497555] ? create_object.isra.0+0x3a/0xa30 [ 1657.498750] should_failslab+0x5/0x20 [ 1657.499743] kmem_cache_alloc+0x5b/0x310 [ 1657.500726] ? mark_held_locks+0x9e/0xe0 [ 1657.501756] create_object.isra.0+0x3a/0xa30 [ 1657.502784] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1657.503993] kmem_cache_alloc_bulk+0x168/0x320 [ 1657.505038] io_submit_sqes+0x713e/0x8780 [ 1657.506018] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1657.507147] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1657.508243] ? find_held_lock+0x2c/0x110 [ 1657.509168] ? io_submit_sqes+0x8780/0x8780 [ 1657.510149] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1657.511231] ? wait_for_completion_io+0x270/0x270 [ 1657.512328] ? rcu_read_lock_any_held+0x75/0xa0 [ 1657.513370] ? vfs_write+0x354/0xb10 [ 1657.514208] ? fput_many+0x2f/0x1a0 [ 1657.515030] ? ksys_write+0x1a9/0x260 [ 1657.515894] ? __ia32_sys_read+0xb0/0xb0 [ 1657.516810] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1657.517979] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1657.519140] do_syscall_64+0x33/0x40 [ 1657.519987] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1657.521140] RIP: 0033:0x7fe076d62b19 [ 1657.521975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1657.526093] RSP: 002b:00007fe0742d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1657.527806] RAX: ffffffffffffffda RBX: 00007fe076e75f60 RCX: 00007fe076d62b19 01:19:34 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1657.529393] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1657.531140] RBP: 00007fe0742d81d0 R08: 0000000000000000 R09: 0000000000000000 01:19:34 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1657.532737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1657.534396] R13: 00007ffebfddc57f R14: 00007fe0742d8300 R15: 0000000000022000 01:19:34 executing program 4: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 32) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091", 0x4e}}, 0x0) [ 1657.585828] FAULT_INJECTION: forcing a failure. [ 1657.585828] name failslab, interval 1, probability 0, space 0, times 0 [ 1657.588584] CPU: 1 PID: 9647 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1657.590065] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1657.591873] Call Trace: [ 1657.592457] dump_stack+0x107/0x167 [ 1657.593253] should_fail.cold+0x5/0xa [ 1657.594082] ? create_object.isra.0+0x3a/0xa30 [ 1657.595072] should_failslab+0x5/0x20 [ 1657.595905] kmem_cache_alloc+0x5b/0x310 [ 1657.596792] ? mark_held_locks+0x9e/0xe0 [ 1657.597679] create_object.isra.0+0x3a/0xa30 [ 1657.598632] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1657.599748] kmem_cache_alloc_bulk+0x168/0x320 [ 1657.600749] io_submit_sqes+0x713e/0x8780 [ 1657.601690] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1657.602775] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1657.603834] ? find_held_lock+0x2c/0x110 [ 1657.604724] ? io_submit_sqes+0x8780/0x8780 [ 1657.605671] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1657.606716] ? wait_for_completion_io+0x270/0x270 [ 1657.607762] ? rcu_read_lock_any_held+0x75/0xa0 [ 1657.608750] ? vfs_write+0x354/0xb10 [ 1657.609559] ? fput_many+0x2f/0x1a0 [ 1657.610343] ? ksys_write+0x1a9/0x260 [ 1657.611155] ? __ia32_sys_read+0xb0/0xb0 [ 1657.612045] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1657.613180] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1657.614289] do_syscall_64+0x33/0x40 [ 1657.615087] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1657.616195] RIP: 0033:0x7ffa806a4b19 [ 1657.616996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1657.620943] RSP: 002b:00007ffa7dc1a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1657.622579] RAX: ffffffffffffffda RBX: 00007ffa807b7f60 RCX: 00007ffa806a4b19 01:19:34 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091cd3476bae3a05bae56ab34bcbeff5ddd1d8a65bc022525b413d13bc1a620d628d0ac0cfe3ca26247450c82d3f2f6bc0c2a5c", 0x80}}, 0x14) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x9, &(0x7f0000000140), 0x1, 0x1}, 0xa33) [ 1657.624097] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1657.625778] RBP: 00007ffa7dc1a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1657.627289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1657.628514] FAULT_INJECTION: forcing a failure. [ 1657.628514] name failslab, interval 1, probability 0, space 0, times 0 [ 1657.628813] R13: 00007fff571e114f R14: 00007ffa7dc1a300 R15: 0000000000022000 [ 1657.631763] CPU: 0 PID: 9656 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 1657.632644] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1657.633713] Call Trace: [ 1657.634054] dump_stack+0x107/0x167 [ 1657.634522] should_fail.cold+0x5/0xa [ 1657.635016] ? memcg_alloc_page_obj_cgroups+0x73/0x100 [ 1657.635697] should_failslab+0x5/0x20 [ 1657.636186] __kmalloc_node+0x76/0x420 [ 1657.636693] memcg_alloc_page_obj_cgroups+0x73/0x100 [ 1657.637347] memcg_slab_post_alloc_hook+0x1f0/0x430 [ 1657.638001] kmem_cache_alloc_bulk+0x182/0x320 [ 1657.638597] io_submit_sqes+0x713e/0x8780 [ 1657.639154] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1657.639811] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1657.640446] ? io_submit_sqes+0x8780/0x8780 [ 1657.641007] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1657.641625] ? wait_for_completion_io+0x270/0x270 [ 1657.642239] ? ksys_write+0x13a/0x260 [ 1657.642729] ? ksys_write+0x144/0x260 [ 1657.643222] ? copy_kernel_to_fpregs+0x9e/0xe0 [ 1657.643819] ? trace_event_raw_event_x86_fpu+0x390/0x390 [ 1657.644510] ? ksys_write+0x1a9/0x260 [ 1657.644997] ? __ia32_sys_read+0xb0/0xb0 [ 1657.645533] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1657.646202] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1657.646865] do_syscall_64+0x33/0x40 [ 1657.647346] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1657.648013] RIP: 0033:0x7fe076d62b19 [ 1657.648486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1657.650819] RSP: 002b:00007fe0742d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1657.651803] RAX: ffffffffffffffda RBX: 00007fe076e75f60 RCX: 00007fe076d62b19 [ 1657.652722] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1657.653633] RBP: 00007fe0742d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1657.654548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1657.655464] R13: 00007ffebfddc57f R14: 00007fe0742d8300 R15: 0000000000022000 01:19:34 executing program 7: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:19:34 executing program 1: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) io_uring_enter(r3, 0x27d9, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x7f75, 0x65ca, 0x1, &(0x7f0000000080)={[0x5]}, 0x8) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x89, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x14) 01:19:50 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:19:50 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:19:50 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091cd3476bae3a05bae56ab34bcbeff5ddd1d8a65bc022525b413d13bc1a620d628d0ac0cfe3ca26247450c82d3f2f6bc0c2a5c", 0x80}}, 0x14) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x9, &(0x7f0000000140), 0x1, 0x1}, 0xa33) 01:19:50 executing program 3: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 39) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:19:50 executing program 4: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 33) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091", 0x4e}}, 0x0) 01:19:50 executing program 1: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000001880)) [ 1674.083042] FAULT_INJECTION: forcing a failure. [ 1674.083042] name failslab, interval 1, probability 0, space 0, times 0 [ 1674.085821] CPU: 1 PID: 9685 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 1674.087611] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1674.089460] Call Trace: [ 1674.090051] dump_stack+0x107/0x167 [ 1674.090076] should_fail.cold+0x5/0xa [ 1674.090099] ? create_object.isra.0+0x3a/0xa30 [ 1674.090119] should_failslab+0x5/0x20 [ 1674.090139] kmem_cache_alloc+0x5b/0x310 [ 1674.090160] ? mark_held_locks+0x9e/0xe0 [ 1674.090184] create_object.isra.0+0x3a/0xa30 [ 1674.090201] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1674.090228] kmem_cache_alloc_bulk+0x168/0x320 [ 1674.090258] io_submit_sqes+0x713e/0x8780 [ 1674.090317] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1674.090336] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1674.090360] ? find_held_lock+0x2c/0x110 [ 1674.090387] ? io_submit_sqes+0x8780/0x8780 sendmmsg$sock(0xffffffffffffffff, &(0x7f0000007480)=[{{&(0x7f0000000200)=@generic={0x10, "63e2d911e0f69155f91cb51b945483e2315c43f313d1f8a4d58a6b3724c423757ade02bd97f9906f3e3aabbfa4222d0edd27b05219677b54f58bbed530b9c228bb291ea554835c17f76ebcc33fd5b24706dc9cafe73fc8d1e377f6d645f1457ee8c47657782240ab3d53d0e6879cdad394f14da4dee80ef44df07a2c5c7b"}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000280)="31d0e6c55e50e16aaf", 0x9}, {&(0x7f0000000340)="6abe3ea89e235fbf2af6304fac993be1b20c921fd6e1d8c58814e0a2b8ac53f4849d8ca665802af24eb3d020c6", 0x2d}, {&(0x7f0000000380)="2f58def8f3a2e2785bdaa72e891ffd5ed1a50e5e7119d57e6a0d11bb482c47a0c73d2857fbc9048932b581dc6cfbec3de9699f3d7ba02008360dee6a4ab74a2e72", 0x41}, {&(0x7f0000000400)="628b49f0562f89bdb48e", 0xa}], 0x4, &(0x7f00000004c0)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x80000000}}, @timestamping={{0x14, 0x1, 0x25, 0x104d}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}], 0x78}}, {{&(0x7f0000000540)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2, 0x4, {0xa, 0x4e20, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}}}, 0x80, &(0x7f0000000600)=[{&(0x7f00000005c0)="59bad7959151a2", 0x7}], 0x1, &(0x7f0000000640)=[@mark={{0x14, 0x1, 0x24, 0x7f}}, @mark={{0x14, 0x1, 0x24, 0xfffff422}}, @txtime={{0x18, 0x1, 0x3d, 0x101}}], 0x48}}, {{&(0x7f00000006c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @private=0xa010102}, 0x0, 0x9, 0x3}}, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000001740)="c3eda046a3d95cce7118e45e5b31d375946866794a84564908ce844fe2d79c70a68688fbedf4939cf6a6ec5a2594be42acbca86acd718e8aa65f6d50095b6eb7ddb877986b259c0145f307ab5073694ed29646b292e95a7cb29cf173ae25a0fc67d6fd1f9511d45a06340aa0e2", 0x6d}], 0x2, &(0x7f0000001800)=[@mark={{0x14, 0x1, 0x24, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x8000}}], 0x48}}, {{&(0x7f00000018c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @rand_addr=0x64010102}, 0x2, 0x3, 0x2}}, 0x80, &(0x7f0000002d00)=[{&(0x7f0000001940)="00311cb8c14645f9c6cc10609953a106352061945fb875eff787c62b8405c42d13ce0056160c23516ccf674be5e68bd60fdf9b28dc562930453a947a0f7c8d3ad751e5012fb2acb3977a24f877edfd8844db1088ed4e2ff4ad1e2f3aefab0c94ee8340130fc0a2244f642e07a303579b7bbbe41615ff", 0x76}, {&(0x7f00000019c0)="295b0d789a5458248d46bd7f61174d20b1156f40e1734309ac44f089a3e9a471637a1fa218668fac9cd5b2e094d066030ba755c97897437af77d94670d179dc33bbce1b518a0b4f184e07ecbbd6923b8711aceba2cae30866f29e77e259ca12c87cb9ae8c7d4061aa0937dfafbae87", 0x6f}, {&(0x7f0000001a40)="f3aa3e7b3b8cee995370eb80fb15cc585a91db1be2cf9fb82c67979f7112e1b01f523d9cb1761950bf329e42addd741d28107a568be55d04afd4039dfae7573225d91555624104c9864e97fd5b946a2647329e731d27abe369e2829e524f3440102a0b0aa3478dd34ca6e75268f1d45bd77ba6134e0208d08cf8442bc9c8ce0ff67aef5a25cf95d6a255fa517a4df1d193f8396be0fdb71eafa5fd17056c63ef3b0b8019abfd46a0afc5b97bf729a7da5499eb8b3c9a7900f20e92b257685f03c1c27c753501c480330e116846fa6b72209f4ecfe04b497bcd773fa9884449c3b8cea9ac3caa97713ba35f7cacd07419859b2bbb39d6e5", 0xf7}, {&(0x7f0000001b40)="da94547ee4fe63060d63d54c0ea73ece6d64fd5a01e2aa859399f8ee29e00c01958b7d63ebca77f0a3af76e904a9580e6bf4f7e140bf7694fa9e6a40e8954605aa50b08ce46d13fb414fa31af271328ec1ebb9001487f89d917b5036bd0c91e6d7908d2f414b4b462074b58f5a97607b1e4ec9f77d07d0f8cf820bd463459593ece118340135f42a1cad486e649d30446d3322508ef993fc3f1d6ef4d0ebecaf784bbe49b53db679840f7bbf99e0fa05cf2e5c3f01deffb899bbf1fce348cf62726c12724da052429674d017ab01ee413d875f759899f26ccf1163b941d88ff4b136b7aa28731524f7e94b9b2f6091cc03", 0xf1}, {&(0x7f0000001c40)="9f573b522302d0caf154f09dbbad9c5ee6e459670e6fc5e51bd6661dda7e05b7f904a07c6d9d0f7221c187d39ed367090156ac221cd714f06cbe471a19334fb820cd7f909057a0fbc9827516788ead69fc0e7aa3422a25da69d0146ca24b7d37577f55dad0486943ae706b2d3c495654f808313619cd083fd0107c7c67d3a559879cdd26620243554887fff71b8f60aaa79c5a0e9480f82525237833d599bf8c512a456f81a793a573137133e2671a7983", 0xb1}, {&(0x7f0000001d00)="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", 0x1000}], 0x6}}, {{&(0x7f0000002d80)=@l2={0x1f, 0x9, @none, 0x4, 0x1}, 0x80, &(0x7f0000003280)=[{&(0x7f0000002e00)="9b715f9f121a", 0x6}, {&(0x7f0000002e40)="4731faaa424fd3cf78c0c1667f082cc7629f7976043cfc4aef165ce30dba0bb0483f895c474f946cc5fa6199d33b44a68e0b3b115eab7308e4765caa8a8ddbfae81f2c60022488c3695f21328dec6ceb6ce51b0f1a10619b104945a21a27af94084a487d0e999ba826e765cca1f4575b8505334c53", 0x75}, {&(0x7f0000002ec0)="0df80b93e9efde62476a4aec749c42ba5f629c422cc547e0ce36f849c3961c4d445c207095cd6111f7fd50e527addc0360fe7eacdd9b7e7cb92afaf72dc363fcba4e9fb95a1a7d1d55f9258a5804596d4fba9373e0d6264934ff5e286235070d3dc5f86862bafe36045f2e5770f6879b4eb68b34f967", 0x76}, {&(0x7f0000002f40)="95bde6", 0x3}, {&(0x7f0000002f80)="a5fa8dfb4068f863891216e2ae4fc23d0be5eff7ff8fa38a7c68300fbd2c7f247d0c17d4ea7ada3d1e8d1a84fb84db4889aab16405b2aae316fdfe1ab69a56c534d7b8e9ba4ee43583773028cf9580a1fb2d46b73a9d0a83bb517a070c03fd97af7346e3c8c0e6920258c585200cb1303ce9fdc5dbca866420451d2bea026dde1bf08de78c8d9499a0ee3bca80d68667d6dd5c97291c7ffb5b714618db410c48243951e89ab630b3381062d93bed1ab541f3eaf36cb1af8c2a6fba48ed8e18e7cfe84e57b1", 0xc5}, {&(0x7f0000003080)="e8d2a66476edda78f9810bf3df92454f1ddda17f477033a1a1961750", 0x1c}, {&(0x7f00000030c0)="c7768ea8cdfaf353b49bfc448de1cd15a78cbf02d5b600a7aeeb84635ccfd1af7c93a5eaefc7564013dd0bdfee131eabe2b8306dfce79518", 0x38}, {&(0x7f0000003100)="8be5678602517b1430051f8ffc4d5bf14720ae08a3b42837479bef65097861e047ec3776cf7b8f21e582bffefc8542e0cac1cb8c8e9c5a5adfba219a9c1b135acd59d1168080caed4c244a5bd6cc106f34ac63d1edaef4a1d23c8a5c08fc205246e0d395d537ad60ce79733996d9a4155226bac8d23b27ac2a4d292b4a8f4c4c3a0622b7f77ae37a9ea61a00c9cfb2845b847587231c1f1d2b72f44b4eb6c68a388c0e9361449574b73756862ac00eb74d1bf9a5922aa1ee05f2b89d", 0xbc}, {&(0x7f00000031c0)="f18c9edcce71a79688278ef4e3b3ed0103335a7c41ef1995ad86f191900fa1f9f71db523af2f269e8a10e8fc63ddab0fe9020f3a6b502b36bea0e11c8bb93cce2cab99492e9cc937b156f854ebef85a73350fec63ead4b857b73596755970a8b20eaaf826806dab988669f0ce6eda4c6176c7ce69f23397e25dfcb98f5c3a27fcfdc0b2ac3f0", 0x86}], 0x9, &(0x7f0000003340)=[@mark={{0x14, 0x1, 0x24, 0xffffff81}}], 0x18}}, {{&(0x7f0000003380)=@generic={0x9, "50ca8054d928441e263e0e0c3b0f26cdc066a591a6d2b64b937d79ec34ac7a8514c9ffcbb15cff0c759ffd56b257d4f9e2a9cd46bd930474a42d3bb3cc5d81aaaa17977943f86823455c192575e5a34c7ea57c8a9fc350145794f88189b2a0a13ac46545b19b9edaa98d3e3318ddb986c93e05662ee289b6bb5bc9cc19dd"}, 0x80, &(0x7f0000005740)=[{&(0x7f0000003400)="d82753ebcd10adf42729f886c1deab465194e4eb8966d33b599559d2fd77154bac935e40b44a088738fddc23", 0x2c}, {&(0x7f0000003440)="04b3beda1f8a2c8e7dbaa6d9319d68878d901cbf84cba6fe0624da2d496d4cba0a3206cfaecb7d980f939abc5e1c9fb495d8292a743c4e961bb6de6915a721d809a1ad5fbef029d5a6a8481c6d2423223b51638be8b952ebc61c1119001c994d17db462048f226caf3364483aa1633c9de0672eebeeec263f8090e1a2e3983114f41ab7b1eca99033b58b19211f6947fc4e0a18aecd58b25ad05a01881cb0681e4a8e977a4ccf4330a0dc747212da886a19cdde5a423aa2dcca6e1582c13dbd09e095b04c259a27bc865df422ae2b213ce51b369e9ac6db3d6ad46b783ba0399d0de5c83d8615433ca1445556a7b0d2d610cdbcd70fa1d", 0xf7}, {&(0x7f0000003540)="ce4d912983a1d65a64e179395adc33282703cfdbb45f488aa54a79fb589d351442ce6825811c758f944f19000c95179cd1611fdafe5c5c032a2485d17aadbeae1daaa45a807d5fa4c22b39aea79ec152747f4b3133db15d8cd59f8071ec59edd5a9e14c11013a8e384b38aaff800374c97857267723057a2fc30d0cb5b2da4adbfaa23b7fc216ea41ddf6aa58de59c772feee5c72f47b3cf108886488e891bebc9ee201bda6c27c5e3f356d54b2b2396019c22d29687d5bdd02d96ca0a0340461ded15e1934e18486e943137a0241900", 0xd0}, {&(0x7f0000003640)="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", 0x1000}, {&(0x7f0000004640)="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", 0x1000}, {&(0x7f0000005640)="51a9f94f6b736210df4081e6777e72dac22c2c357ccacc745038a6129752efa4689f5a58e4dd1eb635942424abfba9beacb8625af3880330ddf72db28ca2502110802ca3baac892324611698359dc33266ed0f399bb44fd12f3dd1acead97dc5bd1a77befbeea014d2653f93f0c62a941557a5dea33fa4a58ead021b8e3a06b6a63e3f3835a4f3cff7da8ba30ac1af6dcd1a33ea680c1e6afd8bd273980d30b7eed7192e8a77e5e3504cabb66d7c7b", 0xaf}, {&(0x7f0000005700)="7b236aad9b53b9f7fcee881f93c34b", 0xf}], 0x7, &(0x7f00000057c0)=[@txtime={{0x18, 0x1, 0x3d, 0x2}}, @timestamping={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x36}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x1000}}, @mark={{0x14, 0x1, 0x24, 0xb3f99d1f}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}], 0xd8}}, {{&(0x7f00000058c0)=@nl=@kern={0x10, 0x0, 0x0, 0x4}, 0x80, &(0x7f0000005980)=[{&(0x7f0000005940)="88a60fbd14eeb1fd1d2fd13dadb5ecd61de57cec6c", 0x15}], 0x1}}, {{&(0x7f00000059c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfd, 0x40000}, 0x80, &(0x7f0000005d00)=[{&(0x7f0000005a40)="1312a9f9ca549473d4bd97486ec7d4747bb06ece39caf8e0123a872594e50b0ad52b29b68a43f2118737c5a96a747e94334662d13888402d0e651579aa56326a3f83e13a0138b85043254f83f1d593293612d25989ca9e37f31dd59056e1eb095fe4c1187cd5050dafc3439a2870143694177ede0eb0e9891348e67a7ab3ee5a31a2f9ce26a0a65fda5123fd17b691eabf2b3e", 0x93}, {&(0x7f0000005b00)="83acebf04298dd269fc0c400802533f106e48eaaee6d2ac97fd006842f37482f", 0x20}, {&(0x7f0000005b40)="cb900320d819cdf6dae1910a36341db49e2815a8a0cd28b68b848aeccc8de0bfbd7bcb32099367796c12ae99cbe6705a5e4de26d22ac96cdff4d4dedcc8d3c8bf1c8c2d26e60e092470f8f2474bafd877447209efdfcd0e36b08ab382860c8e133f420e830033d63ecca300835a62ec5eb471ad4e68f0559419f8bc66a8373f7feb638842da1abc9b0102f4588c0e63fa5b8041e13f58cc3236100f036ccdd74ef20f8429e8ef5832a9bd68a66c1cbe97fc025b2676218ad19904a3ba1361ba6e56106cd8e5d236f2fcbcdaf3deeba36fd22633f38cd66192d919ae2f806e6f2cb174e", 0xe3}, {&(0x7f0000005c40)="36c8626be3502acd86c77a2b48", 0xd}, {&(0x7f0000005c80)="def9f9a574f42acb9287996c9edaf7e4b3bb6e914da145bacd357bd9c0ba0fb032fb8152c6745b83e0d4211aa31876af484c213820dda5c389ce47dd0f8f7df5f6bcc35d02a1ce5c5bbd480f1a9b2f90adbf3d4b8c605d18fe56d4b5b78a602a87c3bf5a", 0x64}], 0x5, &(0x7f0000005d80)=[@mark={{0x14, 0x1, 0x24, 0xfffffff7}}, @mark={{0x14, 0x1, 0x24, 0x4}}], 0x30}}, {{&(0x7f0000005dc0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x0, 0x4, 0x4, {0xa, 0x4e23, 0x1, @private2, 0x9}}}, 0x80, &(0x7f00000061c0)=[{&(0x7f0000005e40)="2b5485aaa19b0c388fc0161209a6f1f8d5a18346d40570a4540bbe7137", 0x1d}, {&(0x7f0000005e80)="1b8d2db2bd536c8ecc7b4c23916ad2010455f06bfc204b77ccb972a20deafb6792d29b494a0b424f0923255644499bbcf4adee62c1a39d0a812a3a8dc4c3bb122249fa387b55ca33940eef2e79ca394d9ffe8acfcd151bf55474a96ae1d4f55078671bbb5e31f71f325aaa616f748bcbd4406152af7a11dfba352f3eb9f73ce990f4a8b2ea05acb539e41bff9632ee7593bb5b1ffcc9e7d7d690a32d2062a45064d1f9e77653bed069aedd56dc569a3e5523f7b9f0f35a83b15bccd91282ae94b1ab9f1f9ec290960b67e49b85cc005c", 0xd0}, {&(0x7f0000005f80)="e87261a9c2f375ad2f0c56743983a928d20771da2e057bef618b74a7175553b54d8bd48f2c20c0c45476f57122000a48b10cc04c8b793a", 0x37}, {&(0x7f0000005fc0)="79e363978511a1a9bc0aa413f91cf7ec417b02478d16d6aba1d85095e0affe66314bfb58c99e79be392c3a91a7b11bda6ee472465a6fba4b4163c2bce98c523bdd53054ec37f15df60b7d100236c139da89606fcdced4405cb377e358c420f830e668f33716d02ae294946b15f67e12ad1df6e1cff0ee81a29a65a2d3d9a0d38b39cb0debbbf3a3984714a9031c8cfba05c33c16d976285577a3a891e640d629a2b46ac5c055dabc986e62e9df5d26a3fd8fba1cfbe7818837d06a122e50c296d5e0b1357f07fadce7d2ab", 0xcb}, {&(0x7f00000060c0)="925ac3178cbc785b353f4617614c53a034f2cbb00fff4d6bdd68c231e83d33a1ba763eddff822f84eb2c4352e0669359daef5c0d51dcaf4eacf4c05d92c37ef26777dba6580d436c8182a9dd12f262732a5d96a0af701c0d1369b90856432687b89dd34e7650dd744014ca71bbfba7babac1cc67b914c9a143bfbce6b8ce7a5bc49612ad6f937c763d694bef834c4c46fd7d70aa9a5cec48e96551430438a82f4ff97f76f861cfbab80ef0795369d6b6ac2ac58ed31b0b61cf8bb734278467ca5ed1f3c6bffad8f33a9004b706587f5f4199f452633ba0a8443d706df71c3a5021ab1ef32cd2e17bb30cb4b8a0bc9341cc9a2ec964fb7d4e", 0xf8}], 0x5, &(0x7f0000006240)=[@mark={{0x14, 0x1, 0x24, 0x2}}, @timestamping={{0x14}}], 0x30}}, {{&(0x7f0000006280)=@can, 0x80, &(0x7f0000007400)=[{&(0x7f0000006300)="3a8ec44938aa48189857ff271eeef1f081c197961c15e1f934e23127939a961b897e11107d33237ae875df86c7033b326c6b5d9ef0befc7bceed6f855769f9a81977337838c19b442cdfe32b6bd1", 0x4e}, {&(0x7f0000006380)="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", 0x1000}, {&(0x7f0000007380)="a90dda75e21665dd572850b69c7761bac0183f5a92c84498c7d7752f80152f2e4c57a72e80d84bf01968d4daafaee6a179dc7c32e9b4b7a6ad96be28f4a397d40eb370d8e688eceaad5c3751a3da753ac5b23ebe", 0x54}], 0x3, &(0x7f0000007440)=[@mark={{0x14, 0x1, 0x24, 0x5}}], 0x18}}], 0xa, 0x2000) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_setup(0x4041, &(0x7f0000000180)={0x0, 0x28d9, 0x20, 0x0, 0x229}) r5 = syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) io_uring_enter(r5, 0x27d9, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r5, 0x58ab, 0x0, 0x2, 0x0, 0x0) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x14) 01:19:50 executing program 7: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x4000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:19:50 executing program 5: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x5) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r5) r6 = syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) io_uring_enter(r6, 0x27d9, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r6, 0x2c30, 0x40b2, 0x2, &(0x7f0000000140)={[0xe6e]}, 0x8) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1674.090416] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1674.090440] ? wait_for_completion_io+0x270/0x270 [ 1674.090464] ? rcu_read_lock_any_held+0x75/0xa0 [ 1674.090478] ? vfs_write+0x354/0xb10 [ 1674.090501] ? fput_many+0x2f/0x1a0 [ 1674.090518] ? ksys_write+0x1a9/0x260 [ 1674.090535] ? __ia32_sys_read+0xb0/0xb0 [ 1674.090561] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 01:19:51 executing program 3: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 40) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:19:51 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:19:51 executing program 7: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x200000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:19:51 executing program 4: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 34) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091", 0x4e}}, 0x0) 01:19:51 executing program 1: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@raw={0x18, 0x52, {"41fc71bf47c997eaf55ecd5bf1815fb32e426e3dff53a9"}}, &(0x7f0000000200), 0x400) syz_mount_image$nfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRES32=r4]) pread64(r4, &(0x7f0000000140)=""/2, 0x2, 0x0) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x14) [ 1674.090582] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1674.090607] do_syscall_64+0x33/0x40 [ 1674.090628] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1674.090641] RIP: 0033:0x7fe076d62b19 [ 1674.090659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1674.090670] RSP: 002b:00007fe0742d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1674.090691] RAX: ffffffffffffffda RBX: 00007fe076e75f60 RCX: 00007fe076d62b19 [ 1674.090703] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1674.090714] RBP: 00007fe0742d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1674.090725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1674.090736] R13: 00007ffebfddc57f R14: 00007fe0742d8300 R15: 0000000000022000 [ 1674.096758] FAULT_INJECTION: forcing a failure. [ 1674.096758] name failslab, interval 1, probability 0, space 0, times 0 [ 1674.096777] CPU: 1 PID: 9684 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1674.096787] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1674.096793] Call Trace: [ 1674.096813] dump_stack+0x107/0x167 [ 1674.096836] should_fail.cold+0x5/0xa [ 1674.096857] ? create_object.isra.0+0x3a/0xa30 [ 1674.096875] should_failslab+0x5/0x20 [ 1674.096893] kmem_cache_alloc+0x5b/0x310 [ 1674.096912] ? mark_held_locks+0x9e/0xe0 [ 1674.096937] create_object.isra.0+0x3a/0xa30 [ 1674.096953] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1674.096981] kmem_cache_alloc_bulk+0x168/0x320 [ 1674.097008] io_submit_sqes+0x713e/0x8780 [ 1674.097067] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1674.097086] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1674.097116] ? find_held_lock+0x2c/0x110 [ 1674.097143] ? io_submit_sqes+0x8780/0x8780 [ 1674.097171] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1674.097203] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1674.097223] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1674.097240] ? trace_hardirqs_on+0x5b/0x180 [ 1674.097262] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 1674.097307] do_syscall_64+0x33/0x40 [ 1674.097327] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1674.097340] RIP: 0033:0x7ffa806a4b19 [ 1674.097358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1674.097368] RSP: 002b:00007ffa7dc1a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1674.097388] RAX: ffffffffffffffda RBX: 00007ffa807b7f60 RCX: 00007ffa806a4b19 [ 1674.097399] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1674.097411] RBP: 00007ffa7dc1a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1674.097422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1674.097433] R13: 00007fff571e114f R14: 00007ffa7dc1a300 R15: 0000000000022000 [ 1674.298092] FAULT_INJECTION: forcing a failure. [ 1674.298092] name failslab, interval 1, probability 0, space 0, times 0 [ 1674.352620] CPU: 1 PID: 9697 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1674.354011] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1674.354019] Call Trace: [ 1674.354046] dump_stack+0x107/0x167 [ 1674.354070] should_fail.cold+0x5/0xa [ 1674.354093] ? create_object.isra.0+0x3a/0xa30 [ 1674.354112] should_failslab+0x5/0x20 [ 1674.354132] kmem_cache_alloc+0x5b/0x310 [ 1674.354159] create_object.isra.0+0x3a/0xa30 [ 1674.354175] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1674.354203] kmem_cache_alloc_bulk+0x168/0x320 [ 1674.354232] io_submit_sqes+0x713e/0x8780 [ 1674.354292] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1674.354310] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1674.354335] ? find_held_lock+0x2c/0x110 [ 1674.354363] ? io_submit_sqes+0x8780/0x8780 [ 1674.354392] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1674.354415] ? wait_for_completion_io+0x270/0x270 [ 1674.354439] ? rcu_read_lock_any_held+0x75/0xa0 [ 1674.354452] ? vfs_write+0x354/0xb10 [ 1674.354474] ? fput_many+0x2f/0x1a0 [ 1674.354491] ? ksys_write+0x1a9/0x260 [ 1674.354507] ? __ia32_sys_read+0xb0/0xb0 [ 1674.354532] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1674.354553] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1674.354578] do_syscall_64+0x33/0x40 [ 1674.354599] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1674.354612] RIP: 0033:0x7ffa806a4b19 [ 1674.354630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1674.354641] RSP: 002b:00007ffa7dc1a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1674.354662] RAX: ffffffffffffffda RBX: 00007ffa807b7f60 RCX: 00007ffa806a4b19 [ 1674.354674] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1674.354685] RBP: 00007ffa7dc1a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1674.354696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1674.354707] R13: 00007fff571e114f R14: 00007ffa7dc1a300 R15: 0000000000022000 [ 1674.395559] FAULT_INJECTION: forcing a failure. [ 1674.395559] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1674.395581] CPU: 1 PID: 9705 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 1674.395592] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1674.395599] Call Trace: [ 1674.395625] dump_stack+0x107/0x167 [ 1674.395655] should_fail.cold+0x5/0xa [ 1674.395683] __alloc_pages_nodemask+0x182/0x600 [ 1674.395709] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1674.395753] alloc_pages_current+0x187/0x280 [ 1674.395778] allocate_slab+0x26f/0x380 [ 1674.395805] ___slab_alloc+0x470/0x700 [ 1674.395839] ? io_submit_sqes+0x713e/0x8780 [ 1674.395866] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1674.395884] ? trace_hardirqs_on+0x5b/0x180 [ 1674.395915] ? kmem_cache_alloc_bulk+0x1ec/0x320 [ 1674.395933] kmem_cache_alloc_bulk+0x1ec/0x320 [ 1674.395991] io_submit_sqes+0x713e/0x8780 [ 1674.396049] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1674.396067] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1674.396091] ? find_held_lock+0x2c/0x110 [ 1674.396118] ? io_submit_sqes+0x8780/0x8780 [ 1674.396146] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1674.396169] ? wait_for_completion_io+0x270/0x270 [ 1674.396192] ? rcu_read_lock_any_held+0x75/0xa0 [ 1674.396206] ? vfs_write+0x354/0xb10 [ 1674.396227] ? fput_many+0x2f/0x1a0 [ 1674.396244] ? ksys_write+0x1a9/0x260 [ 1674.396260] ? __ia32_sys_read+0xb0/0xb0 [ 1674.396285] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1674.396306] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1674.396331] do_syscall_64+0x33/0x40 [ 1674.396351] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1674.396364] RIP: 0033:0x7fe076d62b19 [ 1674.396382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1674.396393] RSP: 002b:00007fe0742d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1674.396415] RAX: ffffffffffffffda RBX: 00007fe076e75f60 RCX: 00007fe076d62b19 [ 1674.396426] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1674.396437] RBP: 00007fe0742d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1674.396448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1674.396459] R13: 00007ffebfddc57f R14: 00007fe0742d8300 R15: 0000000000022000 01:20:05 executing program 5: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000, 0x4000010, r0, 0x10000000) syz_io_uring_submit(0x0, r4, &(0x7f0000000140)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xd, 0x1}, 0x2) 01:20:05 executing program 3: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 41) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:20:05 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:20:05 executing program 7: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x400000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:20:05 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091cd3476bae3a05bae56ab34bcbeff5ddd1d8a65bc022525b413d13bc1a620d628d0ac0cfe3ca26247450c82d3f2f6bc0c2a5c", 0x80}}, 0x14) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x9, &(0x7f0000000140), 0x1, 0x1}, 0xa33) 01:20:05 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:20:05 executing program 1: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) io_uring_enter(r4, 0x27d9, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x14) 01:20:05 executing program 4: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 35) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091", 0x4e}}, 0x0) [ 1688.742844] FAULT_INJECTION: forcing a failure. [ 1688.742844] name failslab, interval 1, probability 0, space 0, times 0 [ 1688.745699] CPU: 1 PID: 9720 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1688.747249] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1688.749119] Call Trace: [ 1688.749734] dump_stack+0x107/0x167 [ 1688.750564] should_fail.cold+0x5/0xa [ 1688.751428] ? create_object.isra.0+0x3a/0xa30 [ 1688.752457] should_failslab+0x5/0x20 [ 1688.753318] kmem_cache_alloc+0x5b/0x310 [ 1688.754232] ? mark_held_locks+0x9e/0xe0 [ 1688.755141] create_object.isra.0+0x3a/0xa30 [ 1688.756146] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1688.757310] kmem_cache_alloc_bulk+0x168/0x320 [ 1688.758355] io_submit_sqes+0x713e/0x8780 [ 1688.759322] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1688.760452] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1688.761539] ? find_held_lock+0x2c/0x110 [ 1688.762461] ? io_submit_sqes+0x8780/0x8780 [ 1688.763443] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1688.764569] ? wait_for_completion_io+0x270/0x270 [ 1688.765646] ? rcu_read_lock_any_held+0x75/0xa0 [ 1688.766684] ? vfs_write+0x354/0xb10 [ 1688.767526] ? fput_many+0x2f/0x1a0 [ 1688.768350] ? ksys_write+0x1a9/0x260 [ 1688.769210] ? __ia32_sys_read+0xb0/0xb0 [ 1688.770127] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1688.771308] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1688.772480] do_syscall_64+0x33/0x40 [ 1688.773314] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1688.774471] RIP: 0033:0x7ffa806a4b19 [ 1688.775310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1688.779421] RSP: 002b:00007ffa7dc1a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1688.781132] RAX: ffffffffffffffda RBX: 00007ffa807b7f60 RCX: 00007ffa806a4b19 [ 1688.782738] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1688.784373] RBP: 00007ffa7dc1a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1688.785963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1688.787576] R13: 00007fff571e114f R14: 00007ffa7dc1a300 R15: 0000000000022000 01:20:05 executing program 1: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) mkdirat(r4, &(0x7f0000000000)='./file1\x00', 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x14) [ 1688.803840] FAULT_INJECTION: forcing a failure. [ 1688.803840] name failslab, interval 1, probability 0, space 0, times 0 [ 1688.806582] CPU: 1 PID: 9729 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 1688.808132] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1688.810008] Call Trace: [ 1688.810606] dump_stack+0x107/0x167 [ 1688.811457] should_fail.cold+0x5/0xa [ 1688.812352] ? create_object.isra.0+0x3a/0xa30 [ 1688.813380] should_failslab+0x5/0x20 [ 1688.814232] kmem_cache_alloc+0x5b/0x310 [ 1688.815147] ? mark_held_locks+0x9e/0xe0 [ 1688.816080] create_object.isra.0+0x3a/0xa30 [ 1688.817051] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1688.818237] kmem_cache_alloc_bulk+0x168/0x320 [ 1688.819295] io_submit_sqes+0x713e/0x8780 [ 1688.820299] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1688.821441] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1688.822569] ? find_held_lock+0x2c/0x110 [ 1688.823487] ? io_submit_sqes+0x8780/0x8780 [ 1688.824485] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1688.825563] ? wait_for_completion_io+0x270/0x270 [ 1688.826644] ? rcu_read_lock_any_held+0x75/0xa0 [ 1688.827684] ? vfs_write+0x354/0xb10 [ 1688.828577] ? fput_many+0x2f/0x1a0 [ 1688.829416] ? ksys_write+0x1a9/0x260 [ 1688.830293] ? __ia32_sys_read+0xb0/0xb0 [ 1688.831247] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1688.832470] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1688.833671] do_syscall_64+0x33/0x40 [ 1688.834538] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1688.835698] RIP: 0033:0x7fe076d62b19 [ 1688.836579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1688.840743] RSP: 002b:00007fe0742d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1688.842436] RAX: ffffffffffffffda RBX: 00007fe076e75f60 RCX: 00007fe076d62b19 [ 1688.844051] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1688.845658] RBP: 00007fe0742d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1688.847256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1688.848907] R13: 00007ffebfddc57f R14: 00007fe0742d8300 R15: 0000000000022000 01:20:20 executing program 4: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 36) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091", 0x4e}}, 0x0) 01:20:20 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:20:20 executing program 5: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = fork() fcntl$setown(r4, 0x8, r5) ptrace$getsig(0x4202, r5, 0x4, &(0x7f0000000240)) perf_event_open(&(0x7f0000000180)={0xd67006ae93711207, 0x80, 0x1, 0xff, 0x48, 0x40, 0x0, 0x1f, 0x40, 0xa, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000140), 0x2}, 0x2, 0x7668af06, 0x9, 0x0, 0x0, 0x1, 0x5, 0x0, 0xffffff7f, 0x0, 0x9}, r5, 0x3, 0xffffffffffffffff, 0x2) 01:20:20 executing program 1: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) io_uring_enter(r4, 0x27d9, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x810, r4, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$nfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRES32=r6]) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$nfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRES32=r7]) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r5, 0xc0189378, &(0x7f0000000180)={{0x1, 0x1, 0x18, r6, {r7}}, './file0\x00'}) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x14) 01:20:20 executing program 7: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:20:20 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091cd3476bae3a05bae56ab34bcbeff5ddd1d8a65bc022525b413d13bc1a620d628d0ac0cfe3ca26247450c82d3f2f6bc0c2a5c", 0x80}}, 0x14) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x9, &(0x7f0000000140), 0x1, 0x1}, 0xa33) 01:20:20 executing program 3: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 42) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:20:20 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:20:20 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2400000010000100000000ec0000009600000900050000000000000005000080480000006fe884b7f11ac8f1810d0dc930b7fbbdfe445812bd4e3ddf303ed7320b364ab5ef9768d0c54531c0e48e8b51a2f78d54f00d9cdd3a5569eaaaf9d57fd007e7eff61a89507780518151cc0bb52f615f18e044c54fca953b368cc61d149f11066c74aac60fe6c088582777cddc52bd82"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1703.337017] FAULT_INJECTION: forcing a failure. [ 1703.337017] name failslab, interval 1, probability 0, space 0, times 0 [ 1703.340484] CPU: 1 PID: 9755 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 1703.342220] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1703.344480] Call Trace: [ 1703.345207] dump_stack+0x107/0x167 [ 1703.346203] should_fail.cold+0x5/0xa [ 1703.347245] ? create_object.isra.0+0x3a/0xa30 [ 1703.348514] should_failslab+0x5/0x20 [ 1703.349481] kmem_cache_alloc+0x5b/0x310 [ 1703.350595] ? mark_held_locks+0x9e/0xe0 [ 1703.351716] create_object.isra.0+0x3a/0xa30 [ 1703.352915] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1703.354217] kmem_cache_alloc_bulk+0x168/0x320 [ 1703.355302] io_submit_sqes+0x713e/0x8780 [ 1703.356256] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1703.357317] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1703.358564] ? find_held_lock+0x2c/0x110 [ 1703.359681] ? io_submit_sqes+0x8780/0x8780 [ 1703.360865] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1703.362167] ? wait_for_completion_io+0x270/0x270 [ 1703.363491] ? rcu_read_lock_any_held+0x75/0xa0 [ 1703.364768] ? vfs_write+0x354/0xb10 [ 1703.365793] ? fput_many+0x2f/0x1a0 [ 1703.366787] ? ksys_write+0x1a9/0x260 [ 1703.367674] ? __ia32_sys_read+0xb0/0xb0 [ 1703.368660] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1703.369796] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1703.370929] do_syscall_64+0x33/0x40 [ 1703.371815] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1703.371935] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1703.373034] RIP: 0033:0x7fe076d62b19 [ 1703.373057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1703.373068] RSP: 002b:00007fe0742d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1703.373090] RAX: ffffffffffffffda RBX: 00007fe076e75f60 RCX: 00007fe076d62b19 [ 1703.373102] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1703.373113] RBP: 00007fe0742d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1703.373124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1703.373136] R13: 00007ffebfddc57f R14: 00007fe0742d8300 R15: 0000000000022000 [ 1703.380445] FAULT_INJECTION: forcing a failure. [ 1703.380445] name failslab, interval 1, probability 0, space 0, times 0 [ 1703.380466] CPU: 1 PID: 9757 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1703.380477] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1703.380483] Call Trace: [ 1703.380506] dump_stack+0x107/0x167 [ 1703.380529] should_fail.cold+0x5/0xa [ 1703.380551] ? create_object.isra.0+0x3a/0xa30 [ 1703.380570] should_failslab+0x5/0x20 [ 1703.380589] kmem_cache_alloc+0x5b/0x310 [ 1703.380610] ? mark_held_locks+0x9e/0xe0 [ 1703.395919] create_object.isra.0+0x3a/0xa30 [ 1703.397133] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1703.398521] kmem_cache_alloc_bulk+0x168/0x320 [ 1703.399803] io_submit_sqes+0x713e/0x8780 [ 1703.401017] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1703.402369] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1703.403684] ? find_held_lock+0x2c/0x110 [ 1703.404833] ? io_submit_sqes+0x8780/0x8780 [ 1703.406021] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1703.407337] ? wait_for_completion_io+0x270/0x270 [ 1703.408700] ? rcu_read_lock_any_held+0x75/0xa0 [ 1703.409984] ? vfs_write+0x354/0xb10 [ 1703.411010] ? fput_many+0x2f/0x1a0 [ 1703.412002] ? ksys_write+0x1a9/0x260 [ 1703.413071] ? __ia32_sys_read+0xb0/0xb0 [ 1703.414199] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1703.415623] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1703.417060] do_syscall_64+0x33/0x40 [ 1703.418105] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1703.419498] RIP: 0033:0x7ffa806a4b19 [ 1703.420535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1703.425582] RSP: 002b:00007ffa7dc1a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1703.427695] RAX: ffffffffffffffda RBX: 00007ffa807b7f60 RCX: 00007ffa806a4b19 [ 1703.429668] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1703.431637] RBP: 00007ffa7dc1a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1703.433590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1703.435544] R13: 00007fff571e114f R14: 00007ffa7dc1a300 R15: 0000000000022000 [ 1703.436754] nfs: Unknown parameter '' [ 1703.439936] nfs: Unknown parameter '' 01:20:20 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:20:20 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091cd3476bae3a05bae56ab34bcbeff5ddd1d8a65bc022525b413d13bc1a620d628d0ac0cfe3ca26247450c82d3f2f6bc0c2a5c", 0x80}}, 0x14) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, 0x0, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x9, &(0x7f0000000140), 0x1, 0x1}, 0xa33) 01:20:20 executing program 7: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x20000000000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) [ 1703.477525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1703.478539] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1703.479506] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1703.489630] nfs: Unknown parameter '' 01:20:20 executing program 1: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6, 0x40010, r0, 0x8000000) syz_io_uring_setup(0x827, &(0x7f0000000140)={0x0, 0x6ac4, 0x10, 0x2, 0xed, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x7fc3db416e19db78, {0x0, r5}}, 0x2) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x14) 01:20:20 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2400000010000100000000ec0000009600000900050000000000000005000080480000006fe884b7f11ac8f1810d0dc930b7fbbdfe445812bd4e3ddf303ed7320b364ab5ef9768d0c54531c0e48e8b51a2f78d54f00d9cdd3a5569eaaaf9d57fd007e7eff61a89507780518151cc0bb52f615f18e044c54fca953b368cc61d149f11066c74aac60fe6c088582777cddc52bd82"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:20:20 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1703.586563] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 01:20:20 executing program 7: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x40000000000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) [ 1703.639834] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1703.641475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1703.643098] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 01:20:20 executing program 4: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 37) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091", 0x4e}}, 0x0) 01:20:20 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091cd3476bae3a05bae56ab34bcbeff5ddd1d8a65bc022525b413d13bc1a620d628d0ac0cfe3ca26247450c82d3f2f6bc0c2a5c", 0x80}}, 0x14) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x9, &(0x7f0000000140), 0x1, 0x1}, 0xa33) 01:20:20 executing program 5: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0)={0x0, 0xfffffffd}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x194) [ 1703.721897] FAULT_INJECTION: forcing a failure. [ 1703.721897] name failslab, interval 1, probability 0, space 0, times 0 [ 1703.723333] CPU: 0 PID: 9793 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 1703.724115] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1703.725077] Call Trace: [ 1703.725389] dump_stack+0x107/0x167 [ 1703.725819] should_fail.cold+0x5/0xa [ 1703.726266] ? create_object.isra.0+0x3a/0xa30 [ 1703.726793] should_failslab+0x5/0x20 [ 1703.727236] kmem_cache_alloc+0x5b/0x310 [ 1703.727722] ? mark_held_locks+0x9e/0xe0 [ 1703.728213] create_object.isra.0+0x3a/0xa30 [ 1703.728727] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1703.729324] kmem_cache_alloc_bulk+0x168/0x320 [ 1703.729862] io_submit_sqes+0x713e/0x8780 [ 1703.730375] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1703.730955] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1703.731517] ? find_held_lock+0x2c/0x110 [ 1703.731990] ? io_submit_sqes+0x8780/0x8780 [ 1703.732510] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1703.733083] ? wait_for_completion_io+0x270/0x270 [ 1703.733656] ? rcu_read_lock_any_held+0x75/0xa0 [ 1703.734193] ? vfs_write+0x354/0xb10 [ 1703.734627] ? fput_many+0x2f/0x1a0 [ 1703.735049] ? ksys_write+0x1a9/0x260 [ 1703.735491] ? __ia32_sys_read+0xb0/0xb0 [ 1703.735968] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1703.736589] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1703.737192] do_syscall_64+0x33/0x40 [ 1703.737624] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1703.738217] RIP: 0033:0x7fe076d62b19 [ 1703.738649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1703.740793] RSP: 002b:00007fe0742d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1703.741643] RAX: ffffffffffffffda RBX: 00007fe076e75f60 RCX: 00007fe076d62b19 [ 1703.742470] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1703.743254] RBP: 00007fe0742d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1703.744025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1703.744809] R13: 00007ffebfddc57f R14: 00007fe0742d8300 R15: 0000000000022000 01:20:37 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091cd3476bae3a05bae56ab34bcbeff5ddd1d8a65bc022525b413d13bc1a620d628d0ac0cfe3ca26247450c82d3f2f6bc0c2a5c", 0x80}}, 0x14) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x9, &(0x7f0000000140), 0x1, 0x1}, 0xa33) 01:20:37 executing program 1: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x402000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x50, r3, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x6, &(0x7f00000001c0)={0x77359400}, 0x1, 0x1, 0x1, {0x0, r5}}, 0x4) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000140)={0x6, 'sit0\x00', {0x1}}) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x14) 01:20:37 executing program 5: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x10, r0, 0x8000000) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = fork() fcntl$setown(r4, 0x8, r5) ptrace$getsig(0x4202, r5, 0x4, &(0x7f0000000240)) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x0, 0x0, 0x8, 0x5, 0x0, 0x0, 0x800, 0xc, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7fff, 0x0, @perf_bp={&(0x7f0000000140), 0xa}, 0x2, 0x5611, 0x1, 0x8, 0x2, 0x5, 0x5, 0x0, 0x7ff, 0x0, 0x6}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 01:20:37 executing program 3: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 43) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:20:37 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:20:37 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2400000010000100000000ec0000009600000900050000000000000005000080480000006fe884b7f11ac8f1810d0dc930b7fbbdfe445812bd4e3ddf303ed7320b364ab5ef9768d0c54531c0e48e8b51a2f78d54f00d9cdd3a5569eaaaf9d57fd007e7eff61a89507780518151cc0bb52f615f18e044c54fca953b368cc61d149f11066c74aac60fe6c088582777cddc52bd82"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:20:37 executing program 7: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000000000000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:20:37 executing program 4: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 38) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091", 0x4e}}, 0x0) [ 1720.636909] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1720.667834] FAULT_INJECTION: forcing a failure. [ 1720.667834] name failslab, interval 1, probability 0, space 0, times 0 [ 1720.670967] CPU: 0 PID: 9800 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1720.672537] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1720.674391] Call Trace: [ 1720.674987] dump_stack+0x107/0x167 [ 1720.675813] should_fail.cold+0x5/0xa [ 1720.676679] ? create_object.isra.0+0x3a/0xa30 [ 1720.677698] should_failslab+0x5/0x20 [ 1720.678546] kmem_cache_alloc+0x5b/0x310 [ 1720.679460] ? mark_held_locks+0x9e/0xe0 [ 1720.680372] create_object.isra.0+0x3a/0xa30 [ 1720.681373] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1720.682541] kmem_cache_alloc_bulk+0x168/0x320 [ 1720.683604] io_submit_sqes+0x713e/0x8780 [ 1720.684607] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1720.685756] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1720.686866] ? find_held_lock+0x2c/0x110 [ 1720.687807] ? io_submit_sqes+0x8780/0x8780 [ 1720.688821] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1720.689930] ? wait_for_completion_io+0x270/0x270 [ 1720.691045] ? rcu_read_lock_any_held+0x75/0xa0 [ 1720.692105] ? vfs_write+0x354/0xb10 [ 1720.692972] ? fput_many+0x2f/0x1a0 [ 1720.693806] ? ksys_write+0x1a9/0x260 [ 1720.694675] ? __ia32_sys_read+0xb0/0xb0 [ 1720.695604] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1720.696805] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1720.697974] do_syscall_64+0x33/0x40 [ 1720.698818] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1720.699973] RIP: 0033:0x7ffa806a4b19 [ 1720.700835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1720.704989] RSP: 002b:00007ffa7dc1a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1720.706719] RAX: ffffffffffffffda RBX: 00007ffa807b7f60 RCX: 00007ffa806a4b19 [ 1720.708336] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1720.709968] RBP: 00007ffa7dc1a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1720.711581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1720.713200] R13: 00007fff571e114f R14: 00007ffa7dc1a300 R15: 0000000000022000 [ 1720.715640] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1720.717266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1720.718964] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1720.734446] FAULT_INJECTION: forcing a failure. [ 1720.734446] name failslab, interval 1, probability 0, space 0, times 0 [ 1720.736497] CPU: 1 PID: 9817 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 1720.737701] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1720.739149] Call Trace: [ 1720.739625] dump_stack+0x107/0x167 [ 1720.740267] should_fail.cold+0x5/0xa [ 1720.740956] ? create_object.isra.0+0x3a/0xa30 [ 1720.741756] should_failslab+0x5/0x20 [ 1720.742418] kmem_cache_alloc+0x5b/0x310 [ 1720.743185] create_object.isra.0+0x3a/0xa30 [ 1720.743957] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1720.744888] kmem_cache_alloc_bulk+0x168/0x320 [ 1720.745754] io_submit_sqes+0x713e/0x8780 [ 1720.746536] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1720.747427] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1720.748290] ? find_held_lock+0x2c/0x110 [ 1720.749040] ? io_submit_sqes+0x8780/0x8780 [ 1720.749805] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1720.750675] ? wait_for_completion_io+0x270/0x270 [ 1720.751534] ? rcu_read_lock_any_held+0x75/0xa0 [ 1720.752353] ? vfs_write+0x354/0xb10 [ 1720.753038] ? fput_many+0x2f/0x1a0 [ 1720.753662] ? ksys_write+0x1a9/0x260 [ 1720.754335] ? __ia32_sys_read+0xb0/0xb0 [ 1720.755064] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1720.755985] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1720.756896] do_syscall_64+0x33/0x40 [ 1720.757551] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1720.758451] RIP: 0033:0x7fe076d62b19 [ 1720.759107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1720.762326] RSP: 002b:00007fe0742d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1720.763648] RAX: ffffffffffffffda RBX: 00007fe076e75f60 RCX: 00007fe076d62b19 [ 1720.764906] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1720.766167] RBP: 00007fe0742d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1720.767416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1720.768686] R13: 00007ffebfddc57f R14: 00007fe0742d8300 R15: 0000000000022000 01:20:37 executing program 1: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x1000, 0xffffffffffffffff, 0x0) signalfd4(r4, &(0x7f0000000140)={[0x6]}, 0x8, 0x81800) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x14) 01:20:37 executing program 7: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_setup(0x6fa3, &(0x7f0000000140)={0x0, 0xf16b, 0x0, 0x0, 0x105, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000240)=@IORING_OP_NOP={0x0, 0x1}, 0x5) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r8, 0x0}, 0x0) r9 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xa, 0x40010, r0, 0x10000000) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r9, &(0x7f0000000280)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index=0x8, 0x773f, {0x0, r0}, 0x80000000, 0xf, 0x1, {0x0, r10, r0}}, 0x7) 01:20:37 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091cd3476bae3a05bae56ab34bcbeff5ddd1d8a65bc022525b413d13bc1a620d628d0ac0cfe3ca26247450c82d3f2f6bc0c2a5c", 0x80}}, 0x14) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x9, &(0x7f0000000140), 0x1, 0x1}, 0xa33) 01:20:37 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2400000010000100000000ec0000009600000900050000000000000005000080480000006fe884b7f11ac8f1810d0dc930b7fbbdfe445812bd4e3ddf303ed7320b364ab5ef9768d0c54531c0e48e8b51a2f78d54f00d9cdd3a5569eaaaf9d57fd007e7eff61a89507780518151cc0bb52f615f18e044c54fca953b368cc61d149f11066c74aac60fe6c088582777cddc52bd82"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:20:37 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2400000010000100000000ec0000009600000900050000000000000005000080480000006fe884b7f11ac8f1810d0dc930b7fbbdfe445812bd4e3ddf303ed7320b364ab5ef9768d0c54531c0e48e8b51a2f78d54f00d9cdd3a5569eaaaf9d57fd007e7eff61a89507780518151cc0bb52f615f18e044c54fca953b368cc61d149f11066c74aac60fe6c088582777cddc52bd82c5ef927b1c475f2e339546488ff742ba361f30616ba6000013203bece0c63d63d44a2d8033a9f2319b5d7e75aed01f84fbba37b71774867fc770eb6690f7a3c3e0d63d75b35925d7980c"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1720.935060] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1720.955829] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 01:20:37 executing program 5: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) io_uring_enter(r3, 0x27d9, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x80010, r3, 0x8000000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 01:20:37 executing program 4: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 39) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091", 0x4e}}, 0x0) [ 1720.998907] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1721.000205] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1721.001343] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1721.008734] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1721.010011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1721.011352] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1721.057682] FAULT_INJECTION: forcing a failure. [ 1721.057682] name failslab, interval 1, probability 0, space 0, times 0 [ 1721.060403] CPU: 0 PID: 9837 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 1721.061842] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1721.063579] Call Trace: [ 1721.064145] dump_stack+0x107/0x167 [ 1721.064929] should_fail.cold+0x5/0xa [ 1721.065734] ? create_object.isra.0+0x3a/0xa30 [ 1721.066688] should_failslab+0x5/0x20 [ 1721.067488] kmem_cache_alloc+0x5b/0x310 [ 1721.068337] ? mark_held_locks+0x9e/0xe0 [ 1721.069203] create_object.isra.0+0x3a/0xa30 [ 1721.070118] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1721.071183] kmem_cache_alloc_bulk+0x168/0x320 [ 1721.072150] io_submit_sqes+0x713e/0x8780 [ 1721.073081] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1721.074117] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1721.075124] ? find_held_lock+0x2c/0x110 [ 1721.075978] ? io_submit_sqes+0x8780/0x8780 [ 1721.076896] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1721.078048] ? wait_for_completion_io+0x270/0x270 [ 1721.079220] ? rcu_read_lock_any_held+0x75/0xa0 [ 1721.080338] ? vfs_write+0x354/0xb10 [ 1721.081273] ? fput_many+0x2f/0x1a0 [ 1721.082166] ? ksys_write+0x1a9/0x260 [ 1721.083085] ? __ia32_sys_read+0xb0/0xb0 [ 1721.084086] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1721.085370] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1721.086624] do_syscall_64+0x33/0x40 [ 1721.087532] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1721.088783] RIP: 0033:0x7fe076d62b19 [ 1721.089684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1721.094130] RSP: 002b:00007fe0742d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1721.095951] RAX: ffffffffffffffda RBX: 00007fe076e75f60 RCX: 00007fe076d62b19 [ 1721.097667] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1721.099386] RBP: 00007fe0742d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1721.101104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1721.102806] R13: 00007ffebfddc57f R14: 00007fe0742d8300 R15: 0000000000022000 01:20:53 executing program 5: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r5, 0x0}, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000240)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x58, 0x2, &(0x7f0000000340)="4af4c12f7c457c2660aed3a8f99aea16cc8ffcf55f68256750bf4ad987c583e16866142728251ee1484f5be0f062aedafd7fdc277541d37350c6f07011499ab33e66e121feb10d6f6d68458094d1f7ed40d6d5d38f62aac808d0eb62185b7a187b1bf402ca0d22d1f498cad3ce2db8617bbf878803bc75cbd99ff0f199ce97162d36bad4f0447ba45d4844c6067a78b4416a3425d1aa9db4b913c289eb7158860099da3926a8d0d687855070a0ebb2ca9e4028a85646dbecb82d03568b1c6b33dc73a382342eaa2e15cc43bd34e386d1edf1df4293fe5efa77b2ed8eb934dc642ce0b7f70ff00b12", 0x1, 0x0, 0x0, {0x3}}, 0x7fff) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r7 = syz_open_dev$vcsu(&(0x7f0000000040), 0x4, 0x119000) io_uring_enter(r7, 0x4670, 0x8a50, 0x0, &(0x7f0000000180)={[0x3]}, 0x8) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000540)={0x1, 0x1, 0x1000, 0x2, &(0x7f0000000280)="9147", 0xb4, 0x0, &(0x7f0000000480)="de7d8de9aefe123def1c74df761cac6fd7b757a9539a8a0571af32e99388083cde1ef6363cb64c77b3ffdc43ad11cecfb46da4d766220507d0dac022aade8d8cc215e7577a7a287f06e473ce35f57ab00e85ce29abf72401ba78a57dd9679d46d621507f0e6670d70d08cd008a6686c5af919ba28b7147011dd7c3a3d46769f34c77e1381e7615871f511573f10950bfbab2c06214595a0db59b645370b89845685cfc68b8c8be30711391bfc8302ff5bdac53a7"}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x2, 0x1, 0x0, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$mouse(&(0x7f00000001c0), 0xdca8, 0x100) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f0000000200)={0x0, r9, 0x3ff, 0x8, 0x9, 0x1}) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 01:20:53 executing program 7: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x40842, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:20:53 executing program 4: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 40) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091", 0x4e}}, 0x0) 01:20:53 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2400000010000100000000ec0000009600000900050000000000000005000080480000006fe884b7f11ac8f1810d0dc930b7fbbdfe445812bd4e3ddf303ed7320b364ab5ef9768d0c54531c0e48e8b51a2f78d54f00d9cdd3a5569eaaaf9d57fd007e7eff61a89507780518151cc0bb52f615f18e044c54fca953b368cc61d149f11066c74aac60fe6c088582777cddc52bd82c5ef927b1c475f2e339546488ff742ba361f30616ba6000013203bece0c63d63d44a2d8033a9f2319b5d7e75aed01f84fbba37b71774867fc770eb6690f7a3c3e0d63d75b35925d7980c"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:20:53 executing program 3: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 44) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:20:53 executing program 1: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x27fe, &(0x7f0000000200)={0x0, 0xa49b, 0x20, 0x0, 0x1e3, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000000280), &(0x7f0000000340)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r5}}, 0x3e13) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$binfmt_elf64(r6, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x278) sendfile(r6, r7, 0x0, 0x100000001) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) r9 = dup(r8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth0_virt_wifi\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r9, 0x890c, &(0x7f0000000080)={@local, 0x78, r10}) ioctl$sock_inet6_SIOCDIFADDR(r9, 0x8916, &(0x7f00000003c0)={@mcast1, 0x2e, r10}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl0\x00', r10, 0x29, 0x7f, 0x4, 0x8, 0x3c, @loopback, @empty, 0x8, 0x8, 0xfffffffc, 0x8}}) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x14) 01:20:53 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2400000010000100000000ec0000009600000900050000000000000005000080480000006fe884b7f11ac8f1810d0dc930b7fbbdfe445812bd4e3ddf303ed7320b364ab5ef9768d0c54531c0e48e8b51a2f78d54f00d9cdd3a5569eaaaf9d57fd007e7eff61a89507780518151cc0bb52f615f18e044c54fca953b368cc61d149f11066c74aac60fe6c088582777cddc52bd82"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1736.280053] FAULT_INJECTION: forcing a failure. [ 1736.280053] name failslab, interval 1, probability 0, space 0, times 0 [ 1736.282763] CPU: 0 PID: 9844 Comm: syz-executor.4 Not tainted 5.10.260 #1 01:20:53 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091cd3476bae3a05bae56ab34bcbeff5ddd1d8a65bc022525b413d13bc1a620d628d0ac0cfe3ca26247450c82d3f2f6bc0c2a5c", 0x80}}, 0x14) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(0x0, r6, 0x0, 0xa33) [ 1736.284254] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1736.286174] Call Trace: [ 1736.286738] dump_stack+0x107/0x167 [ 1736.287537] should_fail.cold+0x5/0xa [ 1736.287846] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1736.288358] ? create_object.isra.0+0x3a/0xa30 [ 1736.288377] should_failslab+0x5/0x20 [ 1736.288397] kmem_cache_alloc+0x5b/0x310 [ 1736.288433] ? mark_held_locks+0x9e/0xe0 [ 1736.288458] create_object.isra.0+0x3a/0xa30 [ 1736.288481] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1736.295682] kmem_cache_alloc_bulk+0x168/0x320 [ 1736.296690] io_submit_sqes+0x713e/0x8780 [ 1736.297623] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1736.298685] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1736.299736] ? find_held_lock+0x2c/0x110 [ 1736.300627] ? io_submit_sqes+0x8780/0x8780 [ 1736.301561] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1736.302595] ? wait_for_completion_io+0x270/0x270 [ 1736.303643] ? rcu_read_lock_any_held+0x75/0xa0 [ 1736.304647] ? vfs_write+0x354/0xb10 [ 1736.305461] ? fput_many+0x2f/0x1a0 [ 1736.306241] ? ksys_write+0x1a9/0x260 [ 1736.307068] ? __ia32_sys_read+0xb0/0xb0 [ 1736.307931] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1736.309083] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1736.310220] do_syscall_64+0x33/0x40 [ 1736.311037] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1736.312174] RIP: 0033:0x7fe076d62b19 [ 1736.313005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1736.317055] RSP: 002b:00007fe0742d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1736.318711] RAX: ffffffffffffffda RBX: 00007fe076e75f60 RCX: 00007fe076d62b19 [ 1736.320285] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1736.321863] RBP: 00007fe0742d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1736.323406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1736.324913] R13: 00007ffebfddc57f R14: 00007fe0742d8300 R15: 0000000000022000 [ 1736.338943] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1736.345742] FAULT_INJECTION: forcing a failure. [ 1736.345742] name failslab, interval 1, probability 0, space 0, times 0 [ 1736.348396] CPU: 0 PID: 9846 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1736.349876] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1736.351642] Call Trace: [ 1736.352210] dump_stack+0x107/0x167 [ 1736.353004] should_fail.cold+0x5/0xa [ 1736.353818] ? create_object.isra.0+0x3a/0xa30 [ 1736.354791] should_failslab+0x5/0x20 [ 1736.355604] kmem_cache_alloc+0x5b/0x310 [ 1736.356475] ? mark_held_locks+0x9e/0xe0 [ 1736.357343] create_object.isra.0+0x3a/0xa30 [ 1736.358282] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1736.359368] kmem_cache_alloc_bulk+0x168/0x320 [ 1736.360353] io_submit_sqes+0x713e/0x8780 [ 1736.361285] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1736.362343] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1736.363374] ? find_held_lock+0x2c/0x110 [ 1736.364245] ? io_submit_sqes+0x8780/0x8780 [ 1736.365184] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1736.366211] ? wait_for_completion_io+0x270/0x270 [ 1736.367239] ? rcu_read_lock_any_held+0x75/0xa0 [ 1736.368226] ? vfs_write+0x354/0xb10 [ 1736.369032] ? fput_many+0x2f/0x1a0 [ 1736.369803] ? ksys_write+0x1a9/0x260 [ 1736.370611] ? __ia32_sys_read+0xb0/0xb0 [ 1736.371479] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1736.372606] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1736.373708] do_syscall_64+0x33/0x40 [ 1736.374669] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1736.376049] RIP: 0033:0x7ffa806a4b19 [ 1736.377067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1736.381387] RSP: 002b:00007ffa7dc1a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1736.383035] RAX: ffffffffffffffda RBX: 00007ffa807b7f60 RCX: 00007ffa806a4b19 [ 1736.384592] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1736.386146] RBP: 00007ffa7dc1a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1736.387681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1736.389254] R13: 00007fff571e114f R14: 00007ffa7dc1a300 R15: 0000000000022000 [ 1736.423538] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1736.425097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1736.427457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1736.429363] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1736.435688] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1736.440163] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 01:20:53 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091cd3476bae3a05bae56ab34bcbeff5ddd1d8a65bc022525b413d13bc1a620d628d0ac0cfe3ca26247450c82d3f2f6bc0c2a5c", 0x80}}, 0x14) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(0x0, r6, 0x0, 0xa33) 01:20:53 executing program 7: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000180)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd_index=0x2, 0x7, 0x0, 0x2, 0x7, 0x1}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x278) sendfile(r4, r5, 0x0, 0x100000001) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$nfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRES32=r6]) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000140)={0x1}) r7 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) r8 = dup3(r7, r0, 0x80000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x4010, r8, 0x0) 01:20:53 executing program 5: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0)={0x0, 0x0, 0x10}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x4010, r0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 01:20:53 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2400000010000100000000ec0000009600000900050000000000000005000080480000006fe884b7f11ac8f1810d0dc930b7fbbdfe445812bd4e3ddf303ed7320b364ab5ef9768d0c54531c0e48e8b51a2f78d54f00d9cdd3a5569eaaaf9d57fd007e7eff61a89507780518151cc0bb52f615f18e044c54fca953b368cc61d149f11066c74aac60fe6c088582777cddc52bd82c5ef927b1c475f2e339546488ff742ba361f30616ba6000013203bece0c63d63d44a2d8033a9f2319b5d7e75aed01f84fbba37b71774867fc770eb6690f7a3c3e0d63d75b35925d7980c"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:20:53 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2400000010000100000000ec0000009600000900050000000000000005000080480000006fe884b7f11ac8f1810d0dc930b7fbbdfe445812bd4e3ddf303ed7320b364ab5ef9768d0c54531c0e48e8b51a2f78d54f00d9cdd3a5569eaaaf9d57fd007e7eff61a89507780518151cc0bb52f615f18e044c54fca953b368cc61d149f11066c74aac60fe6c088582777cddc52bd82"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:20:53 executing program 4: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 41) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091", 0x4e}}, 0x0) [ 1736.629360] nfs: Unknown parameter '' 01:20:53 executing program 3: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 45) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) [ 1736.659477] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1736.702702] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 01:20:53 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091cd3476bae3a05bae56ab34bcbeff5ddd1d8a65bc022525b413d13bc1a620d628d0ac0cfe3ca26247450c82d3f2f6bc0c2a5c", 0x80}}, 0x14) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(0x0, r6, 0x0, 0xa33) [ 1736.831264] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1736.832831] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1736.834469] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1736.848657] FAULT_INJECTION: forcing a failure. [ 1736.848657] name failslab, interval 1, probability 0, space 0, times 0 [ 1736.851681] CPU: 0 PID: 9882 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 1736.853301] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1736.855082] Call Trace: [ 1736.855644] dump_stack+0x107/0x167 [ 1736.856444] should_fail.cold+0x5/0xa [ 1736.857253] ? create_object.isra.0+0x3a/0xa30 [ 1736.858232] should_failslab+0x5/0x20 [ 1736.859065] kmem_cache_alloc+0x5b/0x310 [ 1736.859920] ? find_held_lock+0x2c/0x110 [ 1736.860811] create_object.isra.0+0x3a/0xa30 [ 1736.861749] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1736.862843] __kmalloc_node+0x1ae/0x420 [ 1736.863719] memcg_alloc_page_obj_cgroups+0x73/0x100 [ 1736.864817] memcg_slab_post_alloc_hook+0x1f0/0x430 [ 1736.865894] kmem_cache_alloc_bulk+0x182/0x320 [ 1736.866889] io_submit_sqes+0x713e/0x8780 [ 1736.867809] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1736.868907] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1736.869956] ? find_held_lock+0x2c/0x110 [ 1736.870832] ? io_submit_sqes+0x8780/0x8780 [ 1736.871759] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1736.872812] ? wait_for_completion_io+0x270/0x270 [ 1736.873859] ? rcu_read_lock_any_held+0x75/0xa0 [ 1736.874845] ? vfs_write+0x354/0xb10 [ 1736.875640] ? fput_many+0x2f/0x1a0 [ 1736.876431] ? ksys_write+0x1a9/0x260 [ 1736.877252] ? __ia32_sys_read+0xb0/0xb0 [ 1736.878143] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1736.879263] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1736.880370] do_syscall_64+0x33/0x40 [ 1736.881189] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1736.882305] RIP: 0033:0x7fe076d62b19 [ 1736.883100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1736.887280] RSP: 002b:00007fe0742d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1736.889317] RAX: ffffffffffffffda RBX: 00007fe076e75f60 RCX: 00007fe076d62b19 [ 1736.891113] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1736.892651] RBP: 00007fe0742d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1736.893961] FAULT_INJECTION: forcing a failure. [ 1736.893961] name failslab, interval 1, probability 0, space 0, times 0 [ 1736.894171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1736.894184] R13: 00007ffebfddc57f R14: 00007fe0742d8300 R15: 0000000000022000 [ 1736.900268] CPU: 1 PID: 9885 Comm: syz-executor.3 Not tainted 5.10.260 #1 [ 1736.901704] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1736.903445] Call Trace: [ 1736.903999] dump_stack+0x107/0x167 [ 1736.904780] should_fail.cold+0x5/0xa [ 1736.905582] ? create_object.isra.0+0x3a/0xa30 [ 1736.906542] should_failslab+0x5/0x20 [ 1736.907340] kmem_cache_alloc+0x5b/0x310 [ 1736.907859] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1736.908200] create_object.isra.0+0x3a/0xa30 [ 1736.908217] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1736.908244] kmem_cache_alloc_bulk+0x168/0x320 [ 1736.909781] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1736.910644] io_submit_sqes+0x713e/0x8780 [ 1736.910704] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1736.912010] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1736.912701] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1736.912726] ? find_held_lock+0x2c/0x110 [ 1736.912753] ? io_submit_sqes+0x8780/0x8780 [ 1736.920057] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1736.921087] ? wait_for_completion_io+0x270/0x270 [ 1736.922110] ? rcu_read_lock_any_held+0x75/0xa0 [ 1736.923095] ? vfs_write+0x354/0xb10 [ 1736.923865] ? fput_many+0x2f/0x1a0 [ 1736.924637] ? ksys_write+0x1a9/0x260 [ 1736.925438] ? __ia32_sys_read+0xb0/0xb0 [ 1736.926298] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1736.927401] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1736.928489] do_syscall_64+0x33/0x40 [ 1736.929285] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1736.930364] RIP: 0033:0x7ffa806a4b19 [ 1736.931142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1736.935010] RSP: 002b:00007ffa7dc1a188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1736.936620] RAX: ffffffffffffffda RBX: 00007ffa807b7f60 RCX: 00007ffa806a4b19 [ 1736.938116] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1736.939568] RBP: 00007ffa7dc1a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1736.941063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1736.942538] R13: 00007fff571e114f R14: 00007ffa7dc1a300 R15: 0000000000022000 [ 1737.378918] nfs: Unknown parameter '' 01:21:08 executing program 3: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 46) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:21:08 executing program 5: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) syz_io_uring_setup(0x78bd, &(0x7f0000000180)={0x0, 0x5bed, 0x4, 0x1, 0x2a6, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 01:21:08 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2400000010000100000000ec0000009600000900050000000000000005000080480000006fe884b7f11ac8f1810d0dc930b7fbbdfe445812bd4e3ddf303ed7320b364ab5ef9768d0c54531c0e48e8b51a2f78d54f00d9cdd3a5569eaaaf9d57fd007e7eff61a89507780518151cc0bb52f615f18e044c54fca953b368cc61d149f11066c74aac60fe6c088582777cddc52bd82c5ef927b1c475f2e339546488ff742ba361f30616ba6000013203bece0c63d63d44a2d8033a9f2319b5d7e75aed01f84fbba37b71774867fc770eb6690f7a3c3e0d63d75b35925d7980ce0513e1600a3b9b86344041999a73312ac34f870e770a7124542c63a0febe8281dfa46ca86"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:21:08 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2400000010000100000000ec0000009600000900050000000000000005000080480000006fe884b7f11ac8f1810d0dc930b7fbbdfe445812bd4e3ddf303ed7320b364ab5ef9768d0c54531c0e48e8b51a2f78d54f00d9cdd3a5569eaaaf9d57fd007e7eff61a89507780518151cc0bb52f615f18e044c54fca953b368cc61d149f11066c74aac60fe6c088582777cddc52bd82c5ef927b1c475f2e339546488ff742ba361f30616ba6000013203bece0c63d63d44a2d8033a9f2319b5d7e75aed01f84fbba37b71774867fc770eb6690f7a3c3e0d63d75b35925d7980c"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1751.884524] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 01:21:08 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091cd3476bae3a05bae56ab34bcbeff5ddd1d8a65bc022525b413d13bc1a620d628d0ac0cfe3ca26247450c82d3f2f6bc0c2a5c", 0x80}}, 0x14) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000140), 0x1, 0x1}, 0xa33) 01:21:08 executing program 1: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x4000) 01:21:08 executing program 4: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 42) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091", 0x4e}}, 0x0) 01:21:08 executing program 7: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x7}, 0x0, 0x40, 0x0, 0x0, 0x10000}, 0x0, 0x3, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) [ 1751.901373] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1751.930081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1751.931175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1751.932384] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1751.943840] FAULT_INJECTION: forcing a failure. [ 1751.943840] name failslab, interval 1, probability 0, space 0, times 0 [ 1751.946597] CPU: 1 PID: 9912 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 1751.948037] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1751.949806] Call Trace: [ 1751.950376] dump_stack+0x107/0x167 [ 1751.950629] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1751.951157] should_fail.cold+0x5/0xa [ 1751.951182] ? create_object.isra.0+0x3a/0xa30 [ 1751.951204] should_failslab+0x5/0x20 [ 1751.952226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1751.953005] kmem_cache_alloc+0x5b/0x310 [ 1751.954428] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1751.955792] ? mark_held_locks+0x9e/0xe0 [ 1751.955818] create_object.isra.0+0x3a/0xa30 [ 1751.955838] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1751.960599] kmem_cache_alloc_bulk+0x168/0x320 [ 1751.961578] io_submit_sqes+0x713e/0x8780 [ 1751.962493] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1751.963557] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1751.964611] ? find_held_lock+0x2c/0x110 [ 1751.965515] ? io_submit_sqes+0x8780/0x8780 [ 1751.966457] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1751.967480] ? wait_for_completion_io+0x270/0x270 [ 1751.968521] ? rcu_read_lock_any_held+0x75/0xa0 [ 1751.969498] ? vfs_write+0x354/0xb10 [ 1751.970285] ? fput_many+0x2f/0x1a0 [ 1751.971037] ? ksys_write+0x1a9/0x260 [ 1751.971838] ? __ia32_sys_read+0xb0/0xb0 [ 1751.972715] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1751.973833] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1751.974927] do_syscall_64+0x33/0x40 [ 1751.975711] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1751.976789] RIP: 0033:0x7fe076d62b19 [ 1751.977581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1751.981506] RSP: 002b:00007fe0742d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1751.983118] RAX: ffffffffffffffda RBX: 00007fe076e75f60 RCX: 00007fe076d62b19 01:21:08 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1751.984626] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1751.986338] RBP: 00007fe0742d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1751.987852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1751.989451] R13: 00007ffebfddc57f R14: 00007fe0742d8300 R15: 0000000000022000 [ 1752.010374] FAULT_INJECTION: forcing a failure. [ 1752.010374] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1752.013520] CPU: 1 PID: 9901 Comm: syz-executor.3 Not tainted 5.10.260 #1 01:21:08 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2400000010000100000000ec0000009600000900050000000000000005000080480000006fe884b7f11ac8f1810d0dc930b7fbbdfe445812bd4e3ddf303ed7320b364ab5ef9768d0c54531c0e48e8b51a2f78d54f00d9cdd3a5569eaaaf9d57fd007e7eff61a89507780518151cc0bb52f615f18e044c54fca953b368cc61d149f11066c74aac60fe6c088582777cddc52bd82c5ef927b1c475f2e339546488ff742ba361f30616ba6000013203bece0c63d63d44a2d8033a9f2319b5d7e75aed01f84fbba37b71774867fc770eb6690f7a3c3e0d63d75b35925d7980c"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1752.014984] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1752.016951] Call Trace: [ 1752.017519] dump_stack+0x107/0x167 [ 1752.018293] should_fail.cold+0x5/0xa [ 1752.019107] _copy_to_user+0x2e/0x180 [ 1752.019921] simple_read_from_buffer+0xcc/0x160 [ 1752.020936] proc_fail_nth_read+0x198/0x230 [ 1752.021860] ? proc_sessionid_read+0x230/0x230 [ 1752.022833] ? security_file_permission+0xb1/0xe0 [ 1752.023900] ? proc_sessionid_read+0x230/0x230 [ 1752.024877] vfs_read+0x228/0x620 [ 1752.025621] ksys_read+0x12d/0x260 [ 1752.026375] ? vfs_write+0xb10/0xb10 [ 1752.027165] ? ksys_read+0x260/0x260 [ 1752.027967] do_syscall_64+0x33/0x40 [ 1752.028774] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1752.029927] RIP: 0033:0x7ffa8065769c [ 1752.030771] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1752.034630] RSP: 002b:00007ffa7dc1a170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1752.036235] RAX: ffffffffffffffda RBX: 000000000000030e RCX: 00007ffa8065769c [ 1752.037737] RDX: 000000000000000f RSI: 00007ffa7dc1a1e0 RDI: 0000000000000005 [ 1752.039228] RBP: 00007ffa7dc1a1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1752.040786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1752.042347] R13: 00007fff571e114f R14: 00007ffa7dc1a300 R15: 0000000000022000 [ 1752.062894] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 01:21:08 executing program 5: r0 = syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) futex(&(0x7f0000001a00), 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x27d9, 0x0, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x39a3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1000000, 0xffffffff, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) futex(&(0x7f00000003c0)=0x1, 0x1, 0x2, &(0x7f0000000400)={0x77359400}, &(0x7f0000000480), 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x278) syz_io_uring_setup(0xc5e, &(0x7f0000000240)={0x0, 0x6a19, 0x4, 0x3, 0x284, 0x0, r6}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000340), &(0x7f0000000380)) sendfile(r5, r6, 0x0, 0x100000001) r7 = fork() fcntl$setown(0xffffffffffffffff, 0x8, r7) ptrace$getsig(0x4202, r7, 0x4, &(0x7f0000000240)) syz_open_procfs(r7, &(0x7f00000004c0)='coredump_filter\x00') accept$unix(r5, &(0x7f0000000180), &(0x7f0000000200)=0x6e) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1752.078103] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 01:21:08 executing program 7: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3000001, 0x80010, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0xa, &(0x7f0000000140)={0x0, 0x3938700}, 0x1, 0x1}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) [ 1752.102904] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1752.104477] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1752.106146] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1752.125762] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1752.127445] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 01:21:08 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091cd3476bae3a05bae56ab34bcbeff5ddd1d8a65bc022525b413d13bc1a620d628d0ac0cfe3ca26247450c82d3f2f6bc0c2a5c", 0x80}}, 0x14) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000140), 0x1, 0x1}, 0xa33) [ 1752.129064] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 01:21:08 executing program 1: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x80000) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f0000000480)={0xde4, r5, 0x20, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x31}}}}, [@NL80211_ATTR_TX_RATES={0x268, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xf4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8, 0x20, 0x8, 0x400, 0x3f]}}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x3, 0x1}, {0x4, 0x2}, {0x5, 0x2}, {0x5, 0x4}, {0x7, 0x5}, {0x0, 0x6}, {0x1, 0xa}, {0x7, 0x5}, {0x0, 0x3}, {0x2, 0x8}, {0x2, 0x7}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x6, 0x2}, {0x4, 0x5}, {0x0, 0x3}, {0x0, 0x6}, {0x7, 0x9}, {0x0, 0x7}, {0x0, 0x1}, {0x1, 0x3}, {0x4, 0x6}, {0x1, 0x7}, {0x2, 0x7}, {0x0, 0x7}, {0x1, 0x3}, {0x6, 0x9}, {0x4, 0x7}, {0x1, 0x7}, {0x7, 0xa}, {0x1, 0x7}, {0x0, 0x8}, {0x1, 0x7}, {0x0, 0x7}, {0x7, 0x7}, {0x7, 0x2}, {0x6, 0x7}, {0x1}, {0x5, 0x5}, {0x3, 0x9}, {0x0, 0x8}, {0x5, 0x6}, {0x5, 0x1}, {0x3}, {0x7, 0x1}, {0x0, 0x3}, {0x1, 0x4}, {0x0, 0x5}, {0x4, 0x7}, {0x4, 0x7}, {0x2, 0x9}, {0x7, 0x3}, {0x6, 0x3}, {0x3, 0x4}, {0x5, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x7fff, 0x1, 0xd77, 0x8, 0x7, 0x6, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x12, 0x6bdb96e33bcc2db3, 0x2, 0x30, 0x60, 0x4, 0x18, 0x36, 0x60]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x0, 0x9}, {0x4, 0x9}, {0x4, 0x5}, {0x2, 0x6}, {0x3}, {0x6, 0x2}, {0x7, 0x3}, {0x0, 0x1}, {0x0, 0x4}, {0x7, 0x2}, {0x7, 0x4}, {0x5, 0x9}, {0x4, 0x5}, {0x0, 0x2}, {0x7}, {0x5, 0x4}, {0x0, 0x3}, {0x1, 0x3}, {0x1, 0x6}, {0x4, 0x9}, {0x7, 0x7}, {0x1, 0x2}, {0x7, 0x2}, {0x6, 0xa}, {0x6, 0x8}, {0x1, 0x3}, {0x7, 0x7}, {0x1, 0x9}, {0x0, 0x4}, {0x1, 0x4}, {0x4}, {0x7, 0x1}, {0x2, 0xa}, {0x3, 0x9}, {0x4, 0x5}, {0x0, 0xa}, {0x2, 0x3}, {0x1, 0x1}, {0x1, 0x5}, {0x0, 0x1}, {0x4, 0x2}, {0x3, 0x2}, {0x2, 0x1}, {0x3, 0x5}, {0x4}, {0x1, 0x8}, {0x3, 0x9}, {0x0, 0x3}, {0x7, 0x2}, {0x2, 0x5}, {0x2, 0xa}, {0x0, 0x4}, {0x6, 0x8}, {0x1, 0x2}, {0x4, 0x8}, {0x2, 0x1}, {0x4, 0x3}, {0x5, 0x8}, {0x1, 0xa}, {0x1, 0x7}, {}, {0x4, 0xa}, {0x1, 0x7}, {0x0, 0x5}, {0x5, 0xa}, {0x3, 0x5}, {0x1, 0x8}, {0x5, 0x1c}, {0x6, 0xa}, {0x6, 0x6}, {0x0, 0x1}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x0, 0x1ff, 0x0, 0x3, 0x0, 0x7f, 0xa4]}}]}, @NL80211_BAND_5GHZ={0x84, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x13, 0x2, [{0x1, 0x5}, {0x3, 0x8}, {0x0, 0x7}, {0x1, 0x6}, {0x3, 0x1}, {0x0, 0x3}, {0x2, 0x6}, {0x6, 0x3}, {0x6, 0x3}, {0x1, 0xa}, {0x5, 0x1}, {0x1, 0x2}, {0x3, 0x8}, {0x5, 0x5}, {0x0, 0x3}]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x4, 0x30, 0x2, 0x3, 0xc, 0x9, 0x6c, 0x5, 0xb602f5a7eb0841ca, 0x1, 0x48, 0x6, 0x4, 0x3, 0x4, 0xb, 0x9, 0x9, 0x24, 0x1, 0x36, 0x12, 0x12, 0x24, 0x3, 0x16, 0x24, 0x18, 0x1, 0x4, 0x4]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xffe1, 0x7fff, 0x8001, 0x8, 0x23d, 0xce, 0x1]}}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x0, 0xa}, {0x1, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x7278, 0x9, 0x3, 0x1, 0x2, 0x3]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x1, 0x24, 0x12, 0x4, 0x1, 0x3, 0x30, 0x1, 0x12, 0x36, 0x16]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x4, 0x24, 0x6, 0x6, 0xc, 0x7e, 0x1b, 0x4, 0x30, 0x1b, 0x1b, 0x30, 0x60, 0x1, 0x6, 0x16, 0x60, 0x1, 0x48, 0x4, 0x48, 0x4b, 0x0, 0x36, 0x12]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0xc0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7d, 0xff, 0x5, 0x3, 0x5, 0x8, 0x401, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x1000, 0x5, 0x3, 0xfff9, 0x3, 0x10, 0xbc]}}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x0, 0x5}, {0x2, 0x8}, {0x6, 0x3}, {0x7, 0x4}, {0x1, 0x5}, {0x2}, {0x3, 0xa}, {0x1, 0x4}, {0x1, 0xa}, {0x1, 0x6}, {0x1, 0x6}, {0x2}, {0x6, 0x6}, {0x0, 0x9}, {0x3, 0x7}, {0x7}, {0x0, 0x6}, {0x1, 0x5}, {0x1, 0xa}, {0x6}, {0x0, 0x8}, {0x6, 0x2}, {0x6, 0x4}, {0x0, 0x5}, {0x1, 0x2}, {0x3, 0x4}, {0x2, 0x9}, {0x3}, {0x5}, {0x0, 0x2}, {0x6, 0xa}, {0x0, 0x8}, {0x0, 0x9}, {0x0, 0x6}, {0x4, 0x2}, {0x1, 0x1}, {0x6, 0x1}, {0x3, 0x5}, {0x0, 0x8}, {0x0, 0x9}, {0x3, 0x9}, {0x5, 0x5}, {0x1, 0x9}, {0x5, 0x6}, {0x3, 0x3}, {0x6, 0x4}, {0x2, 0x4}, {0x3, 0x7}, {0x7, 0x8}, {0x3, 0x8}, {0x1, 0x6}, {0x3, 0x9}, {0x5, 0x2}, {0x1, 0x4}, {0x7, 0x8}, {0x0, 0x2}, {0x1, 0x1}, {0x1, 0x7}, {0x0, 0x5}, {0x1, 0x3}, {0x0, 0x2}, {0x0, 0x9}]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x6, 0x16, 0x1, 0x16, 0x36, 0x12, 0x6, 0x48, 0x9, 0x16, 0x4, 0xc, 0x18, 0x16, 0x4, 0x3, 0xc, 0x6, 0x2, 0x4, 0x6c]}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x5, 0x4}, {0x4}, {0x0, 0x8}, {0x4, 0x5}, {0x2, 0x3}, {0x0, 0x1}, {0x7, 0x3}, {0x7, 0x1}, {0x1, 0x2}, {0x6, 0x7}, {0x5, 0x4}, {0x6, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x18, 0x1, 0x6c, 0x9, 0x1a, 0x6c, 0x1, 0x9, 0x9, 0x6, 0x1, 0x12, 0x6, 0xb, 0x6c, 0x24, 0xb, 0x4, 0x12, 0x5, 0x0]}]}]}, @NL80211_ATTR_TX_RATES={0x11c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x104, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xff81, 0x800, 0x1, 0x7f, 0xfff9, 0x3, 0xffff, 0x1]}}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x7, 0x4}, {0x2, 0x5}, {0x5, 0x8}, {0x1, 0x2}, {0x3, 0x4}, {0x7, 0xa}, {0x0, 0x6}, {0x6, 0x1}, {0x7, 0x9}, {0x0, 0x9}, {0x1, 0x9}, {0x0, 0x8}, {0x0, 0x2}, {0x5, 0x6}, {0x5}]}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x6}, {0x4, 0xa}, {0x2, 0x5}, {0x1, 0xa}, {0x7, 0x9}, {0x4, 0x6}, {0x0, 0x1}, {0x5, 0x1}, {0x2, 0xa}, {0x7, 0x5}, {0x1, 0x2}, {0x5}, {0x6, 0x2}, {0x2, 0xa}, {0x4, 0xa}, {0x1, 0xa}, {0x4, 0x1}, {0x5, 0x8}]}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x3, 0x6}, {0x1, 0x8}, {0x0, 0x5}, {0x7, 0x7}, {0x6, 0xa}, {0x5, 0x2}, {0x1, 0x5}, {0x7, 0xa}, {0x5, 0x9}, {0x5}, {0x0, 0x3}, {0x3, 0x9}, {0x1, 0x6}, {0x6, 0x9}, {0x3, 0x8}, {0x2, 0x6}, {0x3, 0x9}, {0x7, 0x6}, {0x4, 0x9}, {0x0, 0x9}, {0x6, 0x1}, {0x7, 0x9}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0xa}, {0x1, 0x4}, {0x0, 0x4}, {0x4, 0x6}, {0x0, 0x2}, {0x7, 0xa}, {0x6, 0x5}, {0x4}, {0x1, 0x1}, {0x1, 0x3}, {0x7, 0x1}, {0x6, 0x5}, {0x5, 0x7}, {0x4, 0x2}, {0x4, 0x9}, {0x1, 0x1}, {0x1}, {0x6, 0x9}, {0x5, 0xa}, {0x0, 0x3}, {0x4, 0x1}, {0x6, 0x2}, {0x2}, {0x5, 0x5}, {0x2, 0x5}, {0x2, 0x8}, {0x4}, {0x0, 0x8}, {0x1, 0x3}, {0x0, 0x9}, {0x0, 0x5}, {0x3, 0x1}, {0x5}, {0x6, 0x9}, {0x6, 0x9}, {0x3, 0x6}, {0x6, 0x7}, {0x5, 0x6}, {0x5, 0x5}, {0x3, 0x8}, {0x0, 0x6}, {0x4, 0x6}, {0x4, 0x8}, {0x4, 0x7}, {0x5, 0x4}, {0x3, 0x9}, {0x5, 0x5}, {0x1, 0xa}, {0x4, 0x8}, {0x1, 0x2}, {0x1, 0x5}, {0x3, 0x9}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x7ff, 0x7ff, 0x3f, 0x3ff, 0x9, 0xfff]}}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x1, 0x8}, {0x3, 0x2}, {0x7, 0x5}, {0x1, 0x8}, {0x4, 0xa}, {0x1, 0x1}, {0x3, 0x7}, {0x0, 0x3}, {0x2, 0x6}, {0x1, 0x8}, {0x4, 0x7}, {0x7, 0x1}, {0x5, 0x4}, {0x5, 0x6}, {0x0, 0x3}, {0x6, 0x9}, {0x2}, {0x1, 0x1}, {0x0, 0x4}, {0x6, 0x2}, {0x7, 0x2}, {}, {0x1}, {0x7, 0x1}, {0x0, 0x6}, {0x2, 0xa}, {0x6, 0xa}, {0x0, 0xa}, {0x1, 0x6}, {0x4, 0x1}, {0x0, 0x3}, {0x6, 0x3}, {0x5, 0x2}, {0x2}, {0x7, 0x7}, {0x2, 0xa}, {0x7, 0x7}, {0x5}, {0x2, 0x8}, {0x7, 0x7}, {0x3, 0x3}, {0x2, 0x6}, {0x5}, {0x4, 0x9}, {0x2, 0x9}, {0x0, 0x1}, {0x6, 0x6}, {0x6, 0x5}, {0x5, 0x7}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x7}, {0x4, 0x2}, {0x1, 0x4}, {0x0, 0x8}, {}, {0x2, 0xa}, {0x7, 0x3}, {0x1, 0x3}, {0x2, 0x3}]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x36, 0x30, 0x9, 0x3, 0xc, 0x18, 0x49, 0x4, 0xc, 0x1, 0x12, 0x78d64ae354fc8393, 0x12, 0x73, 0xc, 0x60]}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x2e0, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xd0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x34, 0x2, [{0x4}, {0x7, 0x8}, {0x7, 0x6}, {0x7, 0x7}, {0x7, 0x6}, {0x5}, {0x1, 0x2}, {0x4, 0x7}, {0x1, 0x1}, {0x1, 0x6}, {0x6, 0xa}, {0x3, 0x4}, {0x6, 0x1}, {0x3, 0x5}, {0x1, 0x3}, {0x1, 0x4}, {0x0, 0x1}, {0x1, 0x2}, {0x6, 0xa}, {0x7, 0x5}, {0x1, 0x1}, {0x7}, {0x1, 0x4}, {0x5, 0x3}, {0x5, 0x2}, {0x5}, {0x7, 0x6}, {0x4, 0x5}, {0x1, 0x5}, {0x3, 0x9}, {0x1, 0x6}, {0x3, 0x3}, {0x3, 0x5}, {0x3}, {0x1, 0x9}, {0x5, 0x5}, {0x5, 0x1}, {0x6}, {0x6, 0x2}, {0x0, 0x5}, {0x2, 0xa}, {0x5, 0x2}, {0x1, 0x8}, {0x3, 0x3}, {0x6, 0x3}, {0x1, 0x9}, {0x1, 0x4}, {0x5, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x1ff, 0x7ff, 0x9, 0x1, 0x6, 0x2, 0x7]}}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x6, 0x4}, {0x0, 0x5}, {0x0, 0x3}, {0x0, 0x8}, {0x0, 0xa}, {0x7, 0x3}, {0x3, 0x1}, {0x1}, {0x0, 0x5}, {0x2, 0xa}, {0x5, 0xa}, {0x1, 0x5}, {0x7, 0x6}, {0x6, 0x3}, {0x4, 0x5}, {0x7, 0x9}, {0x2}, {0x5, 0x7}, {0x0, 0x7}, {0x6, 0x3}, {0x6, 0x5}, {0x0, 0xa}, {0x5, 0x4}, {0x0, 0x1}, {0x1, 0x6}, {}, {0x2, 0xa}, {0x3, 0x9}, {0x7, 0x1}, {0x5, 0xa}, {0x5, 0x8}, {0x3, 0x3}, {0x3, 0x5}, {0x1, 0x8}, {0x6, 0x7}, {0x2, 0x4}, {0x1, 0x2}, {0x1, 0x4}, {0x2, 0x2}, {0x1, 0x6}, {0x3, 0x4}, {0x0, 0x5}, {0x1, 0x1}, {0x3, 0xa}, {0x0, 0x8}, {0x0, 0x8}, {0x4, 0x2}, {0x1, 0x7}, {0x3, 0x7}, {0x3, 0x5}, {0x5, 0x7}, {0x2, 0x4}, {0x2, 0x6}, {0x7}, {0x0, 0x8}, {0x1, 0xa}, {0x0, 0x4}, {0x0, 0x7}, {0x1}, {0x5, 0x3}, {0x3, 0x9}, {0x5, 0x2}, {0x1, 0x8}, {0x6, 0xa}, {0x3, 0x5}, {0x4, 0x4}, {0x1, 0x4}, {0x1, 0x2}, {0x2, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7, 0x7, 0x4, 0x3, 0x0, 0x40, 0xffc1]}}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x9, 0x2, 0x5, 0x7c, 0x9, 0x24, 0x30, 0x6, 0x30, 0x4, 0x18, 0x3, 0x3, 0x6c, 0x3, 0xb, 0x2, 0x9, 0x1, 0x5, 0xb, 0x1, 0x2, 0x12, 0x12, 0x1, 0x0, 0x4, 0x12, 0xb, 0x2]}]}, @NL80211_BAND_2GHZ={0x170, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x3, 0x4, 0x81, 0x3, 0x200, 0x7ff, 0xfffd]}}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x7, 0x8}, {0x5, 0x8}, {0x2, 0x9}, {0x0, 0x4}, {0x0, 0x9}, {0x2}, {0x0, 0x4}, {0x4, 0x6}, {0x6, 0x9}, {0x1, 0x3}, {0x7, 0x6}, {0x4, 0x2}, {0x5, 0x1}, {0x5, 0xa}, {0x5, 0x9}, {0x1, 0x9}, {0x5, 0x9}, {0x6, 0x6}, {0x7, 0x1}, {0x0, 0x2}, {0x0, 0x9}, {0x6, 0x3}, {0x3, 0x5}, {0x3, 0x6}, {0x4, 0x8}, {0x7, 0x5}, {0x5, 0x9}, {}, {0x5, 0x3}, {0x7}, {0x2, 0x4}]}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x1}, {0x2, 0x5}, {0x0, 0x5}, {0x6, 0x3}, {0x1, 0xa}, {0x7, 0x7}, {0x6, 0x5}, {0x4, 0x2}, {0x3, 0x7}, {0x0, 0x5}, {}, {0x1, 0x5}, {0x2, 0x9}, {0x4, 0x1}, {0x6}, {0x3, 0x5}, {0x0, 0x4}, {0x1, 0xa}, {0x6, 0x4}, {0x2, 0x9}, {0x4, 0x4}, {0x2, 0x5}, {0x4, 0x1}, {0x7, 0x7}, {0x1, 0xa}, {0x3, 0x1}, {0x6, 0x7}, {0x1, 0x8}, {0x7, 0x1}, {0x4, 0x3}, {0x0, 0x3}, {0x1, 0x4}, {0x7, 0x9}, {0x2, 0x5}, {0x1, 0x7}, {0x7, 0x3}, {0x0, 0x8}, {0x6, 0x9}, {0x4, 0x4}, {0x7, 0x8}, {0x6}, {0x0, 0xa}, {0x2, 0x6}, {0x6, 0x2}, {0x6, 0x2}, {0x1, 0xa}, {0x3, 0x8}, {0x7, 0x8}, {0x6}, {0x2, 0x3}, {0x1, 0x4}, {0x0, 0x9}, {0x5, 0x5}, {0x5, 0x1}, {0x1, 0x7}, {0x6}, {0x1}, {0x7}, {0x1, 0x8}, {0x4, 0x2}, {0x3, 0x6}, {0x3, 0x9}, {0x0, 0x6}, {0x1, 0x4}, {0x2, 0x3}, {0x0, 0x7}, {0x2, 0x9}, {0x4, 0x1}, {0x5, 0x4}, {0x4, 0x7}]}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x4, 0x3}, {0x5}, {0x4, 0x4}, {0x7, 0x6}, {0x1, 0xa}, {0x4, 0xa}, {0x0, 0x8}, {0x0, 0x2}, {0x1, 0x5}, {0x7, 0x8}, {0x4, 0x9}]}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x1, 0xa}, {0x4, 0x1}, {0x2, 0x8}, {0x5, 0x3}, {0x1, 0x2}, {0x3, 0x5}, {0x2, 0x2}, {}, {0x2, 0x2}, {0x7, 0x1}, {0x0, 0x8}, {0x5, 0x5}, {0x1, 0x8}, {0x1, 0x2}, {0x6, 0x5}, {0x2, 0x3}, {0x1, 0x9}, {0x7, 0x9}, {0x0, 0x4}, {0x0, 0x4}, {0x1, 0x9}, {0x2}, {0x6, 0x5}, {0x2, 0x9}, {0x5, 0x6}, {0x1, 0x1}, {0x7, 0x3}, {0x1, 0x1}, {0x5, 0x2}, {0x1, 0x8}, {0x1, 0x2}, {0x5, 0x1}, {0x1, 0x5}, {0x1, 0x6}, {0x0, 0x1}, {0x5, 0x5}, {0x0, 0x4}, {0x7, 0x7}, {0x2, 0x8}, {0x5, 0x5}, {0x1, 0x8}, {0x0, 0xa}, {0x5, 0x6}, {0x0, 0x3}, {0x0, 0x9}, {0x5, 0x9}, {0x1, 0x4}, {0x0, 0x4}]}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x4}, {0x4, 0x9}, {0x7, 0x7}, {0x2, 0xa}, {0x1, 0x1}, {0x4, 0x6}, {0x6, 0x3}, {0x0, 0x6}, {0x1, 0xa}, {0x5, 0x8}, {0x3, 0x6}, {0x0, 0x9}, {0x2, 0x1}, {0x2, 0x5}, {0x4, 0x9}, {0x4, 0x1}, {0x3, 0x3}, {0x4, 0x1}, {0x2, 0x7}, {0x1, 0x2}, {0x3, 0xa}, {0x5}, {0x7}, {0x0, 0x2}, {0x0, 0x3}, {0x5, 0x2}, {0x4, 0x7}, {0x5, 0x2}, {0x6, 0x6}, {0x3, 0x2}, {0x2, 0x5}, {0x5, 0xa}, {0x0, 0xa}, {0x1, 0x7}, {0x0, 0x3}, {0x4, 0x8}, {0x2}]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x60, 0x36, 0x16, 0x30, 0x33, 0x5, 0x36, 0x1, 0x6]}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x4, 0x9}, {0x1, 0x9}, {0x0, 0x6}, {0x1, 0x1}, {0x1, 0x2}, {0x7, 0x8}, {0x5, 0x1}, {0x6, 0x7}, {0x5, 0x7}, {0x1, 0x2}, {0x5, 0x2}, {0x1, 0x4}, {0x0, 0x6}, {0x4, 0x1}, {0x5, 0x3}, {0x4, 0x7}, {0x7}, {0x6, 0x6}, {0x4, 0x1}, {0x5, 0x7}, {0x4}, {0x4, 0xa}, {0x1, 0x2}, {0x5, 0x5}, {0x2, 0x7}, {0x6, 0x4}, {0x2, 0x4}, {0x1, 0x4}, {0x7, 0xa}, {0x4}, {0x0, 0x3}, {0x1, 0x4}, {0x4, 0xa}, {0x3, 0x7}, {0x7, 0x8}, {0x2, 0x2}, {0x3, 0x5}, {0x2, 0x6}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x9}, {0x1, 0x3}, {0x3, 0x8}, {0x6, 0x3}, {0x3, 0x8}, {0x5, 0x1}, {0x0, 0x6}, {0x2, 0x6}, {0x6, 0x7}, {0x4, 0x8}, {0x4}, {0x1, 0x5}, {0x1, 0x3}, {0x3, 0x9}, {0x3, 0x8}, {0x0, 0x3}, {0x2, 0x4}, {0x0, 0x2}, {0x7, 0x2}, {0x3, 0x1}, {0x7, 0xa}, {0x3, 0x8}, {0x4, 0x1}, {0x5, 0x6}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0xb, 0x0, 0x0, 0x6, 0x36, 0x3, 0x18, 0x4, 0x6, 0x2, 0xb, 0x60, 0x48, 0x9, 0x60, 0x6c, 0x24, 0x1, 0x9, 0xc, 0x30, 0x9, 0xc]}]}, @NL80211_BAND_2GHZ={0x9c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x48, 0x2, [{}, {0x2, 0x9}, {0x7, 0x8}, {0x7, 0x7}, {0x5}, {0x4, 0x9}, {0x7, 0x9}, {0x5, 0x4}, {0x5}, {0x0, 0x9}, {0x2, 0x5}, {0x0, 0x7}, {0x1, 0x1}, {0x3, 0x2}, {0x0, 0xa}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x6}, {0x6, 0x7}, {0x2, 0x2}, {0x7, 0x5}, {0x4}, {0x7, 0x7}, {0x1, 0xa}, {0x6, 0x9}, {0x2, 0x3}, {0x1, 0x2}, {0x1}, {0x6, 0x6}, {0x6, 0x5}, {0x0, 0x7}, {0x1, 0x5}, {0x5, 0x7}, {0x4, 0x8}, {0x5, 0x2}, {0x2, 0x2}, {0x7, 0x1}, {0x4, 0xa}, {0x6, 0x6}, {0x3, 0x7}, {0x4, 0x8}, {0x2, 0x2}, {0x4, 0x9}, {0x2, 0x7}, {0x0, 0x3}, {0x4}, {0x7, 0x1}, {0x6, 0xa}, {0x0, 0xa}, {0x7, 0x7}, {0x4, 0x6}, {0x7, 0x1}, {0x3, 0x9}, {0x2, 0x9}, {0x4, 0x7}, {0x1, 0x8}, {0x2, 0x3}, {0x7, 0x5}, {0x6}, {0x0, 0x5}, {0x4, 0xa}, {0x0, 0x7}, {0x4, 0x5}, {0x1, 0x9}, {0x5, 0x5}, {0x0, 0xa}, {0x0, 0x8}, {0x3, 0xa}]}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x7, 0x1}, {0x0, 0x1}, {0x3, 0xa}, {0x1, 0x9}, {0x0, 0xa}, {0x0, 0x6}, {0x7, 0x9}, {0x7, 0xa}, {0x5, 0x7}, {0x5, 0x1}, {0x2, 0x1}, {0x6, 0x5}, {0x4, 0x3}, {0x2, 0x3}, {0x2}, {0x2, 0x4}, {0x0, 0x6}, {0x0, 0xa}, {0x6, 0x4}, {0x4, 0x3}, {0x4, 0x7}, {0x0, 0x9}, {0x6, 0x8}, {0x2, 0x2}, {0x1, 0x2}, {0x2, 0x7}, {0x4}, {0x6, 0x5}, {0x3, 0x4}, {0x6, 0x8}, {0x1, 0x3}, {0x0, 0x5}, {0x7, 0x8}, {0x2}, {0x0, 0x3}, {0x0, 0x9}, {0x0, 0x7}, {0x7, 0x3}, {0x3, 0x8}, {0x7}, {0x0, 0x2}, {0x3, 0x7}, {0x1, 0xa}]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x2b, 0x36, 0x36, 0x16, 0x9, 0x16, 0x1b, 0x18, 0x16, 0x9, 0x48, 0xb, 0x24, 0x30, 0x6, 0x18, 0x4, 0xc, 0x36, 0x60]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x1e0, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x30, 0x48, 0x0, 0x2, 0x36, 0x24, 0x9, 0x18, 0x36, 0x9, 0xb, 0x6, 0xc, 0x4, 0x1b, 0x6, 0xc, 0x2, 0x6c, 0x30, 0x18, 0x12, 0x1b, 0x5, 0xc, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xa8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x7, 0x8}, {0x1, 0x8}, {0x0, 0x6}, {0x0, 0x6}, {0x7}, {0x5, 0x6}, {0x1, 0x5}, {0x7, 0x3}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0xa}, {0x3, 0x1}, {0x2, 0x9}, {0x7}, {0x3, 0xa}, {0x2, 0x3}, {0x7, 0xa}, {0x1, 0x5}, {0x4, 0x4}, {0x3, 0x2}, {0x6, 0x3}, {0x3, 0x4}, {0x1, 0x4}, {0x7, 0x7}, {0x5, 0x8}, {0x3, 0xa}, {0x2, 0xa}, {0x6, 0x5}, {0x1, 0x2}, {0x1}, {0x5, 0x4}, {0x3, 0x2}, {0x7, 0x9}, {0x5, 0x3}, {0x6, 0x6}, {0x7, 0x9}, {0x7, 0x4}, {0x0, 0x6}, {0x6, 0x9}, {0x4}, {0x6, 0x1}, {0x7, 0x3}, {0x5, 0x8}, {0x0, 0x7}, {0x3, 0x6}, {0x3, 0x4}, {0x7}, {0x4, 0xa}, {0x6, 0x5}, {0x0, 0x2}, {0x3, 0x7}, {0x0, 0x9}, {0x6}, {0x0, 0xa}, {0x0, 0x2}, {0x4, 0x6}, {0x2, 0x1}, {0x1, 0x5}, {0x0, 0x8}, {0x0, 0x3}, {0x4, 0x7}, {0x7, 0x4}, {0x0, 0x9}, {0x1, 0x4}, {0x1, 0x5}, {0x7, 0x1}, {0x0, 0x2}, {0x0, 0x7}, {}, {0x2, 0x2}, {0x3, 0x2}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x1, 0x4}, {0x2, 0x1}, {0x2, 0x6}, {0x6, 0xa}, {0x6, 0x7}, {0x6, 0x8}, {0x2, 0x2}, {0x7, 0x6}, {0x5, 0xa}, {0x7, 0x1}, {0x5, 0x5}, {0x1, 0x4}, {0x3, 0x3}, {0x4, 0x3}, {0x3, 0x8}, {0x0, 0x8}, {0x0, 0x9}, {0x3, 0x1}, {0x4, 0x7}, {0x4, 0x6}, {0x1, 0x5}, {0x2}, {0x1, 0x8}, {0x0, 0x9}, {0x1, 0x6}, {}, {0x5, 0x2}, {0x1, 0x8}, {0x1, 0x1}, {0x6, 0x4}, {0x2, 0x6}, {0x1, 0x4}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa9a0, 0x78d, 0x9, 0x6, 0x4, 0x70b, 0x8000, 0x100]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0xc8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x86, 0x81, 0x7, 0xa9df, 0x4, 0x400, 0x1, 0x1f]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x3, 0x2, 0x10, 0x6, 0x16, 0x2, 0x30, 0x5, 0xc, 0xb, 0xb, 0x6c, 0x16, 0x18, 0x1b, 0x1b, 0x2, 0xb, 0x30, 0x18, 0xc, 0x16, 0x9, 0x18, 0x0, 0x9, 0xc, 0x16]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x1, 0x2}, {0x0, 0xa}, {0x3, 0xa}, {0x3, 0x2}, {0x2, 0x5}, {0x0, 0x8}, {0x0, 0x9}, {0x1, 0x2}, {0x3, 0x3}, {0x6, 0x2}, {0x5, 0x5}, {0x3, 0x6}, {0x5}, {0x0, 0x7}, {0x1, 0x4}, {0x1, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x6, 0x3, 0x6, 0x100, 0xfffe, 0x1, 0x1000]}}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x0, 0x1}, {0x4, 0x1}, {0x0, 0x5}, {0x5, 0x7}, {0x1, 0x2}, {0x3, 0x1}, {0x2, 0x4}, {0x1, 0x6}, {0x1, 0xa}, {0x6, 0x3}, {0x7}, {0x5, 0x9}, {0x6, 0x3}, {0x3, 0x5}, {0x4, 0x4}, {0x1, 0x4}, {0x1, 0x9}, {0x3, 0x3}, {0x7, 0x5}, {0x2, 0x9}, {0x1, 0x7}, {0x6, 0xa}, {0x6, 0x8}, {0x2, 0x7}, {0x0, 0x9}, {0x4, 0x7}, {0x5, 0xa}, {0x6, 0x3}, {0x2, 0x2}, {0x1, 0x3}, {0x6, 0xa}, {0x6, 0x4}, {0x6, 0x3}, {0x1, 0x2}, {0x5, 0x7}, {0x0, 0x3}, {0x5, 0x1}, {0x5, 0x3}, {0x3, 0x2}, {0x7, 0x4}, {0x4, 0x3}, {0x6, 0x1}, {0x5, 0x2}, {0x1, 0x2}, {0x2, 0x9}, {0x6, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xfff, 0x7c5, 0x8, 0x20, 0xaddd, 0xcbd1, 0x401]}}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x6, 0x1}, {0x1, 0x3}, {0x4, 0x2}, {0x7, 0x4}, {0x5}, {0x5, 0x6}, {0x5, 0x3}, {0x5, 0xa}, {0x7, 0x4}, {0x3}, {0x6, 0x1}, {0x2, 0x2}, {0x3, 0x1}, {0x1, 0x9}, {0x6, 0x5}, {0x4, 0x9}, {0x1, 0x2}, {0x1, 0x7}, {0x6, 0x9}, {0x0, 0x9}]}]}, @NL80211_BAND_6GHZ={0x40, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x39, 0x2, [{0x4, 0x9}, {}, {0x5, 0x9}, {0x0, 0x5}, {0x1, 0x3}, {0x1, 0xa}, {0x2, 0x9}, {0x2, 0x6}, {0x3, 0x8}, {0x3, 0x4}, {0x4, 0x2}, {0x3, 0x7}, {0x3, 0xa}, {0x3, 0x3}, {0x2, 0x4}, {0x2, 0x8}, {0x1, 0xa}, {0x7, 0xa}, {0x7, 0x6}, {0x0, 0x5}, {0x6, 0x1}, {0x3, 0x6}, {0x5}, {0x3, 0x1}, {0x4, 0x6}, {0x1, 0xa}, {0x5, 0xa}, {0x1, 0x2}, {0x7, 0x5}, {0x5, 0x1}, {0x6, 0x5}, {0x3, 0xa}, {0x3, 0x3}, {0x0, 0x2}, {0x0, 0x7}, {0x5, 0x5}, {0x5, 0x2}, {0x0, 0x6}, {0x4, 0x6}, {0x1, 0x7}, {0x4, 0x2}, {0x5, 0x6}, {0x2, 0x1}, {0x4}, {0x3, 0x6}, {0x6}, {0x7, 0x2}, {0x2, 0xa}, {0x7}, {0x5, 0x2}, {0x5, 0x7}, {0x2, 0x4}, {0x4, 0x7}]}]}]}, @NL80211_ATTR_TX_RATES={0x518, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xec, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x46, 0x2, [{0x6, 0x3}, {0x0, 0x2}, {0x7, 0x1}, {0x1, 0x1}, {0x5, 0x3}, {0x3, 0x5}, {0x1, 0x5}, {0x4, 0x2}, {0x4, 0x6}, {0x1, 0x9}, {0x0, 0x9}, {0x1, 0xe}, {0x3, 0x5}, {0x0, 0xa}, {0x4, 0x8}, {0x0, 0x6}, {0x7, 0x7}, {0x1, 0x3}, {0x1, 0x5}, {0x7, 0x1}, {0x4, 0x8}, {0x6, 0x8}, {0x7, 0x7}, {0x7, 0x2}, {0x0, 0x3}, {0x4, 0x9}, {0x5, 0x5}, {0x7, 0xa}, {0x5, 0x7}, {0x3, 0x9}, {0x3}, {0x3, 0x3}, {0x1, 0xa}, {0x1, 0xa}, {0x6, 0x6}, {0x3, 0x5}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {0x6, 0x7}, {0x7, 0x7}, {0x0, 0x8}, {0x4, 0x9}, {0x3, 0x8}, {0x2, 0x3}, {0x5, 0x5}, {0x0, 0x5}, {0x4}, {}, {0x7, 0x2}, {0x2, 0x7}, {0x7, 0xa}, {0x5, 0x8}, {0x2}, {0x3, 0x8}, {0x4, 0x7}, {0x3, 0x9}, {0x1, 0x5}, {0x4, 0x7}, {0x0, 0x1}, {0x7, 0x4}, {0x5, 0xa}, {0x2, 0x2}, {0x7, 0x5}, {0x4, 0x6}, {0x1, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x9, 0xe097, 0x5, 0x6, 0x3, 0x4, 0x6]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0xc, 0x1, 0xc, 0xc, 0x48, 0xc, 0x12, 0x2, 0x36, 0xb, 0x48, 0x6, 0x5e, 0x1b, 0x1, 0xc, 0xc, 0x30, 0x18, 0xffef9e1056717efb, 0x6, 0x18, 0x30, 0x17, 0x12, 0x6c, 0x48, 0x1]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x9, 0x18, 0x6, 0x16, 0x9, 0x18, 0x18, 0xc, 0x24, 0x18, 0x6c, 0x0, 0xb, 0x0, 0x3, 0x30, 0x36, 0x3, 0xc, 0x9, 0x4, 0x12, 0x0, 0x30, 0x9, 0x60]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x1, 0x6c, 0x6c, 0x1, 0x13, 0x3, 0x30, 0x30, 0x36, 0x9, 0x3, 0x6c, 0xb, 0x1, 0xb, 0x18]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x60, 0x4, 0x6c, 0x4]}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x3, 0x6}, {0x4, 0x3}, {0x6, 0x9}, {0x5}, {0x5, 0x7}, {0x0, 0x1}, {0x0, 0xa}, {0x3, 0x7}, {0x4, 0x5}, {0x3, 0x7}, {0x3}, {0x7, 0x4}, {0x1, 0x8}, {0x7, 0x9}, {0x7, 0x2}, {0x0, 0xa}, {0x7, 0x7}, {0x5, 0x9}, {0x7, 0x8}, {0x2, 0x3}, {0x3, 0x4}, {0x0, 0x1}, {0x2, 0x9}, {0x4, 0x1}, {0x1, 0x7}, {0x4, 0x1}, {0x5}, {0x3, 0x7}, {0x6, 0x6}, {0x1, 0x2}, {0x0, 0x2}, {0x1, 0x2}, {0x2, 0x3}, {0x5, 0x3}, {0x5, 0x8}, {0x5, 0xa}, {}, {0x2}, {0x4}, {0x7, 0x8}, {0x3, 0x6}, {0x5, 0x3}, {0x3}]}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1e, 0x2, [{0x1, 0x3}, {0x5, 0x2}, {0x6, 0x8}, {0x0, 0x2}, {0x1, 0x3}, {0x4, 0x8}, {0x3, 0x3}, {0x7, 0x3}, {0x6, 0x6}, {0x6, 0x3}, {0x0, 0xa}, {}, {0x4, 0xa}, {0x1, 0x7}, {0x0, 0x9}, {0x0, 0x5}, {0x4, 0x9}, {0x4, 0x5}, {0x3, 0x6}, {0x2, 0x5}, {0x4, 0x5}, {0x0, 0xa}, {0x2, 0x7}, {0x1, 0xa}, {0x5, 0x3}, {0x7, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x836b, 0x0, 0x40, 0x7, 0x9, 0x5, 0x2, 0xb026]}}]}, @NL80211_BAND_6GHZ={0xc0, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x4, 0x5}, {0x0, 0x4}, {0x0, 0x4}, {0x7, 0x6}, {0x7, 0x7}, {0x4, 0x6}, {0x1, 0x5}, {0x3, 0xa}, {0x6, 0x9}, {0x6, 0x3}, {0x0, 0x8}, {0x3, 0x5}, {0x4, 0xa}, {0x3}, {0x3, 0x2}, {0x1, 0x4}, {0x3, 0xa}, {0x5, 0x2}, {0x3}, {0x0, 0x8}, {0x2, 0x8}, {0x7, 0x2}, {0x6, 0x9}, {0x0, 0x2}, {0x3, 0x4}, {0x4, 0x3}, {0x2, 0x8}, {0x7, 0x6}, {0x0, 0x9}, {0x7, 0x8}, {0x3, 0x6}, {0x5, 0x5}, {0x7, 0x1}, {0x1, 0x1}, {0x7, 0x4}, {0x3, 0x4}, {0x2, 0x7}, {0x1, 0x5}, {0x5, 0x8}, {0x3, 0x1}, {0x7, 0x3}, {0x0, 0x6}, {0x0, 0x7}, {0x2, 0x8}, {0x0, 0x9}, {0x5, 0x6}, {0x3, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x7, 0xa}, {0x0, 0x5}, {0x1, 0xa}, {0x4, 0x3}, {0x7, 0x7}, {0x6, 0x4}, {0x5, 0x9}, {0x1, 0x2}, {0x4, 0x6}, {0x6, 0x8}, {0x2, 0x9}, {0x3, 0x8}, {0x4, 0x4}, {0x2, 0x4}, {0x5, 0xa}, {0x7, 0x6}, {0x7, 0x9}, {0x1, 0x4}, {0x7, 0x3}, {0x0, 0x6}, {0x6, 0x9}, {0x7, 0x5}, {0x7, 0x9}, {0x0, 0x4}, {0x0, 0x3}, {0x2, 0x9}, {0x6, 0x9}, {0x1, 0x9}, {0x4, 0x1}, {0x2, 0x7}, {0x1, 0xa}, {0x2, 0x6}, {0x2, 0x3}, {0x0, 0x1}, {0x0, 0x4}, {0x1, 0x6}, {0x3, 0x7}, {0x6, 0x8}, {0x2}, {0x2, 0x9}, {0x7, 0xa}, {0x2, 0x9}, {0x4}, {0x4, 0xa}, {0x3}, {0x0, 0x5}]}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x1, 0x8}, {0x4}, {0x4, 0x7}, {0x7, 0x8}, {0x2, 0xa}, {0x1}, {0x2, 0x5}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x2}, {0x6}, {0x0, 0x9}, {0x5, 0x3}, {0x6, 0x5}, {0x1, 0x7}, {0x1, 0x6}, {0x6, 0x4}, {0x3, 0x2}, {0x7, 0x3}, {0x6, 0x7}, {0x2, 0x5}, {0x4, 0x6}, {0x2, 0x1}, {0x1}, {0x0, 0x5}, {0x1, 0x6}, {0x5, 0x5}, {0x5, 0x1}, {0x4, 0x8}, {0x1, 0x9}, {0x6, 0xa}, {0x4, 0x3}, {0x1, 0x3}, {0x4, 0x7}, {0x6, 0x9}, {0x1, 0xa}, {0x5}, {0x6, 0x4}, {0x5, 0x2}, {0x6, 0x4}, {0x1, 0x2}, {0x4, 0x5}, {0x0, 0x1}, {0x1, 0x3}, {0x6, 0x5}, {0x2, 0x9}, {0x7, 0x8}, {0x1, 0x2}, {0x7, 0x2}, {0x1, 0x4}, {0x1, 0xa}, {0x6, 0x2}, {0x0, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x3, 0x3}, {0x2, 0x3}, {0x7}, {0x4}, {0x5, 0x6}, {0x1, 0x6}, {0x0, 0x2}]}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x31d5, 0x6a9, 0x70, 0x101, 0x3, 0x101, 0x1]}}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x1, 0xa}, {0x4, 0x6}, {0x1, 0x3}, {0x6, 0x3}, {0x2, 0x2}, {0x3, 0x3}, {0x2, 0xa}, {0x1, 0x4}, {0x3, 0x5}, {0x1, 0x5}, {0x5}, {0x4, 0x1}, {0x0, 0x8}, {0x1, 0x6}, {0x3, 0x2}, {0x7, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x6, 0x5}, {0x2, 0x3}, {0x0, 0x5}, {0x2, 0x1}, {0x2}, {0x7, 0x2}, {0x0, 0x7}, {0x1, 0x7}, {0x3}, {0x7, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x3ff, 0x8000, 0x1, 0x4, 0x81, 0x330f, 0x453]}}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x7, 0x5}, {0x4, 0x4}, {0x2}, {0x7}, {0x3, 0x8}, {0x4, 0x2}, {0x0, 0x8}, {0x7, 0x3}, {0x1, 0x8}, {0x4, 0x8}, {0x6, 0x7}, {0x6, 0x1}, {0x6, 0x9}, {0x4, 0x1}, {0x0, 0x2}, {0x7, 0x8}, {0x2, 0x11}, {0x2, 0x5}, {0x0, 0x7}, {0x4, 0x1}]}]}, @NL80211_BAND_60GHZ={0xec, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x40, 0x1, 0x6, 0x1e83, 0x1, 0x1, 0x8]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x1, 0x9}, {0x0, 0x6}, {0x5, 0x7}, {0x2, 0xa}, {0x0, 0xa}, {0x4, 0xa}, {0x1, 0x7}, {0x3, 0x4}, {0x1, 0x6}, {0x0, 0x5}, {0x6, 0x7}, {0x4, 0x7}, {0x6, 0x1}, {0x4, 0x2}, {0x4, 0x1}, {0x3, 0x3}, {0x5}, {0x0, 0x2}, {0x4, 0x7}, {0x1, 0xa}, {0x1, 0x4}, {0x1, 0x4}, {0x7, 0x4}, {0x6, 0x9}, {0x6}, {0x0, 0x1}, {0x5, 0x4}, {0x3, 0x5}, {0x1, 0x5}, {0x4, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x1, 0x2, 0x1b, 0x1b, 0x18, 0x3, 0x2]}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x5}, {0x1, 0x5}, {0x1, 0x1}, {0x1, 0x2}, {0x4, 0xa}, {0x7, 0x1}, {0x5, 0xa}, {0x7, 0x6}, {0x2}, {0x3}, {0x2, 0x2}, {0x3, 0xa}, {0x7, 0xa}, {0x4}, {0x5, 0xa}, {0x7, 0x1}, {0x7, 0x7}, {0x7, 0x5}, {0x4, 0x1}, {0x7}, {0x6, 0x5}, {0x0, 0x2}, {0x2, 0x3}, {0x0, 0x8}, {0x5, 0x9}, {0x5, 0x8}, {0x7, 0x6}, {0x4}, {0x1, 0x1}, {0x6, 0x6}, {0x4, 0x5}, {0x7, 0x7}, {0x2, 0x1}, {0x5, 0x1}, {0x6, 0x3}, {0x1, 0x2}, {0x1, 0x8}, {0x6, 0x2}, {0x0, 0x5}, {0x4, 0x1}, {0x2}, {0x0, 0x7}, {0x3, 0x4}, {0x3, 0x8}, {0x4}, {0x3, 0x9}, {0x5, 0x2}, {0x6}, {0x5, 0x7}, {0x1, 0x7}, {0x0, 0x8}, {0x0, 0x8}, {0x7, 0xa}, {0x5, 0x2}, {0x1}, {0x5, 0xa}, {0x6, 0x6}, {0x3, 0xa}, {0x1, 0x3}, {0x5, 0x6}, {0x6, 0x8}, {}, {0x5, 0xa}, {0x7, 0x4}, {0x3, 0x4}, {0x3, 0x2}, {0x1, 0xa}, {0x3, 0x7}, {0x1, 0x3}, {0x0, 0xa}, {0x1, 0x1}, {0x0, 0x9}]}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x2}, {0x6, 0x5}, {0x2, 0xa}, {0x1, 0x3}, {0x2, 0x1}, {0x5, 0x7}, {0x0, 0x7}, {0x6, 0x2}, {}, {0x7}, {0x2, 0x9}, {0x5, 0x1}, {0x1}, {0x3}, {0x0, 0x8}, {0x0, 0xa}, {0x4, 0x3}, {0x0, 0x4}, {0x0, 0x6}, {0x1, 0x6}, {0x0, 0x8}, {0x5, 0x4}, {0x0, 0x1}, {0x2, 0x2}, {0x5, 0x4}, {0x6, 0x4}, {0x0, 0x1}, {0x7, 0x8}, {0x7, 0x8}, {0x5, 0x8}, {0x4, 0xa}, {0x1, 0x1}, {0x0, 0x5}, {0x4, 0xa}, {0x0, 0x8}, {0x5, 0x6}, {0x7, 0x7}, {0x0, 0xa}, {0x5, 0x1}, {0x5}, {}, {0x5, 0x2}, {0x6, 0x1}, {0x0, 0x4}, {0x1, 0x3}]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x18, 0xb5, 0x16, 0x48, 0x0, 0x60, 0x0, 0x5, 0x9, 0x24, 0x36, 0xc, 0xc, 0x60, 0x1, 0x5]}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1e, 0x2, [{0x6, 0x6}, {0x5, 0x9}, {0x2, 0x4}, {0x7, 0x5}, {0x5, 0x2}, {0x6, 0x3}, {0x2, 0x3}, {0x4}, {0x2, 0x7}, {0x2, 0x6}, {0x1, 0x1}, {0x0, 0x8}, {0x7, 0x1}, {0x5, 0x6}, {0x4, 0x3}, {0x3, 0x7}, {0x0, 0xa}, {0x4, 0xa}, {0x1, 0x7}, {0x7, 0x7}, {0x3, 0x4}, {0x1, 0x5}, {0x2, 0x4}, {0x2, 0x4}, {0x3, 0x4}, {0x3, 0x6}]}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x7, 0x7}, {0x0, 0x7}, {0x3, 0x4}, {0x4, 0x6}, {0x3, 0x4}, {0x1, 0x2}, {0x0, 0x8}, {0x1, 0x8}, {0x2, 0x4}, {0x2, 0x4}, {0x3}, {}, {0x0, 0x9}, {0x1, 0x9}, {0x5, 0x8}, {0x2}, {0x3}, {0x0, 0x7}, {0x2, 0x2}, {0x2, 0x6}, {0x6, 0x4}, {0x6, 0x1}, {0x3, 0x9}, {0x1, 0x6}, {}, {0x6, 0x7}]}]}, @NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x36, 0x5, 0x36, 0xc, 0x4e, 0x36, 0x0, 0x0, 0x5a]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x2, 0x8, 0x81, 0x1, 0x800, 0x800, 0xff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x4, 0x3}, {0x0, 0x7}, {0x0, 0x2}, {0x4, 0x5}, {0x4, 0xa}, {0x7, 0x9}, {0x6, 0x8}, {0x2, 0x7}, {0x3, 0x1}, {0x0, 0x4}, {0x5, 0x9}, {0x6, 0x9}, {0x7, 0x9}, {0x0, 0x7}, {0x5, 0x6}, {0x4, 0x3}, {0x2, 0x3}, {0x3, 0xa}, {0x2, 0x3}, {0x4, 0x7}, {0x4}, {0x6, 0x6}, {0x0, 0x1}, {0x0, 0xa}, {0x1, 0x3}, {0x5, 0x6}, {0x5, 0x6}, {0x0, 0x2}, {0x6, 0x7}, {0x7, 0x4}, {0x4, 0x6}, {0x4, 0xa}, {0x7, 0x4}, {0x1, 0x9}, {0x0, 0x5}, {0x2, 0x6}, {0x2, 0x6}, {0x1}, {0x7, 0x9}, {0x3, 0xa}, {0x6, 0x9}, {0x0, 0x6}, {0x2, 0xa}, {0x1, 0x9}, {0x1, 0x6}, {0x1, 0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x4}]}]}, @NL80211_BAND_5GHZ={0x9c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0x16, 0x1f, 0x6c, 0x2, 0x16, 0x6c, 0x1, 0x6, 0x24, 0x48, 0x5, 0x0, 0x60, 0x8, 0x6, 0x18, 0x1b, 0x30, 0x6c]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x400, 0x199a, 0x4, 0x2, 0x7fff, 0x7803, 0x2]}}, @NL80211_TXRATE_HT={0x43, 0x2, [{0x5, 0x2}, {0x0, 0x1}, {0x0, 0xa}, {0x3, 0x4}, {0x5, 0x2}, {0x2, 0x7}, {0x2, 0x9}, {0x5, 0x4}, {0x1, 0x2}, {0x5, 0x2}, {0x3, 0x3}, {0x0, 0x4}, {0x6, 0x8}, {}, {0x2, 0x3}, {0x5, 0x6}, {0x1, 0x1}, {0x6, 0xa}, {0x7, 0x8}, {0x4, 0x4}, {0x4, 0x4}, {0x7, 0x8}, {0x4}, {0x7, 0x3}, {0x5, 0x9}, {0x1, 0x3}, {0x3, 0x4}, {0x6, 0x7}, {0x0, 0x1}, {0x0, 0x5}, {0x6, 0xa}, {0x4, 0x8}, {0x5, 0x9}, {0x0, 0x3}, {0x3, 0x3}, {0x3, 0xa}, {0x3, 0xa}, {0x2, 0x1}, {0x0, 0x8}, {0x3, 0x8}, {0x6, 0x1}, {0x7}, {0x4, 0x1}, {0x3}, {0x3, 0x8}, {0x1, 0x3}, {0x1}, {0x4}, {0x7}, {0x3, 0x6}, {0x5, 0x5}, {0x5}, {0x7, 0x6}, {0x0, 0x6}, {0x0, 0x2}, {0x7, 0x1}, {0x7, 0x1}, {0x4, 0x1b}, {0x5, 0x3}, {0x2, 0x8}, {0x0, 0x1}, {0x4}, {0x5, 0x4}]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x36, 0x3, 0x6c, 0x5, 0x12, 0x6, 0x18, 0x12, 0x16, 0x30, 0x18, 0x7c, 0x3, 0xb, 0x30, 0x6c, 0x3, 0x2, 0x4, 0x1b, 0xc, 0x12, 0x4, 0x18, 0x28]}]}, @NL80211_BAND_2GHZ={0x8c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x628, 0x66, 0x6, 0x7f, 0x3267, 0xa6, 0x3, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x29dd, 0x1, 0x6, 0x1, 0x3, 0x200, 0x42]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x60, 0x60, 0xc, 0x1c, 0x6, 0x30, 0x3e, 0x8, 0x6c, 0x3, 0x1b, 0x1b, 0x1, 0x48, 0x1b, 0x63, 0x1b, 0x5]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x7, 0x200, 0xdf7, 0x101, 0x100, 0x20, 0x1672]}}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x3, 0x3}, {0x3, 0xa}, {0x1, 0x4}, {0x7, 0x8}, {0x0, 0x4}, {0x4, 0x4}, {0x2, 0x7}, {0x7, 0x1}, {0x0, 0x9}, {0x1}, {0x2, 0x5}, {0x2, 0x5}, {0x2, 0x2}, {0x3, 0x6}, {0x6, 0x2}, {0x7, 0x6}, {0x7, 0x7}, {0x0, 0x4}, {0x1, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8001, 0x5, 0x0, 0xa0, 0x2, 0x0, 0xea2b, 0x1]}}, @NL80211_TXRATE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x60, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x2, 0x200, 0x9, 0x40, 0x8, 0x6, 0x2]}}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x0, 0x1}, {0x1, 0x1}, {0x3, 0x7}, {0x5, 0x4}, {0x6, 0x8}, {0x2, 0x8}, {0x0, 0x1}, {0x2, 0x7}, {0x4, 0x4}, {0x1, 0x9}, {0x5, 0x7}, {0x2, 0x8}, {0x5, 0x9}, {}, {0x7, 0xa}, {0x0, 0x9}, {0x1}, {0x0, 0x6}, {0x1}, {0x6, 0x9}, {0x1, 0x2}, {0x0, 0x3}, {0x7, 0x4}, {0x5}, {0x3}, {0x4, 0x6}, {0x5, 0x4}, {0x2, 0xa}, {0x3, 0x4}, {0x6, 0x7}, {0x5}, {0x0, 0xa}, {0x0, 0x1}, {0x7, 0x1}, {0x6}, {0x0, 0x9}, {0x1, 0x4}, {0x5, 0x4}, {0x4, 0xa}, {0x3, 0xa}, {0x3, 0x6}, {0x3, 0x7}, {0x3, 0x6}, {0x3, 0x5}, {0x0, 0xa}, {0x7, 0xa}, {0x6, 0x9}, {0x7, 0xa}, {0x4, 0x6}, {0x5}, {0x0, 0x6}, {0x1, 0xa}, {0x0, 0x4}, {0x5}, {0x2, 0x4}, {0x5, 0x7}, {0x0, 0x6}, {0x6, 0x3}, {0x4, 0x3}, {0x3, 0x6}, {0x4, 0x4}, {0x7, 0x6}, {0x4, 0x2}, {0x4, 0x1}]}]}]}]}, 0xde4}, 0x1, 0x0, 0x0, 0x20000001}, 0x8000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x14) 01:21:08 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2400000010000100000000ec0000009600000900050000000000000005000080480000006fe884b7f11ac8f1810d0dc930b7fbbdfe445812bd4e3ddf303ed7320b364ab5ef9768d0c54531c0e48e8b51a2f78d54f00d9cdd3a5569eaaaf9d57fd007e7eff61a89507780518151cc0bb52f615f18e044c54fca953b368cc61d149f11066c74aac60fe6c088582777cddc52bd82c5ef927b1c475f2e339546488ff742ba361f30616ba6000013203bece0c63d63d44a2d8033a9f2319b5d7e75aed01f84fbba37b71774867fc770eb6690f7a3c3e0d63d75b35925d7980c"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:21:09 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:21:09 executing program 3: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) [ 1752.222614] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1752.235111] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 01:21:09 executing program 4: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 43) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091", 0x4e}}, 0x0) [ 1752.298032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1752.299638] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1752.300666] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1752.301379] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1752.301944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1752.311815] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1752.372501] FAULT_INJECTION: forcing a failure. [ 1752.372501] name failslab, interval 1, probability 0, space 0, times 0 [ 1752.374939] CPU: 1 PID: 9947 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 1752.376640] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1752.378430] Call Trace: [ 1752.378984] dump_stack+0x107/0x167 [ 1752.379748] should_fail.cold+0x5/0xa [ 1752.380707] ? create_object.isra.0+0x3a/0xa30 [ 1752.381783] should_failslab+0x5/0x20 [ 1752.382585] kmem_cache_alloc+0x5b/0x310 [ 1752.383431] ? mark_held_locks+0x9e/0xe0 [ 1752.384411] create_object.isra.0+0x3a/0xa30 [ 1752.385439] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1752.386513] kmem_cache_alloc_bulk+0x168/0x320 01:21:09 executing program 7: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000140)='\x00', 0x0, r0) [ 1752.387481] io_submit_sqes+0x713e/0x8780 [ 1752.388504] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1752.389623] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1752.390778] ? find_held_lock+0x2c/0x110 [ 1752.391723] ? io_submit_sqes+0x8780/0x8780 [ 1752.392677] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1752.393684] ? wait_for_completion_io+0x270/0x270 [ 1752.394772] ? rcu_read_lock_any_held+0x75/0xa0 [ 1752.395926] ? vfs_write+0x354/0xb10 [ 1752.396799] ? fput_many+0x2f/0x1a0 [ 1752.397557] ? ksys_write+0x1a9/0x260 [ 1752.398361] ? __ia32_sys_read+0xb0/0xb0 [ 1752.399280] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1752.400527] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1752.401666] do_syscall_64+0x33/0x40 [ 1752.402515] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1752.403727] RIP: 0033:0x7fe076d62b19 [ 1752.404590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1752.408739] RSP: 002b:00007fe0742d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1752.410536] RAX: ffffffffffffffda RBX: 00007fe076e75f60 RCX: 00007fe076d62b19 [ 1752.412142] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1752.413833] RBP: 00007fe0742d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1752.415599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1752.417206] R13: 00007ffebfddc57f R14: 00007fe0742d8300 R15: 0000000000022000 01:21:09 executing program 3: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:21:09 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091cd3476bae3a05bae56ab34bcbeff5ddd1d8a65bc022525b413d13bc1a620d628d0ac0cfe3ca26247450c82d3f2f6bc0c2a5c", 0x80}}, 0x14) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000140), 0x1, 0x1}, 0xa33) 01:21:09 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:21:09 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1752.537430] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1752.579864] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 01:21:09 executing program 1: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) io_uring_enter(r5, 0x27d9, 0x0, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$nfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRES32=r6]) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r4, {r4}}, './file0\x00'}) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f0000000180)=[r4, r0, r6, r0, r7], 0x5) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x14) [ 1752.660814] nfs: Unknown parameter '' [ 1752.730356] nfs: Unknown parameter '' [ 1752.737497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1752.739548] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1752.741758] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1752.769058] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1752.770977] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1752.773275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 01:21:09 executing program 3: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2000, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:21:09 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091cd3476bae3a05bae56ab34bcbeff5ddd1d8a65bc022525b413d13bc1a620d628d0ac0cfe3ca26247450c82d3f2f6bc0c2a5c", 0x80}}, 0x14) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x1, 0x1}, 0xa33) 01:21:23 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2400000010000100000000ec0000009600000900050000000000000005000080480000006fe884b7f11ac8f1810d0dc930b7fbbdfe445812bd4e3ddf303ed7320b364ab5ef9768d0c54531c0e48e8b51a2f78d54f00d9cdd3a5569eaaaf9d57fd007e7eff61a89507780518151cc0bb52f615f18e044c54fca953b368cc61d149f11066c74aac60fe6c088582777cddc52bd82c5ef927b1c475f2e339546488ff742ba361f30616ba6000013203bece0c63d63d44a2d8033a9f2319b5d7e75aed01f84fbba37b71774867fc770eb6690f7a3c3e0d63d75b35925d7980ce0513e1600a3b9b86344041999a73312ac34f870e770a7124542c63a0febe8281dfa46ca86"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:21:23 executing program 4: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 44) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091", 0x4e}}, 0x0) 01:21:23 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:21:23 executing program 1: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x2010, r0, 0x0) syz_io_uring_setup(0x36fe, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000140)=0x0) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) io_uring_enter(0xffffffffffffffff, 0x6ad6, 0x7498, 0x3, &(0x7f0000000200)={[0x2]}, 0x8) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) r9 = syz_open_dev$tty20(0xc, 0x4, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) syz_mount_image$nfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRES32]) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000240)={0x0, @adiantum, 0x0, @desc4}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r11}}, 0x5) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x2, 0x0, 0x0, 0x7, &(0x7f0000000180)={r7, r8+60000000}, 0x1, 0x1, 0x0, {0x0, r11}}, 0x5) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000280)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x5, 0x0, r10, 0x0, 0x0, 0x0, 0x40010140, 0x1, {0x1}}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x14) 01:21:23 executing program 7: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}, 0x8001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r9, 0x0}, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x0, {0x4000}}, 0xd35) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r8, 0x0}, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r7, &(0x7f0000000140)=@IORING_OP_POLL_REMOVE={0x7, 0x4, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x0, {0x0, r10}}, 0xffffffff) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) r11 = syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) io_uring_enter(r11, 0x27d9, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x17a5, &(0x7f0000000180)={0x0, 0x66e1, 0x0, 0x2, 0x80, 0x0, r11}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 01:21:23 executing program 3: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x4000, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:21:23 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091cd3476bae3a05bae56ab34bcbeff5ddd1d8a65bc022525b413d13bc1a620d628d0ac0cfe3ca26247450c82d3f2f6bc0c2a5c", 0x80}}, 0x14) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x1, 0x1}, 0xa33) 01:21:23 executing program 5: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x144013, r0, 0x10000000) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r7}}, 0x5) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x3, 0x0, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r7}}, 0xf5) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1766.428433] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1766.436643] FAULT_INJECTION: forcing a failure. [ 1766.436643] name failslab, interval 1, probability 0, space 0, times 0 [ 1766.439470] CPU: 0 PID: 9988 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 1766.440930] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1766.442684] Call Trace: [ 1766.443248] dump_stack+0x107/0x167 [ 1766.444026] should_fail.cold+0x5/0xa [ 1766.444852] ? create_object.isra.0+0x3a/0xa30 [ 1766.445851] should_failslab+0x5/0x20 [ 1766.446676] kmem_cache_alloc+0x5b/0x310 [ 1766.447568] ? mark_held_locks+0x9e/0xe0 [ 1766.448462] create_object.isra.0+0x3a/0xa30 01:21:23 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091cd3476bae3a05bae56ab34bcbeff5ddd1d8a65bc022525b413d13bc1a620d628d0ac0cfe3ca26247450c82d3f2f6bc0c2a5c", 0x80}}, 0x14) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x1, 0x1}, 0xa33) [ 1766.449409] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1766.450713] kmem_cache_alloc_bulk+0x168/0x320 [ 1766.451716] io_submit_sqes+0x713e/0x8780 [ 1766.452669] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1766.453752] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1766.454806] ? find_held_lock+0x2c/0x110 [ 1766.455708] ? io_submit_sqes+0x8780/0x8780 [ 1766.456664] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1766.457713] ? wait_for_completion_io+0x270/0x270 [ 1766.458763] ? rcu_read_lock_any_held+0x75/0xa0 [ 1766.459766] ? vfs_write+0x354/0xb10 [ 1766.460583] ? fput_many+0x2f/0x1a0 [ 1766.461370] ? ksys_write+0x1a9/0x260 [ 1766.462193] ? __ia32_sys_read+0xb0/0xb0 [ 1766.463077] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1766.464226] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1766.465366] do_syscall_64+0x33/0x40 [ 1766.466185] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1766.467310] RIP: 0033:0x7fe076d62b19 [ 1766.468116] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1766.472133] RSP: 002b:00007fe0742d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1766.473792] RAX: ffffffffffffffda RBX: 00007fe076e75f60 RCX: 00007fe076d62b19 [ 1766.475337] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1766.476889] RBP: 00007fe0742d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1766.478439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1766.479992] R13: 00007ffebfddc57f R14: 00007fe0742d8300 R15: 0000000000022000 [ 1766.498329] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 01:21:23 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091cd3476bae3a05bae56ab34bcbeff5ddd1d8a65bc022525b413d13bc1a620d628d0ac0cfe3ca26247450c82d3f2f6bc0c2a5c", 0x80}}, 0x14) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x9, 0x0, 0x1, 0x1}, 0xa33) [ 1766.513338] nfs: Unknown parameter 'ÿÿÿÿ' 01:21:23 executing program 4: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 45) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091", 0x4e}}, 0x0) [ 1766.551781] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1766.553410] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 01:21:23 executing program 5: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$FIONREAD(r3, 0x4b52, &(0x7f0000000000)) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1766.555365] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1766.559051] nfs: Unknown parameter 'ÿÿÿÿ' [ 1766.580746] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1766.581797] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1766.582873] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1766.621470] FAULT_INJECTION: forcing a failure. [ 1766.621470] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1766.623061] CPU: 1 PID: 10014 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 1766.623933] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1766.624977] Call Trace: [ 1766.625314] dump_stack+0x107/0x167 [ 1766.625774] should_fail.cold+0x5/0xa [ 1766.626258] __alloc_pages_nodemask+0x182/0x600 [ 1766.626861] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 1766.627624] alloc_pages_current+0x187/0x280 [ 1766.628177] allocate_slab+0x26f/0x380 [ 1766.628678] ___slab_alloc+0x470/0x700 [ 1766.629166] ? io_submit_sqes+0x713e/0x8780 [ 1766.629713] ? kmem_cache_alloc_bulk+0x1ec/0x320 [ 1766.630301] kmem_cache_alloc_bulk+0x1ec/0x320 [ 1766.630875] io_submit_sqes+0x713e/0x8780 [ 1766.631415] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1766.632035] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1766.632647] ? find_held_lock+0x2c/0x110 [ 1766.633157] ? io_submit_sqes+0x8780/0x8780 [ 1766.633700] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1766.634302] ? wait_for_completion_io+0x270/0x270 [ 1766.634903] ? rcu_read_lock_any_held+0x75/0xa0 [ 1766.635477] ? vfs_write+0x354/0xb10 [ 1766.635942] ? fput_many+0x2f/0x1a0 [ 1766.636410] ? ksys_write+0x1a9/0x260 [ 1766.636881] ? __ia32_sys_read+0xb0/0xb0 [ 1766.637392] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1766.638045] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1766.638689] do_syscall_64+0x33/0x40 [ 1766.639157] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1766.639791] RIP: 0033:0x7fe076d62b19 [ 1766.640252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1766.642534] RSP: 002b:00007fe0742d8188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1766.643478] RAX: ffffffffffffffda RBX: 00007fe076e75f60 RCX: 00007fe076d62b19 [ 1766.644362] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1766.645239] RBP: 00007fe0742d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1766.646112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1766.646988] R13: 00007ffebfddc57f R14: 00007fe0742d8300 R15: 0000000000022000 01:21:40 executing program 4: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 46) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091", 0x4e}}, 0x0) 01:21:40 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:21:40 executing program 5: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = fork() fcntl$setown(r5, 0x8, r6) ptrace$getsig(0x4202, r6, 0x4, &(0x7f0000000240)) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x1, 0x1, 0x7, 0x6, 0x0, 0x7565, 0x108, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000140), 0x5}, 0x40, 0xfffffffffffffff9, 0x6, 0x0, 0xd47, 0x6, 0xffa8, 0x0, 0x81, 0x0, 0x259d}, r6, 0x10, r4, 0x8) syz_io_uring_submit(r3, r2, &(0x7f0000000340)=@IORING_OP_POLL_ADD={0x6, 0x1, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, {0x22}}, 0x5) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000200), 0x7, 0x1a3040) 01:21:40 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:21:40 executing program 3: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x200000, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:21:40 executing program 1: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0)={0x0, 0x8}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x14) 01:21:40 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091cd3476bae3a05bae56ab34bcbeff5ddd1d8a65bc022525b413d13bc1a620d628d0ac0cfe3ca26247450c82d3f2f6bc0c2a5c", 0x80}}, 0x14) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x9, 0x0, 0x1, 0x1}, 0xa33) 01:21:40 executing program 7: r0 = syz_io_uring_setup(0x3a24, &(0x7f00000002c0)={0x0, 0x9dd0}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) r3 = syz_io_uring_setup(0x4e3b, &(0x7f0000000180)={0x0, 0x10d5, 0x20, 0x2, 0x367, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000200)) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x200000b, 0x4000010, r0, 0x8000000) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000004, 0x810, r3, 0x10000000) syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0xa, 0x4, 0x0, 0xff}, 0x5) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) [ 1784.100623] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1784.121269] FAULT_INJECTION: forcing a failure. [ 1784.121269] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1784.123966] CPU: 1 PID: 10025 Comm: syz-executor.4 Not tainted 5.10.260 #1 [ 1784.125444] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1784.127214] Call Trace: [ 1784.127779] dump_stack+0x107/0x167 [ 1784.128621] should_fail.cold+0x5/0xa [ 1784.129447] _copy_to_user+0x2e/0x180 [ 1784.130263] simple_read_from_buffer+0xcc/0x160 [ 1784.131262] proc_fail_nth_read+0x198/0x230 [ 1784.132187] ? proc_sessionid_read+0x230/0x230 [ 1784.133174] ? security_file_permission+0xb1/0xe0 [ 1784.134215] ? proc_sessionid_read+0x230/0x230 [ 1784.135183] vfs_read+0x228/0x620 [ 1784.135924] ksys_read+0x12d/0x260 [ 1784.136682] ? vfs_write+0xb10/0xb10 [ 1784.137473] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1784.138576] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1784.139668] do_syscall_64+0x33/0x40 [ 1784.140469] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1784.141555] RIP: 0033:0x7fe076d1569c [ 1784.142342] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 1784.146289] RSP: 002b:00007fe0742d8170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1784.147896] RAX: ffffffffffffffda RBX: 000000000000030e RCX: 00007fe076d1569c [ 1784.149412] RDX: 000000000000000f RSI: 00007fe0742d81e0 RDI: 0000000000000005 [ 1784.150906] RBP: 00007fe0742d81d0 R08: 0000000000000000 R09: 0000000000000000 [ 1784.152410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1784.153934] R13: 00007ffebfddc57f R14: 00007fe0742d8300 R15: 0000000000022000 [ 1784.175993] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1784.209908] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1784.211764] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1784.213979] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1784.228112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1784.229688] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1784.231825] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 01:21:41 executing program 1: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x12, r0, 0x8000000) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r7}}, 0x5) syz_io_uring_submit(r4, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r7}}, 0x7ff) mount(&(0x7f0000000140)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='aio\x00', 0x2300002, &(0x7f0000000200)='\x00') io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x14) 01:21:41 executing program 7: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x3755, &(0x7f0000000140)={0x0, 0xcf6a, 0x4, 0x2, 0x243}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:21:41 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091cd3476bae3a05bae56ab34bcbeff5ddd1d8a65bc022525b413d13bc1a620d628d0ac0cfe3ca26247450c82d3f2f6bc0c2a5c", 0x80}}, 0x14) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x9, 0x0, 0x1, 0x1}, 0xa33) 01:21:57 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:21:57 executing program 5: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x4000010, r0, 0x8000000) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x110, 0xffffffffffffffff, 0x10000000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)="6c7ef330b327ac9e57e2661908724be0152575d244eba83a71dcbf91e9f7079992d7ae2aaf27aeb26e67f1e162937245603809e98ccf854c47a363b29b626294c3731589a86fe45e53e3211682d9ad726299c4131c9357758df7394d1fb11c5678f9c7e62dfc55e4502576799b44678505da3ae1ee3eb79631cba69a4d11ea7bc6fcb46b64dd2de6d75025473240385d6ee0baea119c0f4501e26f8459ac4cd08e4b5d5a49c3e3ae8172848c262a1c0e0d885f5f0f8c7845afb20e056fa8a04df75b44b16e9f7b96ef509e4dd5484545048a3af21467052b00d2a9f7904010ebb53377141f0e32ff278573c9043bacf802c0faf1", 0xf4, 0x61, 0x1, {0x0, r5}}, 0x80000000) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$nfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRES32=r7]) dup(r7) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 01:21:57 executing program 1: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0)={0x0, 0x0, 0x8, 0x3, 0x400}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) r3 = syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) io_uring_enter(r3, 0x27d9, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$nfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRES32=r4]) io_uring_register$IORING_REGISTER_FILES_UPDATE(r3, 0x6, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000040)=[r4]}, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x14) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) stat(&(0x7f0000001cc0)='.\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r7, 0x0) fchown(r6, r7, 0xffffffffffffffff) 01:21:57 executing program 3: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x400000, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:21:57 executing program 4: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091", 0x4e}}, 0x0) 01:21:57 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091cd3476bae3a05bae56ab34bcbeff5ddd1d8a65bc022525b413d13bc1a620d628d0ac0cfe3ca26247450c82d3f2f6bc0c2a5c", 0x80}}, 0x14) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x9, &(0x7f0000000140)}, 0xa33) 01:21:57 executing program 7: r0 = syz_io_uring_setup(0x5040, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x0, 0x344}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000080)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:21:57 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1800.618522] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 01:21:57 executing program 1: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r0, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000000, 0x100010, r5, 0x47c6c000) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$nfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRES32=r6]) r7 = io_uring_setup(0x204e, &(0x7f0000000180)={0x0, 0x102a, 0x4, 0x2, 0x1dd}) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r9 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x50, r7, 0x10000000) syz_io_uring_submit(r3, r9, &(0x7f0000000240)=@IORING_OP_FILES_UPDATE={0x14, 0x3, 0x0, 0x0, 0x6, &(0x7f0000000200)=[r6, r4, r7], 0x3, 0x0, 0x1, {0x0, r8}}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x14) [ 1800.671372] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 01:21:57 executing program 7: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) io_uring_enter(r3, 0x27d9, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000001, 0x10010, r3, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) [ 1800.701055] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1800.702074] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1800.703812] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1800.746510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1800.748154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1800.749809] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1800.774671] nfs: Unknown parameter '' 01:21:57 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1800.794052] nfs: Unknown parameter '' [ 1800.810418] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 01:21:57 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091cd3476bae3a05bae56ab34bcbeff5ddd1d8a65bc022525b413d13bc1a620d628d0ac0cfe3ca26247450c82d3f2f6bc0c2a5c", 0x80}}, 0x14) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x9, &(0x7f0000000140)}, 0xa33) 01:21:57 executing program 3: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x20000000, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:21:57 executing program 4: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091", 0x4e}}, 0x0) 01:21:57 executing program 5: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000010000438491e97319580018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="ff010000000000002e2f66696c653000"]) io_uring_enter(r3, 0x5bb0, 0xf569, 0x1, &(0x7f0000000240)={[0xac]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file1\x00'}) io_uring_enter(r4, 0x5b11, 0xd2b5, 0x0, &(0x7f0000000400)={[0x1b8e]}, 0x8) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x5, 0x7ff}, 0x10800, 0x0, 0x0, 0x0, 0x10000, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x8, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x698a, 0x2578, 0x0, &(0x7f0000000140)={[0x3]}, 0x8) semtimedop(0x0, &(0x7f0000000180)=[{0x0, 0x2, 0x1000}], 0x1, &(0x7f00000001c0)) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$binfmt_elf64(r6, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x278) setxattr$security_capability(&(0x7f0000000480)='./file1\x00', &(0x7f00000004c0), &(0x7f0000000500)=@v1={0x1000000, [{0x0, 0xfffffffc}]}, 0xc, 0x0) sendfile(r6, r7, 0x0, 0x100000001) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) mount$9p_fd(0x0, &(0x7f0000000540)='./file1\x00', &(0x7f0000000580), 0x80010, &(0x7f00000005c0)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@loose}, {@msize={'msize', 0x3d, 0xcc}}, {@version_9p2000}, {@version_9p2000}], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@uid_lt={'uid<', 0xffffffffffffffff}}, {@dont_appraise}]}}) epoll_pwait(r6, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0xfffffffc, &(0x7f0000000200)={[0x33f]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1800.847120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1800.849212] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1800.851391] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 01:21:57 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:21:57 executing program 1: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x41) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x10, r0, 0x10000000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x989680}, 0x1, 0x0, 0x0, {0x0, r5}}, 0x8) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x14) 01:21:57 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1800.994462] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1801.072026] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1801.116719] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1801.118681] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1801.121258] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1801.146929] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1801.150241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1801.153545] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 01:22:13 executing program 1: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x14001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x14) 01:22:13 executing program 5: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 01:22:13 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:22:13 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091cd3476bae3a05bae56ab34bcbeff5ddd1d8a65bc022525b413d13bc1a620d628d0ac0cfe3ca26247450c82d3f2f6bc0c2a5c", 0x80}}, 0x14) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x9, &(0x7f0000000140)}, 0xa33) 01:22:13 executing program 4: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x2000, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091", 0x4e}}, 0x0) 01:22:13 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:22:13 executing program 3: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x2000, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:22:13 executing program 7: r0 = syz_io_uring_setup(0x1c29, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = signalfd(r0, &(0x7f0000000040)={[0xf55]}, 0x8) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xb, r4, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r7, 0x0}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) dup2(r8, r7) sendmsg$nl_generic(r8, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x1cc, 0x2d, 0x0, 0x70bd26, 0x25dfdbfb, {0x7}, [@generic="a82ab9f9fa6c6d5f9e0b207f84f52b76dfd93bc2111e4f04fc046474ab4769af3ccc2c97a982c0aa9c611e30c561322cbf43bfa36ac11727e9a53189b2d83ee38e57716c4f33b7", @typed={0x5, 0x28, 0x0, 0x0, @str='\x00'}, @nested={0x84, 0x95, 0x0, 0x1, [@generic="83f79d08fe6d6c2f6fa15781206d773179fdda5815d3bd5a5b0c16ccbb27a7eafa610b3352bf98090c72024e39b4bfc4d9dd0313fe9ce0e290f8c7b8b1629a67a009f4c010e61fe38a6d978538aa8641e33faed32ca79b3686304d5336c94078161b8bf9b34f4a3b8d5c384f5ca712a41cce4410c32e1754e3402402ed4f9084"]}, @nested={0xda, 0x53, 0x0, 0x1, [@typed={0xe, 0x35, 0x0, 0x0, @binary="4a0a3ffcc348cfaa444a"}, @typed={0x4, 0x31}, @typed={0xc, 0x63, 0x0, 0x0, @u64=0x9}, @generic="0826b9f6078d5d4f22566c8635bc684aeb55a0060dc1a81c48d524742f0b02dbe8a09c", @generic="4d4669b4c69724e0899da3368eb72dcc0e955be28a4df1a032315b3422ae4c1d2482e8dd168b0b522c7152dd50dd9e6fe8e08c39b39d0ee3ab2d8c8d052f7f018066539d33e2d0df736ecccfe44f389ea53d5d789b7283bcf0d6d54617fd6303836918aeb7d5a9a705b7ab92c85744c7cf829b91c126fcee05ebc5aacd623f0dadab5c", @typed={0x8, 0x30, 0x0, 0x0, @uid}, @typed={0x8, 0x87, 0x0, 0x0, @ipv4=@empty}]}, @typed={0x6, 0x1, 0x0, 0x0, @str='%\x00'}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x20008801}, 0x40) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) [ 1816.402344] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 01:22:13 executing program 3: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x4000, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) [ 1816.432415] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 01:22:13 executing program 1: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3, 0x5512d3c0ba1209f4, r0, 0x8000000) r8 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r2, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0xa}, r8, 0x1, 0x0, 0x0, {0x0, r9}}, 0x20) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x14) [ 1816.479408] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1816.480983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1816.483720] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1816.554227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1816.555295] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1816.556383] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 01:22:28 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2400000010000100000000ec0000009600000900050000000000000005000080480000006fe884b7f11ac8f1810d0dc930b7fbbdfe445812bd4e3ddf303ed7320b364ab5ef9768d0c54531c0e48e8b51a2f78d54f00d9cdd3a5569eaaaf9d57fd007e7eff61a89507780518151cc0bb52f615f18e044c54fca953b368cc61d149f11066c74aac60fe6c088582777cddc52bd82c5ef927b1c475f2e339546488ff742ba361f30616ba6000013203bece0c63d63d44a2d8033a9f2319b5d7e75aed01f84fbba37b71774867fc770eb6690f7a3c3e0d63d75b35925d7980ce0513e1600a3b9b86344041999a73312ac34f870e770a7124542c63a0febe8281dfa46ca86343801872702c3c16a7816d215b6c8b12d910177eed40ffd341132"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:22:28 executing program 7: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x4809, &(0x7f0000000140)={0x0, 0x55cf, 0x10, 0x1, 0x2b1, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000200)) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_setup(0x65b, &(0x7f0000000240)={0x0, 0xdef3, 0x10, 0x1, 0x15e}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000340), &(0x7f0000000380)) io_uring_enter(r4, 0x4730, 0x6476, 0x1, &(0x7f00000003c0)={[0x5]}, 0x8) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) r5 = syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) io_uring_enter(r5, 0x27d9, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r5, 0x1, 0x0, 0x0) 01:22:28 executing program 3: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x200000, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:22:28 executing program 5: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) r3 = syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) r7 = syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r10 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r10, 0x0}, 0x0) syz_io_uring_submit(r4, r9, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x1}}, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r11 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r12 = socket$inet(0x2, 0x1, 0x6) sendfile(r3, r12, &(0x7f0000000340)=0x3ff, 0x4) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x106d, &(0x7f0000000180)={0x0, 0x2ec9, 0x20, 0x3, 0x3dd, 0x0, r7}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)=0x0) syz_io_uring_submit(r8, r13, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x542) syz_io_uring_submit(r11, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 01:22:28 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091cd3476bae3a05bae56ab34bcbeff5ddd1d8a65bc022525b413d13bc1a620d628d0ac0cfe3ca26247450c82d3f2f6bc0c2a5c", 0x80}}, 0x14) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x9, &(0x7f0000000140), 0x1, 0x1}, 0x0) 01:22:28 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:22:28 executing program 4: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x4000, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091", 0x4e}}, 0x0) 01:22:28 executing program 1: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f00000001c0)={'veth0_macvtap\x00', {0x2, 0x0, @dev}}) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0xb1, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x8010, r0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$nfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRES32=r4]) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f0000000140), &(0x7f0000000180)=0x40) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x14) [ 1831.339079] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1831.384453] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1831.427886] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1831.429740] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1831.433379] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 01:22:28 executing program 1: ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) r1 = syz_io_uring_setup(0x1c2b, &(0x7f00000002c0)={0x0, 0xd755, 0x0, 0x3, 0xec, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000180)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}}, 0x86a) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x14) 01:22:28 executing program 3: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x400000, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:22:28 executing program 5: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r5, 0x0}, 0x0) syz_io_uring_setup(0x7696, &(0x7f0000000140)={0x0, 0x9b03, 0x4, 0x2, 0x12}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r7 = socket$netlink(0x10, 0x3, 0x4) syz_io_uring_submit(r3, r6, &(0x7f0000000240)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x5, 0x0, @fd=r7, 0x48823a1c, 0x0, 0xad}, 0xec5) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x200, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r8, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000002, 0x100010, 0xffffffffffffffff, 0x8000000) 01:22:28 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091cd3476bae3a05bae56ab34bcbeff5ddd1d8a65bc022525b413d13bc1a620d628d0ac0cfe3ca26247450c82d3f2f6bc0c2a5c", 0x80}}, 0x14) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x9, &(0x7f0000000140), 0x1, 0x1}, 0x0) [ 1831.506524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1831.508540] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1831.510391] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 01:22:28 executing program 4: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x200000, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091", 0x4e}}, 0x0) 01:22:28 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:22:28 executing program 7: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r11 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r11, 0x0}, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f0000000340), &(0x7f0000000240)='./file0\x00', 0x7ff, 0x400}, 0xff) r12 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r12, 0x0}, 0x0) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r3}}, 0x8009) ioctl$BTRFS_IOC_WAIT_SYNC(r6, 0x40089416, &(0x7f0000000200)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xc000}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1014}, 0x1, 0x0, 0x0, 0x40000000}, 0x40) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:22:28 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2400000010000100000000ec0000009600000900050000000000000005000080480000006fe884b7f11ac8f1810d0dc930b7fbbdfe445812bd4e3ddf303ed7320b364ab5ef9768d0c54531c0e48e8b51a2f78d54f00d9cdd3a5569eaaaf9d57fd007e7eff61a89507780518151cc0bb52f615f18e044c54fca953b368cc61d149f11066c74aac60fe6c088582777cddc52bd82c5ef927b1c475f2e339546488ff742ba361f30616ba6000013203bece0c63d63d44a2d8033a9f2319b5d7e75aed01f84fbba37b71774867fc770eb6690f7a3c3e0d63d75b35925d7980ce0513e1600a3b9b86344041999a73312ac34f870e770a7124542c63a0febe8281dfa46ca86343801872702c3c16a7816d215b6c8b12d910177eed40ffd341132"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:22:28 executing program 1: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x400) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) io_uring_enter(r4, 0x27d9, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x14) [ 1831.668523] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 01:22:28 executing program 3: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x20000000, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:22:28 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091cd3476bae3a05bae56ab34bcbeff5ddd1d8a65bc022525b413d13bc1a620d628d0ac0cfe3ca26247450c82d3f2f6bc0c2a5c", 0x80}}, 0x14) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x9, &(0x7f0000000140), 0x1, 0x1}, 0x0) 01:22:28 executing program 5: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5972ea59, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x10080, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1831.741665] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1831.783885] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1831.785597] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1831.787283] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1831.829079] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1831.830697] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1831.834474] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 01:22:28 executing program 4: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x400000, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091", 0x4e}}, 0x0) 01:22:44 executing program 4: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x20000000, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091", 0x4e}}, 0x0) 01:22:44 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2400000010000100000000ec0000009600000900050000000000000005000080480000006fe884b7f11ac8f1810d0dc930b7fbbdfe445812bd4e3ddf303ed7320b364ab5ef9768d0c54531c0e48e8b51a2f78d54f00d9cdd3a5569eaaaf9d57fd007e7eff61a89507780518151cc0bb52f615f18e044c54fca953b368cc61d149f11066c74aac60fe6c088582777cddc52bd82c5ef927b1c475f2e339546488ff742ba361f30616ba6000013203bece0c63d63d44a2d8033a9f2319b5d7e75aed01f84fbba37b71774867fc770eb6690f7a3c3e0d63d75b35925d7980ce0513e1600a3b9b86344041999a73312ac34f870e770a7124542c63a0febe8281dfa46ca86343801872702c3c16a7816d215b6c8b12d910177eed40ffd341132a1e8e19120405d"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:22:44 executing program 5: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = fork() fcntl$setown(r5, 0x8, r6) ptrace$getsig(0x4202, r6, 0x4, &(0x7f0000000240)) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x8, 0x81, 0x3, 0x0, 0x0, 0x5, 0x50c, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x452, 0x0, @perf_bp={&(0x7f0000000140)}, 0x800, 0x1, 0x9, 0x7, 0x991, 0x3f, 0x0, 0x0, 0x4, 0x0, 0x10000}, r6, 0xf, r4, 0x2) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1847.674345] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 01:22:44 executing program 7: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00100000000000004e61522661792285"]) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000000, 0x20012, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$nfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRES32=r4]) ioctl$BTRFS_IOC_FS_INFO(r4, 0x8400941f, &(0x7f0000000480)) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x9, 0x0, 0x48ea, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x6, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x1, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x1, 0x0, r3, 0x80, &(0x7f0000000180)=@llc={0x1a, 0x30d, 0x1, 0x1, 0x1, 0x7f, @multicast}}, 0x4) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:22:44 executing program 1: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) lseek(r0, 0x80, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x14) 01:22:44 executing program 3: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x20000000000000, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:22:44 executing program 2: r0 = syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) futex(&(0x7f0000001a00), 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x27d9, 0x0, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x39a3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1000000, 0xffffffff, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) futex(&(0x7f00000003c0)=0x1, 0x1, 0x2, &(0x7f0000000400)={0x77359400}, &(0x7f0000000480), 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x278) syz_io_uring_setup(0xc5e, &(0x7f0000000240)={0x0, 0x6a19, 0x4, 0x3, 0x284, 0x0, r6}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000340), &(0x7f0000000380)) sendfile(r5, r6, 0x0, 0x100000001) r7 = fork() fcntl$setown(0xffffffffffffffff, 0x8, r7) ptrace$getsig(0x4202, r7, 0x4, &(0x7f0000000240)) syz_open_procfs(r7, &(0x7f00000004c0)='coredump_filter\x00') accept$unix(r5, &(0x7f0000000180), &(0x7f0000000200)=0x6e) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 01:22:44 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2400000010000100000000ec0000009600000900050000000000000005000080480000006fe884b7f11ac8f1810d0dc930b7fbbdfe445812bd4e3ddf303ed7320b364ab5ef9768d0c54531c0e48e8b51a2f78d54f00d9cdd3a5569eaaaf9d57fd007e7eff61a89507780518151cc0bb52f615f18e044c54fca953b368cc61d149f11066c74aac60fe6c088582777cddc52bd82c5ef927b1c475f2e339546488ff742ba361f30616ba6000013203bece0c63d63d44a2d8033a9f2319b5d7e75aed01f84fbba37b71774867fc770eb6690f7a3c3e0d63d75b35925d7980ce0513e1600a3b9b86344041999a73312ac34f870e770a7124542c63a0febe8281dfa46ca86343801872702c3c16a7816d215b6c8b12d910177eed40ffd341132"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1847.714557] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 01:22:44 executing program 4: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x2000, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091", 0x4e}}, 0x0) [ 1847.747979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1847.749598] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1847.751576] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1847.778147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1847.779703] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1847.781736] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 01:22:44 executing program 7: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_OPENAT={0x12, 0x71bf1f312a135dac, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000140)='./file0\x00', 0x15a, 0x101082, 0x23456, {0x0, r3}}, 0x7) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) r6 = openat$incfs(0xffffffffffffffff, &(0x7f00000001c0)='.log\x00', 0x80000, 0x100) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000200)={0x40000004}) 01:22:44 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2400000010000100000000ec0000009600000900050000000000000005000080480000006fe884b7f11ac8f1810d0dc930b7fbbdfe445812bd4e3ddf303ed7320b364ab5ef9768d0c54531c0e48e8b51a2f78d54f00d9cdd3a5569eaaaf9d57fd007e7eff61a89507780518151cc0bb52f615f18e044c54fca953b368cc61d149f11066c74aac60fe6c088582777cddc52bd82c5ef927b1c475f2e339546488ff742ba361f30616ba6000013203bece0c63d63d44a2d8033a9f2319b5d7e75aed01f84fbba37b71774867fc770eb6690f7a3c3e0d63d75b35925d7980ce0513e1600a3b9b86344041999a73312ac34f870e770a7124542c63a0febe8281dfa46ca86343801872702c3c16a7816d215b6c8b12d910177eed40ffd341132a1e8e19120405d"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:22:44 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:22:44 executing program 1: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index, 0x3, 0x0, 0x100, 0x4, 0x1}, 0xfffffff7) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x20000, 0x20) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) r7 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000180)={0x1f, 0x0, @none}, &(0x7f00000001c0)=0xe, 0x800) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000001840)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, r7, 0x0, &(0x7f0000001800)={&(0x7f0000000200)=@x25={0x9, @remote}, 0x80, &(0x7f0000001700)=[{&(0x7f0000000280)=""/55, 0x37}, {&(0x7f0000000340)=""/25, 0x19}, {&(0x7f0000000380)=""/91, 0x5b}, {&(0x7f0000000400)=""/17, 0x11}, {&(0x7f0000000480)=""/243, 0xf3}, {&(0x7f0000000580)=""/79, 0x4f}, {&(0x7f0000000600)}, {&(0x7f0000000640)=""/150, 0x96}, {&(0x7f0000000700)=""/4096, 0x1000}], 0x9, &(0x7f00000017c0)=""/27, 0x1b}, 0x0, 0x32042, 0x0, {0x2, r8}}, 0x74) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x14) 01:22:44 executing program 3: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x40000000000000, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) [ 1847.900634] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 01:22:44 executing program 5: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2002, 0xfffffffc}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0xedd) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1847.965698] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 01:22:44 executing program 7: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r5, 0x0}, 0x0) syz_io_uring_setup(0x3f35, &(0x7f0000000340)={0x0, 0x1c3, 0x10, 0x0, 0x1cf}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000003c0), &(0x7f0000000400)=0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r6, &(0x7f0000000500)=@IORING_OP_OPENAT2={0x1c, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000480)={0x8080, 0x82, 0x2}, &(0x7f00000004c0)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r7}}, 0xff4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000240)='./file0\x00', 0x10, 0x0, 0x1}, 0x69f651c5) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r8, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) [ 1847.979952] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1847.981558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1847.983020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1847.984557] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1847.986341] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1847.990239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 01:23:00 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2400000010000100000000ec0000009600000900050000000000000005000080480000006fe884b7f11ac8f1810d0dc930b7fbbdfe445812bd4e3ddf303ed7320b364ab5ef9768d0c54531c0e48e8b51a2f78d54f00d9cdd3a5569eaaaf9d57fd007e7eff61a89507780518151cc0bb52f615f18e044c54fca953b368cc61d149f11066c74aac60fe6c088582777cddc52bd82c5ef927b1c475f2e339546488ff742ba361f30616ba6000013203bece0c63d63d44a2d8033a9f2319b5d7e75aed01f84fbba37b71774867fc770eb6690f7a3c3e0d63d75b35925d7980ce0513e1600a3b9b86344041999a73312ac34f870e770a7124542c63a0febe8281dfa46ca86343801872702c3c16a7816d215b6c8b12d910177eed40ffd341132a1e8e19120405d"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:23:00 executing program 4: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x4000, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091", 0x4e}}, 0x0) 01:23:00 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:23:00 executing program 3: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x2000000000000000, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:23:00 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/route\x00') r1 = syz_io_uring_setup(0x1c2d, &(0x7f00000002c0)={0x0, 0x0, 0x7, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x110, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) 01:23:00 executing program 7: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0xfa8a) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_setup(0x36fe, &(0x7f0000000340)={0x0, 0x0, 0x10}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r9, 0x0}, 0x0) r10 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x159000, 0x0) r11 = syz_open_dev$tty20(0xc, 0x4, 0x0) r12 = fcntl$dupfd(r11, 0x0, r11) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(r12, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r13}}, 0x5) syz_io_uring_submit(r7, r2, &(0x7f0000000180)=@IORING_OP_CLOSE={0x13, 0x1, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r13}}, 0x1) syz_io_uring_submit(r1, r5, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x5, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x1, 0x0, 0x0, {0x0, r13}}, 0x1000) 01:23:00 executing program 1: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) recvmmsg(0xffffffffffffffff, &(0x7f0000000700)=[{{&(0x7f0000000480)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000500)=""/235, 0xeb}], 0x1, &(0x7f0000000600)=""/196, 0xc4}, 0x1}], 0x1, 0x0, &(0x7f0000000740)) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) io_uring_enter(r4, 0x27d9, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r7, 0x0}, 0x0) syz_io_uring_setup(0x165a, &(0x7f0000000180)={0x0, 0x50e4, 0x8, 0x1, 0x3d2, 0x0, r4}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200), &(0x7f0000000240)=0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r8, &(0x7f0000000280)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)="82635259f89f7526a53800321632539524a885bdc34d493998764495482b1ce91c1511411d43794e1179f0c8cc2e0c1a4efc8bfd28f7359cdd5f43812ababd0e3db57c0af25416a1a5227b54dae2441ce76647878c6a71fa9c3e929abab52fe7ad61b5341b97f5325800b76cc85f88b58c0fd7f5c7db73892f774aa86282151a43b611f58914bf437d616b07f6ad1938f54b14ca", 0x94, 0x0, 0x1, {0x0, r9}}, 0x3f) io_uring_enter(r4, 0x5d32, 0x5d18, 0x0, &(0x7f0000000140), 0x8) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x14) 01:23:00 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2400000010000100000000ec0000009600000900050000000000000005000080480000006fe884b7f11ac8f1810d0dc930b7fbbdfe445812bd4e3ddf303ed7320b364ab5ef9768d0c54531c0e48e8b51a2f78d54f00d9cdd3a5569eaaaf9d57fd007e7eff61a89507780518151cc0bb52f615f18e044c54fca953b368cc61d149f11066c74aac60fe6c088582777cddc52bd82c5ef927b1c475f2e339546488ff742ba361f30616ba6000013203bece0c63d63d44a2d8033a9f2319b5d7e75aed01f84fbba37b71774867fc770eb6690f7a3c3e0d63d75b35925d7980ce0513e1600a3b9b86344041999a73312ac34f870e770a7124542c63a0febe8281dfa46ca86343801872702c3c16a7816d215b6c8b12d910177eed40ffd341132a1e8e19120"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1864.050662] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1864.077417] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1864.108949] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1864.127070] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1864.128890] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1864.130835] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1864.156445] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1864.158396] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1864.160348] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 01:23:01 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2400000010000100000000ec0000009600000900050000000000000005000080480000006fe884b7f11ac8f1810d0dc930b7fbbdfe445812bd4e3ddf303ed7320b364ab5ef9768d0c54531c0e48e8b51a2f78d54f00d9cdd3a5569eaaaf9d57fd007e7eff61a89507780518151cc0bb52f615f18e044c54fca953b368cc61d149f11066c74aac60fe6c088582777cddc52bd82c5ef927b1c475f2e339546488ff742ba361f30616ba6000013203bece0c63d63d44a2d8033a9f2319b5d7e75aed01f84fbba37b71774867fc770eb6690f7a3c3e0d63d75b35925d7980ce0513e1600a3b9b86344041999a73312ac34f870e770a7124542c63a0febe8281dfa46ca86343801872702c3c16a7816d215b6c8b12d910177eed40ffd341132a1e8e19120405d78"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:23:01 executing program 4: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x200000, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091", 0x4e}}, 0x0) [ 1864.202852] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1864.204550] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1864.206533] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 01:23:01 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:23:01 executing program 5: syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r2, 0x0}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r3) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x278) sendfile(r4, r5, 0x0, 0x100000001) getsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f0000000240)={@initdev}, &(0x7f0000000280)=0x14) dup2(r3, r2) sendmsg$nl_generic(r3, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)={0x1124, 0x34, 0x300, 0x70bd2a, 0x25dfdbfd, {0xe}, [@typed={0xc, 0x81, 0x0, 0x0, @u64=0x3}, @typed={0x1004, 0x39, 0x0, 0x0, @binary="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"}, @typed={0x8, 0x8a, 0x0, 0x0, @uid=0xffffffffffffffff}, @generic="307ac1c504fded16c26d89421acb3c8c84dc6990295d6711bae1582bf9167d61c5bcef39e65064aa4cc502da55c23269728d2a5227cd519e96f5460124c52606594e75eb8f18dbaa6284fbfd92ecf607e08e9bbef53c9ebe16dbd66360e80586df6b196167a9c9515bbc8589ad506fc28c13fc24cc0659c86af87fd77098cc875e25e4299a28e05c890a9359bc2fbdc55a7189dbcd948a3320fe551de0a7a33f8a3b63bd9983bcd7db10a5a864ba9e8e5d8f4a215121419c15059f597aab6a8cc69097253f6c66255cbf4e2239d1d957d8d22f3d53611a0b8b33da8091813fb7112a606b277174185d8317c2e1feb4ecc36be67164"]}, 0x1124}}, 0x44) r6 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r6, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xe, 0x4000010, 0xffffffffffffffff, 0x4225f000) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r7, r1, &(0x7f0000000200)=@IORING_OP_READ_FIXED={0x4, 0x2, 0x4004, @fd_index=0x2, 0x8000, 0x10000000, 0x8, 0x1, 0x0, {0x3}}, 0x5) syz_io_uring_submit(r9, r8, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r6, 0x58ab, 0x0, 0x0, 0x0, 0x0) 01:23:01 executing program 1: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x80) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x1, 0x8, 0x7, 0x2, 0x0, 0x106e, 0x1000, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x8000, 0x1, @perf_bp={&(0x7f0000000140), 0x7}, 0x11010, 0x1, 0x8, 0x2, 0x227c9704, 0x6, 0xbc, 0x0, 0x9ae, 0x0, 0x5}, 0xffffffffffffffff, 0xb, r1, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x14) 01:23:01 executing program 3: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xffffffff00000000, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) [ 1864.296067] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1864.304000] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 01:23:01 executing program 7: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) r3 = syz_io_uring_setup(0x7a1a, &(0x7f0000000140)={0x0, 0xad32, 0x2, 0x0, 0x216, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000200)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r8, 0x0}, 0x0) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r11 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r11, 0x0}, 0x0) r12 = syz_mount_image$nfs4(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0x1, 0x4, &(0x7f0000001540)=[{&(0x7f0000000480)="c0cded44e8e2624c83e4f5302df635cfbebd1aae1adc8cdb635ae3bb460f3e4b9c2d8773c417497fe17edaa91e5aa6fb85ad0ae8df6efc7b365408bbc1d4d76efc21ce8cc9ca62a7ceea26289327e28f1812232ba1375e1571e47e4118f44cb3f1c19142ba033f986b1bcb7d33ab2b53b353dbe30d878a1555f7ee82c0d6d9c4187d428f9a7c3c978b32cd52693c004ac60997e927856297c81d81fea00c98ca5ebea581fb0b3e8c0bc1afe1925761073f68862c17254d638e782a31225cac3c06f1660fa1ad4f4e428a30bc6c45bacf39949e5fb2b3d6a50c9c590fd40f82b720c59918174536a4c79a856c28f733ba5e6d2d9119cecbbeaa29fbfaaaf4c019f33c3dcc1f714586ebe377aa705f0f06b7a9331e09734b62921388af6b7bdb26c97f51ff9df1c244c700659ef8d9e48d8f08a2863a07a35a778a083ea69ee0bac2bd599e1a3594fc25dc67eea84a4eed1bd747b68e604dd7dcc3efa54b63381ebfb86ab1c8f2d95427d6e418fc053b1ca289da371abc3786f96fd94a045125d9db788ece1e65f4955d31d6789ab8e5778ac564fb5584c549bd8d0a90aa5a10500f76f8701688a9dfc291e95712bcdf26e7d11a2547b61452715dc43c79ceccc409327c78e1e92a8020bb94668ec0b340c187f3be0c6bf63a551059a1b4bd79eb3a8ceb227816e46eabc8cf4991c89885f0a6f9f98f53597a5f5e1e4fd9bc6e0ad72a24696414f3d987f9f6ba29cc290a6dff23f8af9638722078075154458804abe5422fe140e6a5792a6aeb4450c01c08c34702945e2aa5304fd17e86fa7c4ecd842239f4f26dfc9e1e6c095940b2fb133486235481e0222d3e599697faa70ebb081c3099f1add0bcd2f41c9c8133f7dcda66848e54ce3caf0b922a273a50d74a29fc9f4e643b1905d419f7a4aa4daa87e5616e3d1ae12be965ed974c7127e29959522ec6b82c9333e3b69eb78ce9286333a29aa7759e1ac441d2014c5f6fd0e77814d428874e806d3ddbf7e8a5228017e41689006cfe80770f3d543c6885ccbe04168d3a4903816d2362c2ddb4083ff4d17513a8dbaeac8c2dc76f552993f6439627f404cddf653b0e40b0a73bc4ae735e573b8eb2788151b12a1916d60830fbd40ec5a6fee47afc513574960e15c1984a45f4e3b7e5f341d2393efbc708e1e2a1db5f48ca03f23fb5bcfa76b9b4dabcfb163c07bfb018259a1917fd1a59a6375100a5959907cc05a5e9caf5a6015fb7ee2625a3e4533fe444815f9877a7fc762dda03765099953d15a98a030cc7e0dfecb037a6f2beb2a30d12bf9585650f68e1847ba3d1160607505495e29a5f42bae010e08e1390085722890102f0aaa8e0cde46a8d80c9c6f1a859ce07877c1259c2b02f90600e48ef4687df490d7efdf8a6b334eef4015cb24e87d70d22e00f9123ff6c11ff92c10f77b30d1dee0518b6ec428c9b51ba713d7684da2c344f7ac85ebb6fab181f51c3ff4bba7f73ffcde0efd63825b832993ce617b9daca17c9b8ef921b309c393a8b56f2e9320ffa4f4d846dbd0bc72691bc101bcb07934df987db9a6ab2a24462515e0596b6e5c48c05e0647a50fa9937111c5543e32724c6a55b49af3ccd0b28450df63d107dabac44fa1e07658a89cc6a4e30c6b05993b0c0be306e61a1f5c9e50f932f857f5b95650225a52914ee5dd110176cff48817944ee04d8fd84f4444561e7eb908aa91a4ad611a9d13be44cda4b3f258235e88682475272be5bbd79d183d28109585ec63c5662ff93cc79131c093e2c8a96b806e35914f04ecf1febc29fe6d34934047a69e351c6243d93c5a4c5156b990617684b5887e901396c7eb21077d0399b0537f3dd32e4f7f9988d8e9ef7335fa1f317b1f678d6a52338aaa87a3b54215f96d6cdcf7ccc64341ea65dee19d09d3b4fee20c3971599ba74b2be848070f49a8a918fafd09f3892088070910eacd17b9337eb5c1cf22cc97cebe93c366c19eb57209bb421f0ae214808797a828c4c253f43f789ef02be4a7ecb9ea48d2c8eb93a76529b1e79386493357fa2090ae93a5a17907b3f2d64da2c13f7eb28148659efb9cb449499720450f9ea2e2bdd9291e9610971fbb58e247bc8905cabd79d2a325fb45c4ac8c257f1fb8e7b0dd68dd1393eb3ed8d08f2527f1d212fc8d4b1efa621e767d5b7c265d5273c1635c96ea877bf5a79c4dfd9b446ebe82ec6175c44aff73630c2146acb005d270bdf7f58b5ae5ffaa30cc345054288d3167e4041de9fecbd652a67cba780eaf830514876026f28f9cd3b8eccf7f52e1e11fb36bfa25305db62503267542bb228435eaca5441553ef4b1f7bb757e4cc7fbb4c8e20d1487427c19541ab5e62b8d101f5103631b50f0f2dcf518ce85bd45e6c64b49c46748dc76447facae5db3bdbba6f94bfdbb2c251ed06d01b7dc6e5938438c0efadc65ff8f5f68f27fd123e304d2e0b3baa20951415f4d1677d2c9607e06b3c5b3d3d2d5b2778603f17f0e617c1235c3130dbf21de4cbac69b821d60b22aa9256e9679e41d992b71ce0af512d389bc81c3269ea0feb40d23cb6a91b882302c55317c3c2956c23951bbe0021372754494d44cb323f88a281702845d1e1fa8ce8d7b77ceab55ca39f90be185f91124208d7fae48246d1567936ea92428ade049b7d7b7cd80c4a9360cc60bc9af3347d953cd60b9f5d624c526cd4d2ddc2a0149848aa7b08302230167550e4726a76efac2f13e9fa6aa0983a65e4090b330d55176fcd0783de8cf93486ab8eb9c2783d02f0eb3495515f79e0b53e979abf5c2b642f4a6c4272218c3e6323fd3777a2300a3c83e5b2bc14e82258a3e9fb7a66b948f793cbbb493605a3f2b086a611896db8619b8035b74a2937abbee38f8ba5edb1156ba62d8e3c5d0311fceda078142c94ccb101f71a8006f79148f4a73c554c22220ceb342fa485b2d78db09349b40094563c79cc339021b1ba9787917de2fff17480a4808e895165d86123d44ceed01aba11f52fd8436495f210db398f5ae6f4f87e1bcbea1c8918de0c12cf58bfa77343f43ad752d02a6d15134ba5c9ba4cd9daecce42cf2077b71e6d31fae9a2206c4ef60976ac3ce6751bb7d9b889e9b7318acf00a660950764e2e5cf013b8555cc19dff500511a1bc62b7cd9adcabeaefca543f110f8a291e134e0f1c0dd1e08d0a8459d5b8e919c449647f07cf3c33050db84f70c7451569381bb5cbafd6f76f079ada3dbe81988928b4e84e412753e0afed5284899fe45f31c87f9bf4afb39ac8cc82df81a940d7980d8e28125b1d51c429311f9ed10102df5a38724f46a6188cc42a100492475ed300423b874b5f05bd19469d4f3acf161c9aa7e9f52a03f30224f73c2645a36ba1efa382ef6f781270321af37086afa8176a16109722b23032662692bb72aefc6cf88279af25b84fb8a06b7cf437665462c163482cd1d049a1ea51e0dcb72a1e7df633e13f4758bf823cae1bfd250dc763334176bcbcbf28e2b6f514678b60e3e4f752759e03f20d34895b8014be57be827e817cde14754ebd2b1e24f7344f4feb507beb461f1b6517b244dcd7ebea811957aba5af3e36f6064c57f62ad0c8cbb788ac68fc75287e6bd80308268e24e0e3d1a07475c50772ef5336b7aa713defa32b421b91b755f69f7f90a9f19a7d3709d7d0f592456bb11a02745cd0ed53369d1de9f018baeb2591c97fdeb364ec7689db6ab3441e26d52f652c9211f1de49c1fad3a09443f51549cc97d02fec25d47b70c9bb043238c4ed90519c9b80f618cca6b489e5ebf4d450f129698d03dddc753801c714ff3efdb3704d2ea6064271fddb3a8b265cc0f781ac225ad971cd77a4802378b01c590450919fab90237e5ce860f6ea7c5b1bfeb0d473b3c6302ceec4b6144801988b263c8826c0ad1755390fb728ee0872e212ed7a1f3b26feafc126ce701a756825e0447859bfa0a6434c4c96e334344aa14fa2f656cdff7b4716fa0478c01141d1fa0c5b381829d83a97a8b17c8d1060b4c1d72e743631c39f412db2375fed7244608ae94549831b6eb69b88dfa031d54a697969834b91f6469b4242e989c71019e2c06bf73e505bee053b6219bbeaa80ec6c271f9a621f64110023196c84047eecde1cc9c198960b3cde1f998dc0621840cee1eaff06dac83d563051903d09c0471a87b113e0bd452a0dcb77389026404fc06fa1d8c69751c5f1ca5c53fa53a4fd31c88e858a07cdd6f67580312e8383ec9466b9510323fdb95c6fe818e0d2e9b5e64d7672f36752c89e7473fc37db9e833d6a7f52b08037bc7fa730f45bfe8bc83fd3f5aebf2411d1db75aafaf51de17a82ce29446e4ae6da67f8e1d9fe0f3639406981ace49605f3c0e4c8a16d4135f067367db5cd67186bd062a2e4a9195af61fce5437b7a81038aa1a99d8d7f08d75c12dfc62d257d9c880e473e8eee68cb40b5c15fbe1c6ac20e23feabd60eff8e75cad3742dbc853cd1e6ebd68f80e22aee29f939a4276fd5f44b544d287fa64e7e3d72769db406a7cd95c2ff3b2161d29e1f527b80ddc0d310e34cf531bebbc1963b2859c4a2f84adc7c477ab7a739492461238c2f7e47beee59e0565973aa5f899fb4690834d65158d02103174510fd1c6997f830912858983c7b886779f202ec4f9e40e423044191c1e90e44b2bca79bb423d6ab314a8579a334fe25a280d03e202f9a345dbfb8c1adead36fcbaae26849cc9e247a530b5617767889fb0cf224787a5be0fe765f23e212848baf5f498b9eaa3888742baa96742f1826bd73a88cec0c206a6a1a423a4911b412e594f91bd47c8f76c368b9d91ef17b72d99fb86e470c8f5f296371bc129ccecd27e0e99ad0f2eb9df5e71cd5835368e6f035b3f20cae3f6b77c6b103a672b43a9ac406c96782cc09a912bd3346757331006bdb4bf792ae1d87246c2563ccd6cc41c8ae82023256ba10810d864e95f3555fa5f00ba66ad9be15cf57c11fe0b8a691527831563bcdf278f8943352790d1938d92ddb2b098865dd24fdbb9d558f69038e73ab6760cc5cb885a52e59356210b8c7a8be85c1a040105da9a22f6864935fe253fcc708783aa13b2f1019b0fdbba7fa7428d3dedcc06445e8c244990485a8865b56fbdf9982561af0367b11d5f2458793203383d5308beff3a5097374c80f69f795cc46f812ab8737f994f8c105f0fd4d160e68c36415211f39672c816c663d33bf0661cad8bf889f70089ca392e086f76cf2ac4fb21f7ca4130fa1ae0a7c9fa7a0d75019a9ec8b4152ad43f02343622029a93daff177459acb7a850451a9cbbc911d5740ca88593280241fa2e5bbd04e69558650033f5d62f462152584378a842a04d01ef11dfbb393156d19284cdfd0b5b3ccc971f910b639f641a42e7b1b773d3da69a6626a045e10892873e14c524bed3b1256f4503622165c3ed094a01ec19d211e12e87cf3c039285b1e84daf7be3a12010ad10f283ff411cc842dca506ddc0dc0f7df8ccee253ddd007e77ab62aaf53cc3cc86a7bcb21f895688aefd1347440a2f068b116996e9f7991748efa827c5567b55c26448d5d468688cb0d36586d29c9d3dc7208726afdfa67c695851ac295242b94f0ebc71928d2852e22a0286173b24b3edca03284217d85b7e251c83bcf7ca73c43eb59a746166e5c83c8df49638a4636a212eb9bcf5f7dde1523a039d9cb67a2e0a15451ce2dcdac6a57b1f5c412445fa5c22e657db0c15b9eb7c90c8444b86b7df0f5a15c9a7b3fc53a948387fc67294b6440cbf6982a49a56577edfebc4218", 0x1000, 0x7}, {&(0x7f0000000400), 0x0, 0x100000000}, {&(0x7f0000001480)="05299a0c769194cbf4a0d9284bbc006fdef805bf44b2c534ab5d0c21f7f128995a535d6785e26011c0a8031e74931ec92f6787b7abd3603fcfb56da0bb1898c423bc615e781aa1f5057aba908f44a4f6434b398ff5e9af8f99cec7f303d912", 0x5f, 0x9}, {&(0x7f0000001500)="40077250c4955bf6d0183bfe2cbcfa4655f02b4bf5d7bc2e498d44f452783688f6dd", 0x22, 0x8001}], 0x840000, &(0x7f00000015c0)={[{'\x00'}, {'\x00'}, {'\x00'}, {'\x00'}, {'%'}], [{@dont_hash}, {@uid_gt={'uid>', 0xffffffffffffffff}}]}) r13 = inotify_init1(0x0) syz_io_uring_submit(r6, r10, &(0x7f0000001640)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x20, &(0x7f0000001600)=[r0, r12, r13, 0xffffffffffffffff, r3, r3], 0x6, 0x0, 0x0, {0x0, r5}}, 0x800) syz_io_uring_submit(r4, r2, &(0x7f0000000240)=@IORING_OP_POLL_REMOVE={0x7, 0x3, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1, {0x0, r5}}, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r14 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r14, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r14, r2, &(0x7f0000000340)=@IORING_OP_FILES_UPDATE={0x14, 0x5, 0x0, 0x0, 0x7, &(0x7f0000000280)=[r3], 0x1, 0x0, 0x1}, 0x4a) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:23:01 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2400000010000100000000ec0000009600000900050000000000000005000080480000006fe884b7f11ac8f1810d0dc930b7fbbdfe445812bd4e3ddf303ed7320b364ab5ef9768d0c54531c0e48e8b51a2f78d54f00d9cdd3a5569eaaaf9d57fd007e7eff61a89507780518151cc0bb52f615f18e044c54fca953b368cc61d149f11066c74aac60fe6c088582777cddc52bd82"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1864.349122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1864.351282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1864.353288] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1864.362907] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1864.364941] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1864.374225] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 01:23:01 executing program 4: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x400000, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091", 0x4e}}, 0x0) [ 1864.465479] loop7: detected capacity change from 0 to 135266304 [ 1864.484388] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1864.557700] loop7: detected capacity change from 0 to 135266304 [ 1864.580760] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1864.582588] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1864.585338] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 01:23:15 executing program 5: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0)={0x0, 0xfffffffc}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 01:23:15 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:23:15 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) mkdirat(r4, &(0x7f0000000000)='./file1\x00', 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x14) 01:23:16 executing program 3: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:23:16 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:23:16 executing program 1: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000140), 0x1000, 0x600002) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0x0, r4, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) recvmmsg$unix(r4, &(0x7f0000001580)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000001480)=[{&(0x7f0000000200)=""/41, 0x29}, {&(0x7f0000000240)=""/107, 0x6b}, {&(0x7f0000000340)=""/55, 0x37}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000000380)=""/175, 0xaf}], 0x5, &(0x7f0000001500)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x70}}], 0x1, 0x2002, &(0x7f00000015c0)={0x77359400}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000d, 0x1010, r5, 0x8000000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x14) 01:23:16 executing program 4: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x20000000, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091", 0x4e}}, 0x0) 01:23:16 executing program 7: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/slabinfo\x00', 0x0, 0x0) [ 1879.222331] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1879.247869] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 01:23:16 executing program 4: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x20000000000000, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091", 0x4e}}, 0x0) 01:23:16 executing program 1: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0)={0x0, 0x10000000, 0x2, 0x0, 0x350}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000010, 0x4000010, r4, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_NOP={0x0, 0x3}, 0x80000001) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r7, 0x0}, 0x0) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r10 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r10, 0x0}, 0x0) syz_io_uring_submit(r5, r9, &(0x7f0000000240)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r4, &(0x7f0000000180)=0x80, &(0x7f00000001c0)=@caif=@dgm, 0x0, 0x800, 0x1}, 0xffffffff) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x14) [ 1879.305942] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1879.307017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1879.309802] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 01:23:16 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000080)={{0x0, 0x3}}) fork() stat(0x0, 0x0) r1 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x14) [ 1879.354594] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1879.355675] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1879.356743] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 01:23:33 executing program 7: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r3}}, 0x7) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:23:33 executing program 5: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) io_uring_enter(r4, 0x27d9, 0x0, 0x0, 0x0, 0x0) r5 = io_uring_setup(0x6136, &(0x7f0000000480)={0x0, 0x4997, 0x0, 0x1, 0x2fd, 0x0, r0}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x13, r5, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa53fdc4a556632b4, 0x80010, r4, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x9, 0x30, r0, 0x10000000) syz_io_uring_submit(r1, r6, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x4004, @fd=r0, 0x3, &(0x7f0000000380)=[{&(0x7f0000000140)=""/70, 0x46}, {&(0x7f00000001c0)=""/223, 0xdf}, {&(0x7f0000000340)=""/16, 0x10}], 0x3}, 0x80000001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 01:23:33 executing program 1: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440), &(0x7f0000000040)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000004, 0x10010, r0, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) execveat(r4, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000400)=[&(0x7f0000000200)='\x00', &(0x7f0000000240)='\x00', &(0x7f0000000280)='\\$#))&\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='\',\x00', &(0x7f00000003c0)='\x00'], &(0x7f0000000580)=[&(0x7f0000000480)='\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='\x00', &(0x7f0000000540)='&$\x00'], 0x100) write$binfmt_elf64(r3, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x278) sendfile(r3, r4, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000680)={{0x1, 0x1, 0x18}, '\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0xff, 0x84808, 0xb, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x200000000000}, 0x4004, 0x0, 0xfffffffb, 0x6, 0x80, 0x5, 0x2, 0x0, 0x454, 0x0, 0x1}, 0xffffffffffffffff, 0x0, r4, 0x0) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r7, 0x0}, 0x0) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6, 0x810, r4, 0x10000000) syz_io_uring_submit(r5, r8, &(0x7f00000005c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x14) 01:23:33 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:23:33 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2400000010000100000000ec0000009600000900050000000000000005000080480000006fe884b7f11ac8f1810d0dc930b7fbbdfe445812bd4e3ddf303ed7320b364ab5ef9768d0c54531c0e48e8b51a2f78d54f00d9cdd3a5569eaaaf9d57fd007e7eff61a89507780518151cc0bb52f615f18e044c54fca953b368cc61d149f11066c74aac60fe6c088582777cddc52bd82c5ef927b1c475f2e339546488ff742ba361f30616ba6000013203bece0c63d63d44a2d8033a9f2319b5d7e75aed01f84fbba37b71774867fc770eb6690f7a3c3e0d63d75b35925d7980ce0513e1600a3b9b86344041999a73312ac34f870e770a7124542c63a0febe8281dfa46ca86343801872702c3c16a7816d215b6c8b12d910177eed40ffd341132a1e8e19120405d78"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:23:33 executing program 4: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x40000000000000, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091", 0x4e}}, 0x0) 01:23:33 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:23:33 executing program 3: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x4000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) [ 1897.029900] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1897.080625] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 01:23:33 executing program 7: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0x7f, 0x0, 0x1, 0x20, 0x0, 0x0, 0x18, 0xa, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000140), 0x7}, 0x40400, 0x2, 0xc3b, 0x4, 0x6, 0x5, 0x0, 0x0, 0x17031d9, 0x0, 0x3}, 0x0, 0x10, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81000}, 0x0) [ 1897.125353] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1897.181974] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1897.183573] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1897.186089] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1897.193049] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1897.194597] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1897.201693] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 01:23:34 executing program 4: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x2000000000000000, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091", 0x4e}}, 0x0) [ 1897.260744] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1897.262464] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1897.264230] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 01:23:34 executing program 5: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) perf_event_open(&(0x7f0000000780)={0x0, 0x80, 0x7f, 0x8, 0x9, 0x6, 0x0, 0x9, 0x41, 0x6, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0xff}, 0x9100, 0x80000000, 0xac0, 0x0, 0x3, 0x2c6, 0x0, 0x0, 0x23dd, 0x0, 0x2}, 0xffffffffffffffff, 0x9, r4, 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x278) sendfile(r5, r6, 0x0, 0x100000001) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4, 0x2, 0xd7, 0x5, 0x0, 0x9, 0x84202, 0xd, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3b1, 0x0, @perf_bp={&(0x7f0000000140), 0x9}, 0xa008, 0xffffffff00000000, 0x4, 0x0, 0x7f, 0x2, 0x400, 0x0, 0x22, 0x0, 0x1}, 0xffffffffffffffff, 0xa, r6, 0x9) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) vmsplice(r5, &(0x7f0000000700)=[{&(0x7f0000000200)="fdae87534c726bee4576efffe6da9c1b99f0048d303f0ed27f88b52818dd2e", 0x1f}, {&(0x7f0000000340)="948ef9ad44fde88fb225fd3a7d3e9d4e95214ca79ec1728ed26c414c31f356c43d677256a692c533f7c837ea61a9658fd03f668359b0c4f9b7c3ad486af23bb63a7c68d797a0da4d70e9a7eedcd6ab58299392857a2cd9d10eb850ab3fd1e2ccfa100063f72b34478331f7bf2042a0e06daf349e9d999f148090bda0a15ff36562e05c28de31f78e93446f07153f8a62117e5982eaac96ff5481e829fbc270b59c65d1d56ea90bd3f6c4d8906fc0d7941361e6c6f597771535413ad7e171a235f5c24beade1d4be054cc98f72191c2b30e8fc741a288f5ced6e55c760a73205881cab38e", 0xe4}, {&(0x7f0000000480)="f28a4b838e02d169afda803d86a2d699aa958b0fa6df512481515114fe3daba8da7bd74bb8697c5670c0a75f5311db5cf5d5bb8ebd7aa560ada672afcbf614a33e80e44725acbb2d0fab055eacaa66b3c4038eccfd69161fb4933ea7c57041dd76bfe5e70f219bee8391f57ceb5e1511ef0dad30e921768684e22c13351f9aaa321f85047bfa7ddeee77c77e4c8fa236a7e1b36b8575cee8fde9bfefc937ec4121e3674efa1b635ba8d096f9c101016ef01a3fdc592cf9499d7d0120a692969aa5e1f45fdcefd422fdef7649f7f4006833d383b3c4f685e8f4de0460a3d2bf7028e970b5b988cd65080f0709962cb64c066494e8af4f0046d0", 0xf9}, {&(0x7f0000000240)="4f34d36ac2bb4ae8de307ff41d05006c49de8fe167ab6992afb7aceede7a4a58b3d071a628b432ecbc7835a7953800c7272d9ff8cc45ba2d6b35f16314080bcedf351aab4d3240aaf423cad6c0949665f07a349b", 0x54}, {&(0x7f0000000580)="019245a96ab563f878ca9bf0dca3c4ea69681903062442c47eb597efca929fd8c2151d8d8083118ba3c0e846a4c4140be8ad28bec51ca62fd3b1f791287d9e60d1366e50411b55e91d25de54d62d70199ecc2eda5eb93d4f424879fbe5f8e590afb9ec571a9624396d9061db4fdedac12db92fd75173300f879bd36c67a85e32a09eadd2a11d0e", 0x87}, {&(0x7f0000000640)="232947eb64cb42d407966556a312a3fe3d71d4f1b8a71156187c32c7e86b2fe7c72345df4bd49cfeefda63574fc1f33efccad2be43a373e4a1a1359083d7d6da", 0x40}, {&(0x7f0000000680)="d82b84f9026f8e40014061114d4a4787db69ee0ace2d1b6b9c5784eaa54479804c99deb24efdf8a472a4d04d71672ae981328eb6b4684423578b4824c2bc7426258f02160364af594435a07e1aa1359a712ed49149ba3e85587556c2bc6140c94569", 0x62}], 0x7, 0x6) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 01:23:34 executing program 3: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x200000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:23:34 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:23:34 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:23:34 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091cd3476bae3a05bae56ab34bcbeff5ddd1d8a65bc022525b413d13bc1a620d628d0ac0cfe3ca26247450c82d3f2f6bc0c2a5c", 0x80}}, 0x14) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x9, &(0x7f0000000140), 0x1, 0x1}, 0xa33) 01:23:34 executing program 3: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x400000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) [ 1897.525479] FAULT_INJECTION: forcing a failure. [ 1897.525479] name failslab, interval 1, probability 0, space 0, times 0 [ 1897.528399] CPU: 0 PID: 10423 Comm: syz-executor.2 Not tainted 5.10.260 #1 [ 1897.529876] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1897.531638] Call Trace: [ 1897.532213] dump_stack+0x107/0x167 [ 1897.532991] should_fail.cold+0x5/0xa [ 1897.533810] should_failslab+0x5/0x20 [ 1897.534625] kmem_cache_alloc_bulk+0x4b/0x320 [ 1897.535599] io_submit_sqes+0x713e/0x8780 [ 1897.536503] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1897.537564] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1897.538595] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1897.538625] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1897.538654] ? find_held_lock+0x2c/0x110 [ 1897.542312] ? io_submit_sqes+0x8780/0x8780 [ 1897.543245] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1897.544287] ? wait_for_completion_io+0x270/0x270 [ 1897.545329] ? rcu_read_lock_any_held+0x75/0xa0 [ 1897.546319] ? vfs_write+0x354/0xb10 [ 1897.547114] ? fput_many+0x2f/0x1a0 [ 1897.547888] ? ksys_write+0x1a9/0x260 [ 1897.548709] ? __ia32_sys_read+0xb0/0xb0 [ 1897.549581] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1897.550695] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1897.551814] do_syscall_64+0x33/0x40 [ 1897.552614] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1897.553705] RIP: 0033:0x7f9b78b4bb19 [ 1897.554499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1897.558410] RSP: 002b:00007f9b760c1188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1897.560057] RAX: ffffffffffffffda RBX: 00007f9b78c5ef60 RCX: 00007f9b78b4bb19 [ 1897.561645] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1897.563164] RBP: 00007f9b760c11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1897.564688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1897.566244] R13: 00007ffe648829af R14: 00007f9b760c1300 R15: 0000000000022000 [ 1897.585001] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 01:23:34 executing program 4: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0xffffffff00000000, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091", 0x4e}}, 0x0) 01:23:34 executing program 7: r0 = syz_open_dev$mouse(&(0x7f0000000500), 0x4104, 0x84000) r1 = syz_io_uring_setup(0xdc, &(0x7f0000000580)={0x0, 0x1, 0x2, 0x3, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000540)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000006, 0x40010, r1, 0x8000000) syz_io_uring_setup(0x44e4, &(0x7f0000000340)={0x0, 0x6821, 0x4, 0x2, 0x13b, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000280), &(0x7f00000003c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000400)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x3) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r7 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = fork() fcntl$setown(r7, 0x8, r8) ptrace$getsig(0x4202, r8, 0x4, &(0x7f0000000240)) r9 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48e6, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x2}, 0x8020, 0x0, 0x0, 0x2, 0x10000}, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x1b]}, 0x8, 0x80000) r10 = getpid() move_pages(r10, 0x2, &(0x7f0000000180)=[&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil], &(0x7f00000001c0)=[0x6, 0x6, 0x100], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x2) syz_io_uring_submit(r6, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r9, 0x4008941a, &(0x7f0000000140)=0x2) copy_file_range(r1, &(0x7f0000000240)=0x7f, r9, 0x0, 0xfffffffffffffff8, 0x0) [ 1897.714037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1897.715682] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1897.717327] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1897.753800] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1897.755365] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1897.756996] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 01:23:50 executing program 4: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091", 0x4e}}, 0x0) 01:23:50 executing program 3: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x20000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:23:50 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:23:50 executing program 5: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$nfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRES32=r4]) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r7}}, 0x5) r8 = accept4$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, &(0x7f0000000200)=0x10, 0x80000) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x40000161, 0x1}, 0x8005) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000140)={0x4, 0x1, 0x9, 0x6, 0x8}, 0x14) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 01:23:50 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 2) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091cd3476bae3a05bae56ab34bcbeff5ddd1d8a65bc022525b413d13bc1a620d628d0ac0cfe3ca26247450c82d3f2f6bc0c2a5c", 0x80}}, 0x14) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x9, &(0x7f0000000140), 0x1, 0x1}, 0xa33) 01:23:50 executing program 7: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xa, 0x4010, r0, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:23:50 executing program 1: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) vmsplice(r0, &(0x7f0000000340)=[{&(0x7f0000000140)="d318b8012edab062c86a1aab4e8d382b860a480c0fc9fe4dbefd661c1d2a00e7d2206cb483f3518bb9244891f48fdb1bff49dc591bbff093a9bdab5ccf943e77ee60bf42190e", 0x46}, {&(0x7f00000001c0)="37397432751bd36e170e7adc99f6ecebd1b999d7209a145697779f1fd7290db0b17762bf1849dff10c70d678f0a02f2c18906a477809ffc168af4cd08fc666cf9d8802ddb068a8f78b38fc35cc310718a8e7db3ed7ffea7b8be9262fb7fb80b3a720e8a77490e234168c4e07598663ed9606462e4eaba6bcdb60ce0940c35bd74a9f7dbd139acd0a1a1196773c9a5b8fe79a54670299995267b4d0d0cc9a83982077946710593d12357c35ef6710ffd3c3939fa02ca9915a19baeed627283e9c18e2222f206129010013e2704d16ff1978513ceef28542a65ef648195bca32ac949cc64a77b61ad4740e96eb52c927eb29f71d127e", 0xf5}], 0x2, 0x1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xf7c3, 0x200}, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x200000, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x14) 01:23:50 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2400000010000100000000ec0000009600000900050000000000000005000080480000006fe884b7f11ac8f1810d0dc930b7fbbdfe445812bd4e3ddf303ed7320b364ab5ef9768d0c54531c0e48e8b51a2f78d54f00d9cdd3a5569eaaaf9d57fd007e7eff61a89507780518151cc0bb52f615f18e044c54fca953b368cc61d149f11066c74aac60fe6c088582777cddc52bd82c5ef927b1c475f2e339546488ff742ba361f30616ba6000013203bece0c63d63d44a2d8033a9f2319b5d7e75aed01f84fbba37b71774867fc770eb6690f7a3c3e0d63d75b35925d7980ce0513e1600a3b9b86344041999a73312ac34f870e770a7124542c63a0febe8281dfa46ca86343801872702c3c16a7816d215b6c8b12d910177eed40ffd341132a1e8e19120405d78"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1914.147682] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1914.186444] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1914.187748] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1914.190352] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1914.192523] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1914.204715] FAULT_INJECTION: forcing a failure. [ 1914.204715] name failslab, interval 1, probability 0, space 0, times 0 [ 1914.207486] CPU: 0 PID: 10464 Comm: syz-executor.2 Not tainted 5.10.260 #1 [ 1914.209140] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1914.211107] Call Trace: [ 1914.211742] dump_stack+0x107/0x167 [ 1914.212619] should_fail.cold+0x5/0xa 01:23:51 executing program 5: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0)={0x0, 0xfffffffd}, &(0x7f0000ff9000/0x6000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}, 0x0) r7 = syz_open_dev$hidraw(&(0x7f0000000140), 0x1, 0x4400) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$nfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRES32=r8]) syz_io_uring_submit(r4, r2, &(0x7f00000001c0)=@IORING_OP_SPLICE={0x1e, 0x2, 0x0, @fd=r7, 0x4, {0x0, r8}, 0x7fff, 0x0, 0x1, {0x0, 0x0, r0}}, 0x383) [ 1914.213533] ? create_object.isra.0+0x3a/0xa30 [ 1914.214809] should_failslab+0x5/0x20 [ 1914.215716] kmem_cache_alloc+0x5b/0x310 [ 1914.216704] create_object.isra.0+0x3a/0xa30 [ 1914.217751] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1914.218960] kmem_cache_alloc_bulk+0x168/0x320 [ 1914.220054] io_submit_sqes+0x713e/0x8780 [ 1914.221053] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1914.222230] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1914.223404] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1914.224553] ? find_held_lock+0x2c/0x110 [ 1914.225518] ? io_submit_sqes+0x8780/0x8780 [ 1914.226545] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1914.227681] ? wait_for_completion_io+0x270/0x270 [ 1914.228831] ? rcu_read_lock_any_held+0x75/0xa0 [ 1914.229925] ? vfs_write+0x354/0xb10 [ 1914.230801] ? fput_many+0x2f/0x1a0 [ 1914.231652] ? ksys_write+0x1a9/0x260 [ 1914.232560] ? __ia32_sys_read+0xb0/0xb0 [ 1914.233524] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1914.234755] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1914.235967] do_syscall_64+0x33/0x40 [ 1914.236853] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1914.238048] RIP: 0033:0x7f9b78b4bb19 [ 1914.238928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1914.243216] RSP: 002b:00007f9b760c1188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1914.244996] RAX: ffffffffffffffda RBX: 00007f9b78c5ef60 RCX: 00007f9b78b4bb19 [ 1914.246655] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1914.247476] nfs: Unknown parameter '' [ 1914.248313] RBP: 00007f9b760c11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1914.248326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1914.248339] R13: 00007ffe648829af R14: 00007f9b760c1300 R15: 0000000000022000 [ 1914.310065] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1914.311438] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1914.312740] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 01:23:51 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:23:51 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000140), &(0x7f0000000180)=0xc) r1 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) sendmsg$SOCK_DESTROY(r1, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x15, 0x10, 0x70bd29, 0x25dfdbff, {0xf, 0x20}, [@INET_DIAG_REQ_BYTECODE={0x1f, 0x1, "e57626be0f36ebd791d2634b87f6790b4dea2efb879afa2a1c6bdf"}]}, 0x34}}, 0x4004841) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x8000000) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x14) [ 1914.343830] nfs: Unknown parameter '' [ 1914.379262] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 01:23:51 executing program 4: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x4000) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091", 0x4e}}, 0x0) 01:23:51 executing program 3: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x20000000000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:23:51 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091cd3476bae3a05bae56ab34bcbeff5ddd1d8a65bc022525b413d13bc1a620d628d0ac0cfe3ca26247450c82d3f2f6bc0c2a5c", 0x80}}, 0x14) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x9, &(0x7f0000000140), 0x1, 0x1}, 0xa33) 01:23:51 executing program 7: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$nfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRES32=r4]) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x4004, @fd=r4, 0xff, 0xdee4, 0x100, 0x10, 0x1, {0x3}}, 0xcc) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) r5 = memfd_create(&(0x7f0000000180)='-/.\x00', 0x4) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f00000001c0)) 01:23:51 executing program 5: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000140), &(0x7f0000000180)={'L+', 0x1}, 0x16, 0x2) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1914.439954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1914.441132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1914.442314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 01:23:51 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2400000010000100000000ec0000009600000900050000000000000005000080480000006fe884b7f11ac8f1810d0dc930b7fbbdfe445812bd4e3ddf303ed7320b364ab5ef9768d0c54531c0e48e8b51a2f78d54f00d9cdd3a5569eaaaf9d57fd007e7eff61a89507780518151cc0bb52f615f18e044c54fca953b368cc61d149f11066c74aac60fe6c088582777cddc52bd82c5ef927b1c475f2e339546488ff742ba361f30616ba6000013203bece0c63d63d44a2d8033a9f2319b5d7e75aed01f84fbba37b71774867fc770eb6690f7a3c3e0d63d75b35925d7980ce0513e1600a3b9b86344041999a73312ac34f870e770a7124542c63a0febe8281dfa46ca86343801872702c3c16a7816d215b6c8b12d910177eed40ffd341132a1e8e19120405d7896"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:23:51 executing program 3: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x40000000000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:23:51 executing program 5: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r7, 0x0}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000180)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r4, 0x4, 0x0, 0x10000, 0x2, 0x0, {0x0, r8}}, 0x0) r9 = syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) io_uring_enter(r9, 0x27d9, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r9, 0x5faf, 0x3ff1, 0x0, &(0x7f0000000140)={[0x8]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1914.508953] FAULT_INJECTION: forcing a failure. [ 1914.508953] name failslab, interval 1, probability 0, space 0, times 0 [ 1914.510392] CPU: 1 PID: 10496 Comm: syz-executor.2 Not tainted 5.10.260 #1 [ 1914.511383] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1914.512382] Call Trace: [ 1914.512774] dump_stack+0x107/0x167 [ 1914.513303] should_fail.cold+0x5/0xa [ 1914.513866] ? create_object.isra.0+0x3a/0xa30 [ 1914.514527] should_failslab+0x5/0x20 [ 1914.515075] kmem_cache_alloc+0x5b/0x310 [ 1914.515665] create_object.isra.0+0x3a/0xa30 [ 1914.516310] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1914.517054] kmem_cache_alloc_bulk+0x168/0x320 [ 1914.517728] io_submit_sqes+0x713e/0x8780 [ 1914.518331] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1914.519052] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1914.519442] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1914.519765] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1914.519783] ? find_held_lock+0x2c/0x110 [ 1914.519803] ? io_submit_sqes+0x8780/0x8780 [ 1914.523482] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1914.524194] ? wait_for_completion_io+0x270/0x270 [ 1914.524910] ? rcu_read_lock_any_held+0x75/0xa0 [ 1914.525573] ? vfs_write+0x354/0xb10 [ 1914.526117] ? fput_many+0x2f/0x1a0 [ 1914.526636] ? ksys_write+0x1a9/0x260 [ 1914.527181] ? __ia32_sys_read+0xb0/0xb0 [ 1914.527780] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1914.528538] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1914.529289] do_syscall_64+0x33/0x40 [ 1914.529824] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1914.530549] RIP: 0033:0x7f9b78b4bb19 [ 1914.531078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1914.533736] RSP: 002b:00007f9b760c1188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1914.534837] RAX: ffffffffffffffda RBX: 00007f9b78c5ef60 RCX: 00007f9b78b4bb19 [ 1914.535676] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1914.536711] RBP: 00007f9b760c11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1914.537550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1914.538589] R13: 00007ffe648829af R14: 00007f9b760c1300 R15: 0000000000022000 01:23:51 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:23:51 executing program 4: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x200000) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091", 0x4e}}, 0x0) [ 1914.638876] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1914.640177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1914.641254] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1914.646974] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1914.679745] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1914.681416] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1914.684477] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 01:24:11 executing program 1: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x14) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000004, 0x32, r0, 0x0) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)="3b9a73a9c0cc18bbca4d2a39e32561ed7fabf32532b70c54cb7f02a21693c89fb154fc685cddcb2be03d5157a427476429a791108896e4953c10858313f8", 0x3e}, 0x1, 0x0, 0x0, 0x200408c0}, 0x44000) 01:24:11 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 4) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091cd3476bae3a05bae56ab34bcbeff5ddd1d8a65bc022525b413d13bc1a620d628d0ac0cfe3ca26247450c82d3f2f6bc0c2a5c", 0x80}}, 0x14) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x9, &(0x7f0000000140), 0x1, 0x1}, 0xa33) 01:24:11 executing program 5: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x8, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x224880, 0x100}, 0x18) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r7}}, 0x5) syz_io_uring_submit(r3, r2, &(0x7f00000003c0)=@IORING_OP_WRITEV={0x2, 0x2, 0x4007, @fd=r4, 0x4, &(0x7f0000000280)=[{&(0x7f00000001c0)="e2926a28071451acb7e6b19accc41128d80599cf8459fb1cd775874d6fb712dfafc0dd1353f66cfe5b63ca27a5707964b01c7535082e36e1aa4ffa98a0ab77e508400cb94e7720dbba06d4ed220a", 0x4e}, {&(0x7f0000000240)="531dcf39b7c46f77f43b741371b146b682462799adf39de3deef5b052fb27e920fab291d9e0111424a82", 0x2a}, {&(0x7f0000000340)="15a130bca4a4e89a467f12119a4c990556e2913f54b9f97c4b37b07b1ce576feab1f4150e7f8ab88209ebc52a591d92cd632542db46c4e152386ecf5189f79823cc6c9e3b5c2d2cf59cc4588dc771eaf6fe2d3", 0x53}, {&(0x7f0000000480)="6da74859de0849d25038b88c7e6ba29623c2a9bb6aaf7e5d2b4a796ecb751e9255584a55fb311550903737c1673438c9bfeeaab34840b3537ec814e81598f1d889ae4ebaeb5b02a686cb1415c5251eaa69e0aa15ed74bf593edda87eec36d52e57b8b46cad158c37e38c7cdf038d9585f07d6ee6acf4cc3cfc34276616eb714a8f85811bfb51ab8fe8d1a7624c8ef8edb93b6e79321188cf76d7e44170c071c5ca1894899a40880f913a8871850a69e0b9caa5a8adb1713879c5993e", 0xbc}], 0x4, 0x8, 0x1, {0x3, r7}}, 0x1000) 01:24:11 executing program 3: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000000000000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:24:11 executing program 4: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x400000) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091", 0x4e}}, 0x0) 01:24:11 executing program 7: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1ff, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:24:11 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2400000010000100000000ec0000009600000900050000000000000005000080480000006fe884b7f11ac8f1810d0dc930b7fbbdfe445812bd4e3ddf303ed7320b364ab5ef9768d0c54531c0e48e8b51a2f78d54f00d9cdd3a5569eaaaf9d57fd007e7eff61a89507780518151cc0bb52f615f18e044c54fca953b368cc61d149f11066c74aac60fe6c088582777cddc52bd82c5ef927b1c475f2e339546488ff742ba361f30616ba6000013203bece0c63d63d44a2d8033a9f2319b5d7e75aed01f84fbba37b71774867fc770eb6690f7a3c3e0d63d75b35925d7980ce0513e1600a3b9b86344041999a73312ac34f870e770a7124542c63a0febe8281dfa46ca86343801872702c3c16a7816d215b6c8b12d910177eed40ffd341132a1e8e19120405d7896"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:24:11 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1934.279432] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1934.307170] FAULT_INJECTION: forcing a failure. [ 1934.307170] name failslab, interval 1, probability 0, space 0, times 0 [ 1934.309162] CPU: 0 PID: 10530 Comm: syz-executor.2 Not tainted 5.10.260 #1 [ 1934.310322] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1934.311719] Call Trace: [ 1934.312173] dump_stack+0x107/0x167 [ 1934.312799] should_fail.cold+0x5/0xa [ 1934.313434] ? create_object.isra.0+0x3a/0xa30 [ 1934.314191] should_failslab+0x5/0x20 [ 1934.314830] kmem_cache_alloc+0x5b/0x310 [ 1934.315519] create_object.isra.0+0x3a/0xa30 [ 1934.316266] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1934.317128] kmem_cache_alloc_bulk+0x168/0x320 [ 1934.317898] io_submit_sqes+0x713e/0x8780 [ 1934.318606] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1934.319415] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1934.320245] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1934.321058] ? find_held_lock+0x2c/0x110 [ 1934.321740] ? io_submit_sqes+0x8780/0x8780 [ 1934.322467] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1934.323261] ? wait_for_completion_io+0x270/0x270 [ 1934.324053] ? rcu_read_lock_any_held+0x75/0xa0 [ 1934.324825] ? vfs_write+0x354/0xb10 [ 1934.325449] ? fput_many+0x2f/0x1a0 [ 1934.326047] ? ksys_write+0x1a9/0x260 [ 1934.326685] ? __ia32_sys_read+0xb0/0xb0 [ 1934.327364] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1934.328248] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1934.329105] do_syscall_64+0x33/0x40 [ 1934.329720] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1934.330572] RIP: 0033:0x7f9b78b4bb19 [ 1934.331191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1934.334226] RSP: 002b:00007f9b760c1188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1934.335482] RAX: ffffffffffffffda RBX: 00007f9b78c5ef60 RCX: 00007f9b78b4bb19 [ 1934.336679] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1934.337846] RBP: 00007f9b760c11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1934.339021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1934.340203] R13: 00007ffe648829af R14: 00007f9b760c1300 R15: 0000000000022000 [ 1934.345735] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 01:24:11 executing program 1: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) r3 = syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) io_uring_enter(r3, 0x27d9, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x1705, 0x4fbc, 0x0, &(0x7f0000000140)={[0x6a3f]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x14) [ 1934.413210] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1934.414591] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1934.415804] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1934.454820] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1934.455971] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1934.457248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 01:24:33 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:24:33 executing program 5: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x10000, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000180)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x4007, @fd=r4, 0x0, 0xfffffffffffffff8, 0x4, 0x12, 0x0, {0x3}}, 0x7fffffff) 01:24:33 executing program 4: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x20000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091", 0x4e}}, 0x0) 01:24:33 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091cd3476bae3a05bae56ab34bcbeff5ddd1d8a65bc022525b413d13bc1a620d628d0ac0cfe3ca26247450c82d3f2f6bc0c2a5c", 0x80}}, 0x14) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x9, &(0x7f0000000140), 0x1, 0x1}, 0xa33) 01:24:33 executing program 3: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xffffffff00000000) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:24:33 executing program 1: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x3, 0xff, 0x1, 0x29, 0x0, 0x8, 0x400, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x81, 0x4, @perf_config_ext={0x2, 0xfff}, 0x800, 0x8, 0x5, 0x5, 0x3, 0x5, 0x3, 0x0, 0x1f, 0x0, 0x731}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0xf) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0) pread64(r4, &(0x7f0000000240)=""/13, 0xd, 0x8) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x14) [ 1956.601058] FAULT_INJECTION: forcing a failure. [ 1956.601058] name failslab, interval 1, probability 0, space 0, times 0 [ 1956.602698] CPU: 0 PID: 10555 Comm: syz-executor.2 Not tainted 5.10.260 #1 [ 1956.603691] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1956.604887] Call Trace: [ 1956.605057] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1956.605263] dump_stack+0x107/0x167 [ 1956.605280] should_fail.cold+0x5/0xa [ 1956.605297] ? create_object.isra.0+0x3a/0xa30 [ 1956.605310] should_failslab+0x5/0x20 [ 1956.605323] kmem_cache_alloc+0x5b/0x310 [ 1956.605337] ? mark_held_locks+0x9e/0xe0 [ 1956.605359] create_object.isra.0+0x3a/0xa30 [ 1956.611090] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1956.611808] kmem_cache_alloc_bulk+0x168/0x320 [ 1956.612464] io_submit_sqes+0x713e/0x8780 [ 1956.613048] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1956.613746] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1956.614448] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1956.615129] ? find_held_lock+0x2c/0x110 [ 1956.615707] ? io_submit_sqes+0x8780/0x8780 [ 1956.616328] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1956.617007] ? wait_for_completion_io+0x270/0x270 [ 1956.617687] ? rcu_read_lock_any_held+0x75/0xa0 [ 1956.618336] ? vfs_write+0x354/0xb10 [ 1956.618858] ? fput_many+0x2f/0x1a0 [ 1956.619375] ? ksys_write+0x1a9/0x260 [ 1956.619919] ? __ia32_sys_read+0xb0/0xb0 [ 1956.620509] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1956.621246] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1956.621973] do_syscall_64+0x33/0x40 [ 1956.622502] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1956.623220] RIP: 0033:0x7f9b78b4bb19 [ 1956.623743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1956.626340] RSP: 002b:00007f9b760c1188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1956.627411] RAX: ffffffffffffffda RBX: 00007f9b78c5ef60 RCX: 00007f9b78b4bb19 [ 1956.628418] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1956.629417] RBP: 00007f9b760c11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1956.630410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1956.631400] R13: 00007ffe648829af R14: 00007f9b760c1300 R15: 0000000000022000 [ 1956.648347] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. process_madvise(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000340)="d23fd2ca2640c0c5d603616da9413110a2cb05710370bdad3e91a08ddcad0c079e2c74874fc55cca5bdaae3afff09eb62f96b232e795d544c8b829823499836af3704d1bf2c3fd5b7dee0e", 0x4b}, {&(0x7f00000003c0)="3cb699e8f1718c856b181cd3d157ae1beb49af0a31436c33dccec8d138e95906d17c5bfe5f85fc1a647500d373daf79de41793ad90a06f0a3cdd494c194808a461a034e9e7a0e092f7cd8824ec1c581fc900c960968781d2361b9c73b97968b8fb22804d3a827705fd250be5", 0x6c}, {&(0x7f0000000480)="dbb5bfbb2ba684ce5cd18304f8e9fb9d3357f2a8931373179143da8c6abdc8e4cc44d4563be9ae56f9f7b59e2bf81008803dee82b6f82fe03b2b4f20fba25c7694b50f2594146a20c8e7ff888705303844f2fb470719d099fb614d8ae19a664bd93a4edece3f2a97ec6ce906b54b0e24e95e1ad89806a5cafb8e2d4ba35cb72e80db379dd7d7dec0454ce7bb6e426d0b84b63b63cc7703956e6fe4b6a22cd8dae4b5208ac61ab0a711c51587e9ab735f3a3077bc59831bc0611c409e7dcc7c18afd73d749c001eadc725add7a274f30289a7c1f02cb3ce32fb059b0d5298989b018ef14994b05c0704537a046f6845e68e25fe06b0f381e461c2068579fcbd9ff00e5896609d1f2447013e3688b8c2b465e639558d3953f6de5179943e818281acd266061c662fa1bd2e19340888f7849359f4a2c7edc4847f623ce1620b4e4d8f50c1a0d56f65daf36380e1925db9fb4c7123a34f9af274d6aee00e7c1c800e23e0a414962deb29fc7b3b2c5397e264751c814c09272092221b9f116576febcbd5f0ca66549dc12d8f39f706b4d1dc68f0492fdd41fa0ea4ccf0afe2e5e2ad8b8d0897b36969e43563345e8170fd61a0bf458ec8f371e2065be03a7287787206c42cea331e0d3e01c2b781a4cb8cc6cb66506d426cfe8b4820cee660124a88c86f49a323d48a6912f5783891ccebf04d8b828d93b063ce1721c6f4dd5c61661d2d7d40837f460b5c12f8bd7be6356c3706d6957f5e5993a89bc0111a962b060987c7ae7e52ea95d32bb9ac5ae868a26e24c074fedbd47c1998bb63e2124e0164e932254384f6e96bb9afeaf9bdb730649b1d00eda57e66ad8196f6667114d95b00b2c4e4ad3684e465ab2d8f877bab365168938280a457d6cd608a5e91c7baea94a72bd36b77e1989d8bacb09757e7ff9abe2c39f9429183d28139a12c8c4b27b9f2927123f3f68d24b5791035f976ecbb4179094073099a5a4bd27827e5bb05459d3262cbace0a8d4ec5b9f3369c707f861a66aad6abce6e4a771b7704e64c48ee03ddac05902d006ac75ca96e2f2d43c15766a941de1401140d25b6f4a8a4b9f942eef4ebad4ea788a459f84926519149942d8c53b4c1d201cd09a43a7b069aaee206581393615f3694a3859d6539075a6ca79ab360a563cec9ed5d46228cb5d3969bff49c54b15138f26a6670b6e3c4d99d348b933d059c21f78ac587b6414a24730abfa7b2d6b164ff71e2ac6b37bea61ba889dca46a0bfeef15a7af96686cc1da59e57ac03ab860b102ee1a10e089dec3aaafa3cfd7cc5b91cd657c30dcfbb4cb732046f1c7bbe0aa6f8cbc310239f4379c104b31517b25ad3ae836dbb4f6fc9aebe7f302c15e0d010be65e2d1ccd6a6dd4e4d4cf1262d5f2a30f1f359d08c2c80b087e884c10ebae36995ca7650dbebd7fd4cefdcfc0a68f6bbd346e8fecc3c8efd4785344746fd24358d0eb49811e5d226120c120dab30ccd0806a92935fedc50e6033d1ec4a1c1ac170a7326ca18308d540c8156e4d9d95c82e29ec2da18daaef404590fce658e5bc1c4afa45ddadd1a23c2b3768856065ecbcc8dd461056d1c7a86ff5ffe499dddc021bebd27df93d16453405ea6d28f95acf8b5e2ff6d146e931fbfc023a849c78e5a1dcb38d1c0a63e619458e62c42c350ef7efa22bf224891991f7987b7554f84a5d0cbf9fca270e186e4735eb2472b84660741c50ed8d4c2a53f96fc98b524b6837d3d2d8a8f2b804fc9d031d86ba2c3a148b1b3f93dc94cc67d5c9e1f8699faf70ec05b24fcb15d99f26acd5a9cdab2d4746167a02fe163cb4c127549c6b565241119d155dd1952de12ad9046e7fa2903d630e6c38128cf41d9961d26423036cf0ea18aec6989cb92ea21b6466931fa8bdef206f7f2f0e656ec87f35aa4603f85b6dae850836ebcd5446a5090c0eda64c004f388cca1bc508bd2c00cde59ae120e5a27da3ee2247b6941f7cdee3d185709b59ab4835251a9a7943b7e10ae96c00892b99c9d6bfa4ad65ecbcc28e1e29a7156b049281c5428312e581e886a93417d333c3cfe3adebde9eab9b7f421ad73ae71af07d075218a46da5e85e3439c7ef9dc5e7d0a762a1671f3b85ebbe5cd45cfbda0ef7e47496407a8230e2eb49bcd491c29087a3ed7d0cae39a82fecfc062bd40a8516981cf85f51be4b77ba1986f3d6be559f3c403c952cb7382284befc40e918167c41c50c65af70baa152de585610939b449865fd8e644c6c0fc9415f6c6c177442e761f853df0b0d647cf29e91e0dcb0c467c7bfd426bd3e82c66194ae15939eb14067e71029b8da22e419be9195916d95af2b3c963987df0d9afd919a4a1b914a04c42584c568c13e8afaebf8a75561ebd599219bf15e2d814d8dcc0ad363446468cac40dad34523b2e4fe2d95b6345d1acb587f6099b3b98375275c1ec444920ec6e34eb3e9cf5394d024c85f81efa845e7bb568f3147867f3d1227dd29d230c3f4a82613742e3cfb33ca6f21824abcf9e12d62aa950ae73b64c393bdec471c2d045868c8625f10d7f6191e6f7ce07278789a3ecd2b06092933e7f9e35abbd3e640ee56c3c295ffd473b42797e06929597c204d635d1591644268fa117d49cd91de53c6adaf25bf299c4386e3cb73c610444fbfaceac559a3f3fc702f3488cd0a5db830bf6abf6f5482b85b5c7e6f97bcaa33609bdba0fc22d0d1d84c27c64eebe6e7d162c46ae214dc1cca03bc4f80ad3c0671fa68baf2a707586bafaae4d54dcbbf01e23f4b8c1f17d1382d5bbc3d7d3259008780dd51318d49bf31893f00fed71be45221a69213328735b6469e827533424c8faab7bd91ad282d7ef93573fb969163ebcbaf583515fe1bba96c56f9cbe3e7f84df40561edecd3cc5d1cb73d84e0a5e9002b49251cea541c6fa2946560cc2425382195331846ac8901e84b0e89a03e0192bb0e94cc5b1e0d642d7c64911575f4a7c2151e4a2b883e437cfe770a2e128f5866c44450010b1173b86c30c68af1daa4832248eeaff00c68b1cdd48dfc945da90a140fa3c623adb158d7b910d270bfc33ece7bb4447c7ecdee533b40d708e58a785b629085633e285dc10d54bbfcd15298467772ad2e28b7a017ef7ccc24461ab3f02c1d0f076797ab62b51c9c8016cb52878f23862b2926746d143fca35b9c14220b92cd766218476299f3b1a07e7cd0127f42ec4b2cd6705a3fcfb88b8fa31bbe9f6d3f6db2a2d517f2cc8eaf5178cda4c33111d6ab52efdd0bfc48fe1852ca02f33b1d0b62f3fa2ee63e31cd6bf844bc3708782bc4050a8c370c3a5a752c23d5ae24564dc9497fc7c998a3f1931160b22f275eed8e09a8729bbaf1376bd379b91c84af11d9052ff4c8c99d058bbd006ea7a80993cd9e5f57b3c764d1778009590a1aa7086e7da6fd9556e21e9671e19aca74e236469597e874bc7f64eace9132c15b6f6bdea755073fb0d55ad4ec6d38eaf8920267b12c536dee28116d7d3be9ae04bbb0b6aeff4111c2478b6e2f2704e3f6be4120ab0148c0880af9886b2b257cfbab93be3001ff037b775c3f373d1144dc64a6c28adf964e80da820342e7b3275c5fb74fe926f0087cd62986f85e0e66a7c5aa1c5c87aa65bd8b8f9191c459c3db024904070e2c5a3e564985992f1b348084dc3dec32fb2cbd5915208c9ed7cf698faee10aa48d026a4f86e920e3e1675c4c83cbc27ef3c2602907dc5ec1b9e7452579a825cf180f59f871bc4a13cfd7fa52ebd7abd1a2cc17d4fc968e7293bf764e4a5ac7c7a5aebf89a724f99a5d8a8f8470998d0257e52f59c337c122cae69026c30c896c5d328613deae67efe2176313f24f16763d78e191fd505b58b27eea084419a237ef5fd59e46bbb6af5f779803bc7741cbdd89f18b8d66ffd067ff2058f91c36397ddaceaf16f6bb5713e0c042727f9c1635b310eb05b4e7bcf33b4c3298894866ef6b993fa8982dc74e2a512f4142caeaa4e8d43e1a8b313761d037983c249713b3fc2e868dfb46b93c4cfb3db4dc6c4edf6f56e2b2e69abb3aae01f6e6f5854ecbeede5ed791f09e1e19bcb5bb845265e35dbbf6de2a05de834fa6c9ff26a0da71bf500f7a80a90385eaf91cd1cc9702db14575811c3864c070af406b5dfd1d9b8e0fee43ff4db4aa99b38a2124f6454feb2e819ffd347cf4981e0dc4eb91855ccef8921ecd5987451f2457eb5cdb4fb081724bd7eb227200b67c675edf87e0b3f0716e71dbb50c9005a877dd6e278faebb7c4a615c6c50fba7a1fa172391d3e60336c1021fe47999bdce1569f8eb41fae3959329ae487ed196e4f2b211ad5a455e6886bc0f1221fa6ebcd4f9a4ab59cd4de94abac25d3167553e501e5f0420cfc662f60ad49b2361a578e78b9e825e0d43b07280ef8276c3537f88ffce5dd6b515be6b322e923ac001713a7b970d41b9d4cc961611a79a3c67b787305a5aa436d5f34e57cd68813452a1551e65cad4b3f2e4be0a10b4403c660ec4221d8dac35d196ba1ddaaf2a180878fd143a111cd06753a1405cc93b219132ae6841cf3f25769016f031fb72937a5ce64a810380b182c1890fd4b97525c9718be26da9ccd0a61109579c8c6f7f706b9b24c99ca21d856db137dab2de38877a8d1d79ea91ea8ab416bcb0f61229a49fe8f3a003c7424908d2f48e32012802c02a56228fa1151344c38e001d36a047c82427b3890131d377786bb1b4ad49e91f411683d82a5fba97dda6762d5328e0e56a17826bb1f96eef1bcc7ac1a1a353ab08795ef21a3baa2eb1e1eca503a4cf6796b0f99fb131f6147ec6809a616e74d49ab3002d7c487378b72f98fe1c8ce17aabab6d08f4f2b429e4e70ad0ee9e37cc251767e6f60486eb5d8dbe8c58150c29ea11e8d26ba32b3fc1d8778662d50827e75c6c8efddbbe4d412a5f66bb2ccd6c9e66bd681d750125fe09909fe3a78dd6fcd8a49eba9cb693c9311a74e1c3c55b4e98abddd77e262b921580015cd02ec0c6e911e728202d63b1a0758f5d67fc119ba213cf3a8d090c5403f13dfaaa47a264c4953550864adb17904e1577205c5aab7721724032876f1cbea0821dfd2cbf2703bfa43d01a341e95410ce44b2f250ecaf4e1376d5cc05092a12c718facadb0c9db96651c5202ff13bb0f46b6f617914f16490ecfdc13d48602a6b869a99c229a85e53d51f9a8cd07dd8a294c01b59ce3f6e69eaba31be23898cca5571bb41990abf8dc8cb55ba34b9823e4284172f47b399b5e439c5097c4d10354fbb848519b86fcf9771619661e06aa246644632a37e69ae48d298546362c1f9a312e4549ce8b1619ef3684f7dcb7221d43658d2f552938952bd81749dd9f55ab157d2998d5c165813a914d0397cc4ba2965591bd500fa3eb79f83cea40e69b0a0feaa9a79dd7152f4a12d2ffc860f73c164f72dfce5d815f6d357d3eafc59b33b40a1d84d1920fe52f64380b6b94b0ff19e58b7d3e09051b1b26f6479b406ef06dc2d7f7e6699effdf189d2b1ba2024f0bd9ab3deac9170b8aacdf3147f7db22c6e2f9bdf377115a5f03294cb587d611bde62bde9dd315f85b89712e8822285fc7ddf6c60420788b9a5520f5499b6dff3366725592b76618727ba7186af8b33d1963f1fa896b5b3e18e5876eb58f223ea1f132b36134821019d95d05ce28adc00cb38e0f5b3abe5f6cc4b5f83fc50ee76848d800009e1b654531d4d3678ac50c01c028dfa5d39899de998ef025c564d6fbd71ccab663e820b3ed8e6a8b103279f219d3078419ff80a75ecc4f9037524ed7e5b390127359ec80", 0x1000}], 0x3, 0x11, 0x0) r5 = open(&(0x7f00000001c0)='.\x00', 0x400, 0x10) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r5) 01:24:33 executing program 7: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r6}}, 0x5) socket$unix(0x1, 0x2, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd, 0x0, 0x0, 0x7ff, 0x0, 0x1, {0x0, r6, r7}}, 0x0) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r10 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r10, 0x0}, 0x0) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r13 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r13, 0x0}, 0x0) syz_io_uring_submit(r8, r12, &(0x7f0000000140)=@IORING_OP_FALLOCATE={0x11, 0x3, 0x0, @fd=r0, 0x594}, 0x1) 01:24:33 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1956.733762] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1956.734849] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1956.736200] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 01:24:33 executing program 1: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000180)=0x14) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="4000fcef", @ANYRES16=0x0, @ANYBLOB="000828bd7000fc390cb5f61200000800040008000500050000101c0002807ba75512320800031a0300052b465b5a3d0000b815ae1724d788528ff2af610fcbc0b3ec93a030b4fc5871f91e163bd4b5084f9d82f1850bf50200df6268ee86dc7dbea6cf81f5066ae4ea9913644fbe62ced4819471e12171f55c726dab88874b5399"], 0x40}, 0x1, 0x0, 0x0, 0x8804}, 0x40040c0) fsmount(r5, 0x0, 0x8) lseek(0xffffffffffffffff, 0x80000001, 0x1) ioctl$BTRFS_IOC_GET_FEATURES(r4, 0x80189439, &(0x7f00000001c0)) preadv(r5, &(0x7f0000001580)=[{&(0x7f0000000500)=""/4102, 0x1006}], 0x10000000000001c7, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10f6e2, 0x0) r6 = signalfd(r4, &(0x7f0000000100)={[0xd9]}, 0x8) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r6, 0x8040942d, &(0x7f0000000140)) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x14) [ 1956.745967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1956.747713] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1956.749559] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 01:24:33 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 6) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091cd3476bae3a05bae56ab34bcbeff5ddd1d8a65bc022525b413d13bc1a620d628d0ac0cfe3ca26247450c82d3f2f6bc0c2a5c", 0x80}}, 0x14) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x9, &(0x7f0000000140), 0x1, 0x1}, 0xa33) 01:24:33 executing program 4: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x20000000000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091", 0x4e}}, 0x0) 01:24:33 executing program 5: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x47e2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(r4, 0x1000003) dup2(r4, r5) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x80009}) fsetxattr$security_capability(r4, &(0x7f0000000040), &(0x7f0000000080)=@v2, 0x14, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000000c0), 0x2}, 0x0, 0x80000000, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_script(r5, &(0x7f0000000300)={'#! ', './file0'}, 0xb) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1956.829656] FAULT_INJECTION: forcing a failure. [ 1956.829656] name failslab, interval 1, probability 0, space 0, times 0 [ 1956.831410] CPU: 0 PID: 10579 Comm: syz-executor.2 Not tainted 5.10.260 #1 [ 1956.832272] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1956.833259] Call Trace: [ 1956.833596] dump_stack+0x107/0x167 [ 1956.834023] should_fail.cold+0x5/0xa [ 1956.834492] ? create_object.isra.0+0x3a/0xa30 [ 1956.835028] should_failslab+0x5/0x20 [ 1956.835501] kmem_cache_alloc+0x5b/0x310 [ 1956.835979] ? mark_held_locks+0x9e/0xe0 [ 1956.836491] create_object.isra.0+0x3a/0xa30 [ 1956.837033] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1956.837673] kmem_cache_alloc_bulk+0x168/0x320 [ 1956.838241] io_submit_sqes+0x713e/0x8780 [ 1956.838745] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1956.839360] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1956.839946] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1956.840519] ? find_held_lock+0x2c/0x110 [ 1956.841023] ? io_submit_sqes+0x8780/0x8780 [ 1956.841559] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1956.842162] ? wait_for_completion_io+0x270/0x270 [ 1956.842756] ? rcu_read_lock_any_held+0x75/0xa0 [ 1956.843293] ? vfs_write+0x354/0xb10 [ 1956.843751] ? fput_many+0x2f/0x1a0 [ 1956.844194] ? ksys_write+0x1a9/0x260 [ 1956.844669] ? __ia32_sys_read+0xb0/0xb0 [ 1956.845145] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1956.845751] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1956.846384] do_syscall_64+0x33/0x40 [ 1956.846839] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1956.847465] RIP: 0033:0x7f9b78b4bb19 [ 1956.847919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1956.850170] RSP: 002b:00007f9b760c1188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1956.851100] RAX: ffffffffffffffda RBX: 00007f9b78c5ef60 RCX: 00007f9b78b4bb19 [ 1956.851962] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1956.852841] RBP: 00007f9b760c11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1956.853719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1956.854590] R13: 00007ffe648829af R14: 00007f9b760c1300 R15: 0000000000022000 01:24:33 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1956.919607] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 01:24:33 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:24:33 executing program 3: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) fcntl$getflags(r0, 0x40a) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) r4 = io_uring_setup(0xa63, &(0x7f0000000140)={0x0, 0xe549, 0x4, 0x1, 0x263, 0x0, r0}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000000, 0x10, r4, 0x8000000) [ 1956.950038] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. 01:24:33 executing program 1: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x278) sendfile(r4, r5, 0x0, 0x100000001) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000200)={0x80002000}) chown(&(0x7f0000000140)='./file0\x00', 0xee01, 0xee01) r7 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x13, r0, 0x8000000) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x14) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x10010, r4, 0x10000000) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$nfs(&(0x7f0000000240), &(0x7f00000000c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYRES32=r7]) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r8, 0x8982, &(0x7f0000000180)) 01:24:33 executing program 7: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) [ 1956.978026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1956.978884] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1956.979806] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 01:24:33 executing program 5: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) r3 = syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) io_uring_enter(r3, 0x27d9, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x80010, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 01:24:33 executing program 3: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) io_uring_enter(r1, 0x27d9, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x70b, 0x3ae4, 0x2, &(0x7f0000000040), 0x8) syz_io_uring_submit(r0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:24:33 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1957.056007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1957.056905] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1957.057839] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1957.084489] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1957.101485] FAULT_INJECTION: forcing a failure. [ 1957.101485] name failslab, interval 1, probability 0, space 0, times 0 [ 1957.103706] CPU: 0 PID: 10610 Comm: syz-executor.2 Not tainted 5.10.260 #1 [ 1957.104512] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1957.105461] Call Trace: [ 1957.105771] dump_stack+0x107/0x167 [ 1957.106192] should_fail.cold+0x5/0xa [ 1957.106635] ? create_object.isra.0+0x3a/0xa30 [ 1957.107168] should_failslab+0x5/0x20 [ 1957.107606] kmem_cache_alloc+0x5b/0x310 [ 1957.108073] ? mark_held_locks+0x9e/0xe0 [ 1957.108550] create_object.isra.0+0x3a/0xa30 [ 1957.109053] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 01:24:33 executing program 4: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x40000000000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091", 0x4e}}, 0x0) 01:24:33 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 7) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091cd3476bae3a05bae56ab34bcbeff5ddd1d8a65bc022525b413d13bc1a620d628d0ac0cfe3ca26247450c82d3f2f6bc0c2a5c", 0x80}}, 0x14) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x9, &(0x7f0000000140), 0x1, 0x1}, 0xa33) [ 1957.109790] kmem_cache_alloc_bulk+0x168/0x320 [ 1957.110354] io_submit_sqes+0x713e/0x8780 [ 1957.110833] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1957.111405] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1957.111979] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1957.112550] ? find_held_lock+0x2c/0x110 [ 1957.113024] ? io_submit_sqes+0x8780/0x8780 [ 1957.113528] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1957.114089] ? wait_for_completion_io+0x270/0x270 [ 1957.114646] ? rcu_read_lock_any_held+0x75/0xa0 [ 1957.115180] ? vfs_write+0x354/0xb10 [ 1957.115612] ? fput_many+0x2f/0x1a0 [ 1957.116036] ? ksys_write+0x1a9/0x260 [ 1957.116485] ? __ia32_sys_read+0xb0/0xb0 [ 1957.116957] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1957.117563] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1957.118158] do_syscall_64+0x33/0x40 [ 1957.118589] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1957.119179] RIP: 0033:0x7f9b78b4bb19 [ 1957.119606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1957.121728] RSP: 002b:00007f9b760c1188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1957.122602] RAX: ffffffffffffffda RBX: 00007f9b78c5ef60 RCX: 00007f9b78b4bb19 [ 1957.123421] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1957.124249] RBP: 00007f9b760c11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1957.125064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1957.125879] R13: 00007ffe648829af R14: 00007f9b760c1300 R15: 0000000000022000 [ 1957.173174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1957.174029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1957.174945] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 01:24:34 executing program 7: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(0xffffffffffffffff, 0x55e, 0xa34e, 0x3, &(0x7f0000000140)={[0x9]}, 0x8) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:24:34 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 8) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091cd3476bae3a05bae56ab34bcbeff5ddd1d8a65bc022525b413d13bc1a620d628d0ac0cfe3ca26247450c82d3f2f6bc0c2a5c", 0x80}}, 0x14) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x9, &(0x7f0000000140), 0x1, 0x1}, 0xa33) 01:24:34 executing program 3: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$nfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRES32=r3]) fadvise64(r3, 0x8ed, 0x80, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, r5, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7, 0x7f, 0x9, 0x2, 0x0, 0x2, 0x0, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x3f, 0x7f}, 0x200, 0x1, 0xfff, 0x7, 0x9042, 0x3ff, 0x5, 0x0, 0x2f1, 0x0, 0x9}, 0x0, 0x9, 0xffffffffffffffff, 0x2) [ 1957.287834] FAULT_INJECTION: forcing a failure. [ 1957.287834] name failslab, interval 1, probability 0, space 0, times 0 [ 1957.289392] CPU: 0 PID: 10622 Comm: syz-executor.2 Not tainted 5.10.260 #1 [ 1957.290188] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1957.291143] Call Trace: [ 1957.291514] dump_stack+0x107/0x167 [ 1957.291969] should_fail.cold+0x5/0xa [ 1957.292432] ? create_object.isra.0+0x3a/0xa30 [ 1957.292956] should_failslab+0x5/0x20 [ 1957.293394] kmem_cache_alloc+0x5b/0x310 [ 1957.293858] ? mark_held_locks+0x9e/0xe0 [ 1957.294327] create_object.isra.0+0x3a/0xa30 [ 1957.294831] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1957.295419] kmem_cache_alloc_bulk+0x168/0x320 [ 1957.295947] io_submit_sqes+0x713e/0x8780 [ 1957.296434] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1957.297005] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1957.297574] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1957.298135] ? find_held_lock+0x2c/0x110 [ 1957.298610] ? io_submit_sqes+0x8780/0x8780 [ 1957.299108] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1957.299635] ? wait_for_completion_io+0x270/0x270 [ 1957.300159] ? rcu_read_lock_any_held+0x75/0xa0 [ 1957.300664] ? vfs_write+0x354/0xb10 [ 1957.301092] ? fput_many+0x2f/0x1a0 [ 1957.301487] ? ksys_write+0x1a9/0x260 [ 1957.301927] ? __ia32_sys_read+0xb0/0xb0 [ 1957.302396] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1957.302998] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1957.303590] do_syscall_64+0x33/0x40 [ 1957.303997] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1957.304596] RIP: 0033:0x7f9b78b4bb19 [ 1957.305025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1957.307132] RSP: 002b:00007f9b760c1188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1957.308008] RAX: ffffffffffffffda RBX: 00007f9b78c5ef60 RCX: 00007f9b78b4bb19 [ 1957.308836] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1957.309657] RBP: 00007f9b760c11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1957.310487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1957.311303] R13: 00007ffe648829af R14: 00007f9b760c1300 R15: 0000000000022000 [ 1972.004895] FAULT_INJECTION: forcing a failure. [ 1972.004895] name failslab, interval 1, probability 0, space 0, times 0 [ 1972.006394] CPU: 1 PID: 10639 Comm: syz-executor.2 Not tainted 5.10.260 #1 [ 1972.007140] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1972.008026] Call Trace: [ 1972.008337] dump_stack+0x107/0x167 [ 1972.008732] should_fail.cold+0x5/0xa [ 1972.009148] ? create_object.isra.0+0x3a/0xa30 [ 1972.009642] should_failslab+0x5/0x20 [ 1972.010056] kmem_cache_alloc+0x5b/0x310 [ 1972.010507] ? mark_held_locks+0x9e/0xe0 [ 1972.010991] create_object.isra.0+0x3a/0xa30 [ 1972.011512] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 1972.012076] kmem_cache_alloc_bulk+0x168/0x320 [ 1972.012593] io_submit_sqes+0x713e/0x8780 [ 1972.013049] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1972.013590] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1972.014134] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1972.014658] ? find_held_lock+0x2c/0x110 [ 1972.015102] ? io_submit_sqes+0x8780/0x8780 [ 1972.015592] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1972.016115] ? wait_for_completion_io+0x270/0x270 [ 1972.016665] ? rcu_read_lock_any_held+0x75/0xa0 [ 1972.017164] ? vfs_write+0x354/0xb10 [ 1972.017580] ? fput_many+0x2f/0x1a0 [ 1972.017970] ? ksys_write+0x1a9/0x260 [ 1972.018393] ? __ia32_sys_read+0xb0/0xb0 [ 1972.018834] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1972.019402] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1972.019959] do_syscall_64+0x33/0x40 [ 1972.020371] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1972.020923] RIP: 0033:0x7f9b78b4bb19 [ 1972.021323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1972.023743] RSP: 002b:00007f9b760c1188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1972.024583] RAX: ffffffffffffffda RBX: 00007f9b78c5ef60 RCX: 00007f9b78b4bb19 [ 1972.025353] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1972.025877] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1972.026127] RBP: 00007f9b760c11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1972.026134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1972.026142] R13: 00007ffe648829af R14: 00007f9b760c1300 R15: 0000000000022000 01:24:48 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:24:48 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:24:48 executing program 1: ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x4, 0x80, 0x47, 0x3, 0x242492fb97a144e1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00', 0x7, 0x40, 0x2, 0xfffffffe}}) r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000006, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/9, 0x9}, {&(0x7f0000000340)=""/220, 0xdc}, {&(0x7f0000000480)}], 0x3) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x311c40, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="0800000ead6ea7490036de0000000000"]) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x14) 01:24:48 executing program 3: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x110, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4, {0x2}}, './file0\x00'}) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, {0x2}}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:24:48 executing program 4: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x2000000000000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091", 0x4e}}, 0x0) 01:24:48 executing program 7: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, &(0x7f0000000140)) 01:24:48 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 9) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091cd3476bae3a05bae56ab34bcbeff5ddd1d8a65bc022525b413d13bc1a620d628d0ac0cfe3ca26247450c82d3f2f6bc0c2a5c", 0x80}}, 0x14) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x9, &(0x7f0000000140), 0x1, 0x1}, 0xa33) 01:24:48 executing program 5: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_READ_FIXED={0x4, 0x5, 0x2007, @fd_index=0x5, 0x1f, 0xbd76, 0x1, 0x4, 0x0, {0x0, r4}}, 0x7) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) [ 1972.148998] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1972.161333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1972.163097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1972.163126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1972.163260] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1972.168307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1972.178784] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1987.276057] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1987.282807] FAULT_INJECTION: forcing a failure. [ 1987.282807] name failslab, interval 1, probability 0, space 0, times 0 [ 1987.282951] nfs: Unknown parameter '' [ 1987.285671] CPU: 0 PID: 10672 Comm: syz-executor.2 Not tainted 5.10.260 #1 01:25:04 executing program 5: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0)={0x0, 0xc577}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x3}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000200)=""/111, 0x6f}, {&(0x7f0000000340)=""/238, 0xee}, {&(0x7f0000000480)=""/146, 0x92}, {&(0x7f0000000540)=""/229, 0xe5}], 0x4, &(0x7f0000000640)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0x70}, 0x10023) r4 = syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) ioctl$EXT4_IOC_CHECKPOINT(r4, 0x4004662b, &(0x7f0000000740)=0x1) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r7, 0x0}, 0x0) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r10 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r10, 0x0}, 0x0) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r13 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r13, 0x8983, &(0x7f0000000780)={0x2, 'wlan1\x00', {0x3f}, 0x8}) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r13, 0x0}, 0x0) syz_io_uring_submit(r1, r12, &(0x7f0000000700)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0x4, 0x7fff, 0x0, 0x9, 0x5}, 0xffff) syz_io_uring_submit(r5, r9, &(0x7f0000000140)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x4007, @fd_index=0x5, 0xf9, 0xc, 0x73b6, 0x1}, 0xffffffd6) 01:25:04 executing program 3: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x4053, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x1eec, 0xffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:25:04 executing program 1: r0 = syz_io_uring_setup(0x1c26, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_CLOSE={0x13, 0x5}, 0xffc) syz_io_uring_submit(r3, r2, &(0x7f0000000380)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffff9c, &(0x7f0000000480), &(0x7f0000000180)='./file0\x00', 0x100, 0x1000}, 0x3) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)) io_uring_enter(r4, 0x27d9, 0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x7269, &(0x7f0000000580)={0x0, 0xf8a4, 0x8, 0x3, 0x2e9, 0x0, r4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)=0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$nfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRES32=r7]) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r10}}, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000280)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x40010100, 0x1, {0x2, r10}}, 0x101) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x2010, r4, 0x0) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x14) 01:25:04 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:25:04 executing program 4: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0xffffffff00000000) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091", 0x4e}}, 0x0) 01:25:04 executing program 7: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0xe, 0x4004050, r0, 0x0) syz_io_uring_setup(0x306, &(0x7f0000000140)={0x0, 0x7192, 0x2, 0x1, 0x16d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r8}}, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_TEE={0x21, 0x4df3a7cb01e9946e, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x9, 0x0, {0x0, r8, r0}}, 0x80000000) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:25:04 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) 01:25:04 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 10) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091cd3476bae3a05bae56ab34bcbeff5ddd1d8a65bc022525b413d13bc1a620d628d0ac0cfe3ca26247450c82d3f2f6bc0c2a5c", 0x80}}, 0x14) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x9, &(0x7f0000000140), 0x1, 0x1}, 0xa33) [ 1987.287888] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1987.287898] Call Trace: [ 1987.287931] dump_stack+0x107/0x167 [ 1987.287964] should_fail.cold+0x5/0xa [ 1987.287995] should_failslab+0x5/0x20 [ 1987.288017] kmem_cache_alloc_bulk+0x4b/0x320 [ 1987.288050] io_submit_sqes+0x713e/0x8780 [ 1987.288117] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1987.288137] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1987.288166] ? find_held_lock+0x2c/0x110 [ 1987.288197] ? io_submit_sqes+0x8780/0x8780 [ 1987.288228] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1987.288255] ? wait_for_completion_io+0x270/0x270 [ 1987.288281] ? rcu_read_lock_any_held+0x75/0xa0 [ 1987.288314] ? vfs_write+0x354/0xb10 [ 1987.288338] ? fput_many+0x2f/0x1a0 [ 1987.288358] ? ksys_write+0x1a9/0x260 [ 1987.288377] ? __ia32_sys_read+0xb0/0xb0 [ 1987.288405] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1987.288429] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1987.288457] do_syscall_64+0x33/0x40 [ 1987.288480] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1987.288494] RIP: 0033:0x7f9b78b4bb19 [ 1987.288514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1987.288526] RSP: 002b:00007f9b760c1188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1987.288550] RAX: ffffffffffffffda RBX: 00007f9b78c5ef60 RCX: 00007f9b78b4bb19 [ 1987.288563] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1987.288575] RBP: 00007f9b760c11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1987.288588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1987.288601] R13: 00007ffe648829af R14: 00007f9b760c1300 R15: 0000000000022000 [ 1987.302032] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1987.327998] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1987.328015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1987.328359] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1987.351981] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1987.376908] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1987.403046] nfs: Unknown parameter '' 01:25:04 executing program 4: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) io_uring_enter(r4, 0x3bf2, 0x2647, 0x0, &(0x7f0000000180)={[0xfb]}, 0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091", 0x4e}}, 0x0) 01:25:04 executing program 3: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) io_uring_enter(r4, 0x27d9, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000007, 0x40010, r4, 0x8000000) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800}, 0x108) 01:25:04 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1987.435629] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1987.462218] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 01:25:04 executing program 1: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000007, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x537d, 0xaed3, 0x0, &(0x7f0000000140)={[0x4]}, 0x8) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x14) [ 1987.505449] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1987.506360] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1987.507274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 01:25:04 executing program 7: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0xfff, 0x1, &(0x7f0000000140)="cdcb715e659ae7727a09183a58cd108b698b2de889ea7fee087102a59521498878ecb257b515473b826cb72d557d6fbdd04169d926b9b0f23594cf6c8f015792abe33c7272ab96ee385f99005b076bdb7b71066eb0ac460d2bef98fd65fbbf9e17f2e6551522531d430e466f0b266c384594150bef6c7fb767d5c466dbb7154b7d7c6c6669196d", 0xffffffff, 0x0, 0x1, {0x2, r3}}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:25:04 executing program 2: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) (fail_nth: 11) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0}, 0x0) sendmsg$802154_raw(r4, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091cd3476bae3a05bae56ab34bcbeff5ddd1d8a65bc022525b413d13bc1a620d628d0ac0cfe3ca26247450c82d3f2f6bc0c2a5c", 0x80}}, 0x14) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(0x0, r6, &(0x7f0000000180)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x9, &(0x7f0000000140), 0x1, 0x1}, 0xa33) 01:25:04 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp6\x00') readv(0xffffffffffffffff, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1987.596065] FAULT_INJECTION: forcing a failure. [ 1987.596065] name failslab, interval 1, probability 0, space 0, times 0 [ 1987.596911] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1987.598736] CPU: 0 PID: 10708 Comm: syz-executor.2 Not tainted 5.10.260 #1 [ 1987.600988] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1987.602723] Call Trace: [ 1987.603284] dump_stack+0x107/0x167 [ 1987.604039] should_fail.cold+0x5/0xa [ 1987.604844] ? memcg_alloc_page_obj_cgroups+0x73/0x100 [ 1987.605931] should_failslab+0x5/0x20 [ 1987.606722] __kmalloc_node+0x76/0x420 [ 1987.607539] memcg_alloc_page_obj_cgroups+0x73/0x100 [ 1987.608610] memcg_slab_post_alloc_hook+0x1f0/0x430 [ 1987.609653] kmem_cache_alloc_bulk+0x182/0x320 [ 1987.610608] io_submit_sqes+0x713e/0x8780 [ 1987.611492] ? percpu_ref_tryget_many+0x166/0x2d0 [ 1987.612534] ? __do_sys_io_uring_enter+0x6b2/0x1890 [ 1987.613559] __do_sys_io_uring_enter+0x6b2/0x1890 [ 1987.614562] ? find_held_lock+0x2c/0x110 01:25:04 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000200), 0x2}, 0x10088, 0x0, 0x4, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x7, 0x4, 0x0, 0x1, 0x0, 0x1}, 0x0) fallocate(r0, 0x0, 0xffffffffffffff75, 0x10001) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2400000010000100000000ec0000009600000900050000000000000005000080480000006fe884b7f11ac8f1810d0dc930b7fbbdfe445812bd4e3ddf303ed7320b364ab5ef9768d0c54531c0e48e8b51a2f78d54f00d9cdd3a5569eaaaf9d57fd007e7eff61a89507780518151cc0bb52f615f18e044c54fca953b368cc61d149f11066c74aac60fe6c088582777cddc52bd82c5ef927b1c475f2e339546488ff742ba361f30616ba6000013203bece0c63d63d44a2d8033a9f2319b5d7e75aed01f84fbba37b71774867fc770eb6690f7a3c3e0d63d75b35925d7980ce0513e1600a3b9b86344041999a73312ac34f870e770a7124542c63a0febe8281dfa46ca86343801872702c3c16a7816d215b6c8b12d910177eed40ffd341132a1e8e19120405d7896"], 0x24}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x48800, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) readv(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10002dbd7000fbdbdf255100000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffff7f350000000a000600080211000000000005008a000000000005008a0004000000"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000100)={0x3000000a}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000240)={0x0, @aes128}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffffc}, 0x8000, 0x0, 0xfffffffc, 0x1, 0x1, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x508) faccessat2(0xffffffffffffffff, &(0x7f0000000240)='./file0/file0\x00', 0x50, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0xffff57f0, 0x2) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541d, 0x0) syz_80211_join_ibss(&(0x7f0000000180)='wlan1\x00', &(0x7f00000001c0)=@default_ibss_ssid, 0x6, 0x0) [ 1987.615401] ? io_submit_sqes+0x8780/0x8780 [ 1987.616528] ? __mutex_unlock_slowpath+0xe1/0x600 [ 1987.617561] ? wait_for_completion_io+0x270/0x270 [ 1987.618595] ? rcu_read_lock_any_held+0x75/0xa0 [ 1987.619579] ? vfs_write+0x354/0xb10 [ 1987.620384] ? fput_many+0x2f/0x1a0 [ 1987.621156] ? ksys_write+0x1a9/0x260 [ 1987.621959] ? __ia32_sys_read+0xb0/0xb0 [ 1987.622827] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 1987.623939] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1987.625053] do_syscall_64+0x33/0x40 [ 1987.625850] entry_SYSCALL_64_after_hwframe+0x67/0xd1 [ 1987.626943] RIP: 0033:0x7f9b78b4bb19 [ 1987.627732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1987.631650] RSP: 002b:00007f9b760c1188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1987.633272] RAX: ffffffffffffffda RBX: 00007f9b78c5ef60 RCX: 00007f9b78b4bb19 [ 1987.634780] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 1987.636305] RBP: 00007f9b760c11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1987.637829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1987.639347] R13: 00007ffe648829af R14: 00007f9b760c1300 R15: 0000000000022000 [ 1987.662979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1987.664782] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1987.666472] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 01:25:04 executing program 3: r0 = syz_io_uring_setup(0x1c26, &(0x7f00000002c0)={0x0, 0x2000, 0x0, 0x0, 0x2ee}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x3, 0x2007, @fd_index=0xa, 0x7, 0x0, 0x0, 0x10, 0x0, {0x1}}, 0x3) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r5, 0x0}, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r8}}, 0x5) syz_io_uring_submit(r1, r4, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd_index=0x2, 0x9, 0x0, 0x7fff, 0x4, 0x0, {0x0, r8}}, 0x80000001) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x12345}, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$nfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRES32=r9]) pread64(r9, &(0x7f0000000180)=""/250, 0xfa, 0x2d8) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r10, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) 01:25:04 executing program 5: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r5, 0x0}, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r8}}, 0x5) syz_io_uring_submit(r1, r4, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x1, 0x0, 0x0, 0x3ff, 0x4, 0x1, {0x0, r8}}, 0xfffffffd) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) 01:25:04 executing program 4: r0 = syz_io_uring_setup(0x1c29, &(0x7f00000002c0), &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000440)=0x0, &(0x7f0000000040)=0x0) r3 = syz_io_uring_setup(0x36fe, &(0x7f0000000040), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000140)) io_uring_enter(r3, 0x27d9, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TIMEOUT_REMOVE, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x10001, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0), 0x14, &(0x7f0000000280)={&(0x7f0000000200)="a9d072844b949ef93e2b48c9e670c3b3b9059268aba4655a850f5603fdab344bfcd390af54f3b75e089e38a076ec29fee928ac04bb3c85af69c99499e51a607a8045ec64776bc7d791c4d1fd8091", 0x4e}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x6a62, 0xb6d5, 0x3, &(0x7f0000000180)={[0x100000001]}, 0x8) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$nfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRES32=r5]) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r8}}, 0x5) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x0, r8) fchdir(r5) [ 1987.718653] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.6'. [ 1987.728961] nfs: Unknown parameter ' ' [ 1987.736895] nfs: Unknown parameter '' [ 1987.758197] nfs: Unknown parameter '' [ 1987.777578] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1987.779062] nfs: Unknown parameter '' [ 1987.779242] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1987.781275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2013.429128] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2013.430511] CPU: 0 PID: 254 Comm: syz-fuzzer Not tainted 5.10.260 #1 [ 2013.431247] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2013.432207] Call Trace: [ 2013.432534] dump_stack+0x107/0x167 [ 2013.432959] dump_header+0x107/0x689 [ 2013.433402] oom_kill_process.cold+0x10/0x15 [ 2013.433915] out_of_memory+0x1149/0x1440 [ 2013.434393] ? oom_killer_disable+0x280/0x280 [ 2013.434919] ? mutex_trylock+0x237/0x2b0 [ 2013.435390] ? __alloc_pages_slowpath.constprop.0+0xb70/0x2320 [ 2013.436079] __alloc_pages_slowpath.constprop.0+0x1cb6/0x2320 [ 2013.436784] ? lock_acquire+0xc7/0x470 [ 2013.437241] ? warn_alloc+0x190/0x190 [ 2013.437695] __alloc_pages_nodemask+0x51d/0x600 [ 2013.438232] ? __alloc_pages_slowpath.constprop.0+0x2320/0x2320 [ 2013.438924] ? find_get_entry+0x2c8/0x740 [ 2013.439406] alloc_pages_current+0x187/0x280 [ 2013.439911] __page_cache_alloc+0x2d2/0x360 [ 2013.440423] pagecache_get_page+0x2c7/0xc80 [ 2013.440923] filemap_fault+0x177d/0x2210 [ 2013.441400] ? read_cache_page_gfp+0x30/0x30 [ 2013.441909] ? replace_page_cache_page+0x1200/0x1200 [ 2013.442499] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 2013.443106] ext4_filemap_fault+0x87/0xc0 [ 2013.443583] __do_fault+0x113/0x410 [ 2013.444012] handle_mm_fault+0x1e53/0x3500 [ 2013.444511] ? _copy_from_user+0xfb/0x1b0 [ 2013.444989] ? __pmd_alloc+0x630/0x630 [ 2013.445443] ? vmacache_find+0x55/0x2a0 [ 2013.445907] do_user_addr_fault+0x626/0x1070 [ 2013.446422] exc_page_fault+0xa2/0x1a0 [ 2013.446868] ? asm_exc_page_fault+0x8/0x30 [ 2013.447366] asm_exc_page_fault+0x1e/0x30 [ 2013.447838] RIP: 0033:0x466533 [ 2013.448210] Code: Unable to access opcode bytes at RIP 0x466509. [ 2013.448920] RSP: 002b:000000c00003fe80 EFLAGS: 00010202 [ 2013.449533] RAX: ffffffffffffff92 RBX: 000000003acd4b9e RCX: 0000000000466533 [ 2013.450349] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000001f20e78 [ 2013.451170] RBP: 000000c00003fec8 R08: 0000000000000000 R09: 0000000000000000 [ 2013.452001] R10: 000000c00003feb8 R11: 0000000000000202 R12: 0000000000438880 [ 2013.452827] R13: 0000000000000000 R14: 0000000000e5de2c R15: 0000000000000000 [ 2013.453716] Mem-Info: [ 2013.454015] active_anon:6153 inactive_anon:45582 isolated_anon:0 [ 2013.454015] active_file:4 inactive_file:1 isolated_file:0 [ 2013.454015] unevictable:0 dirty:0 writeback:0 [ 2013.454015] slab_reclaimable:9131 slab_unreclaimable:270463 [ 2013.454015] mapped:69634 shmem:111 pagetables:2087 bounce:0 [ 2013.454015] free:2843 free_pcp:280 free_cma:0 [ 2013.457710] Node 0 active_anon:24612kB inactive_anon:182328kB active_file:16kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278536kB dirty:0kB writeback:0kB shmem:444kB writeback_tmp:0kB kernel_stack:4832kB all_unreclaimable? yes [ 2013.460383] Node 0 DMA free:6512kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2013.463411] lowmem_reserve[]: 0 1616 1616 1616 [ 2013.463963] Node 0 DMA32 free:4860kB min:9212kB low:10864kB high:12516kB reserved_highatomic:0KB active_anon:24612kB inactive_anon:182328kB active_file:16kB inactive_file:4kB unevictable:0kB writepending:0kB present:2080640kB managed:1660440kB mlocked:0kB pagetables:8348kB bounce:0kB free_pcp:1120kB local_pcp:904kB free_cma:0kB [ 2013.467296] lowmem_reserve[]: 0 0 0 0 [ 2013.467759] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6512kB [ 2013.469395] Node 0 DMA32: 859*4kB (UME) 59*8kB (UME) 32*16kB (ME) 11*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4772kB [ 2013.470999] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2013.471993] 121 total pagecache pages [ 2013.472463] 0 pages in swap cache [ 2013.472865] Swap cache stats: add 0, delete 0, find 0/0 [ 2013.473491] Free swap = 0kB [ 2013.473841] Total swap = 0kB [ 2013.474213] 524158 pages RAM [ 2013.474562] 0 pages HighMem/MovableOnly [ 2013.475019] 105071 pages reserved [ 2013.475473] Unreclaimable slab info: [ 2013.476079] Name Used Total [ 2013.476780] pid_2 58KB 86KB [ 2013.477420] IEEE-802.15.4-MAC 63KB 63KB [ 2013.478035] IEEE-802.15.4-RAW 126KB 126KB [ 2013.478675] p9_req_t 8KB 8KB [ 2013.479314] fib6_nodes 32KB 32KB [ 2013.479933] ip6_dst_cache 41KB 56KB [ 2013.480575] PINGv6 61KB 61KB [ 2013.481211] RAWv6 184KB 184KB [ 2013.481830] UDPLITEv6 62KB 62KB [ 2013.482465] UDPv6 62KB 62KB [ 2013.483088] tw_sock_TCPv6 15KB 15KB [ 2013.483722] TCPv6 62KB 62KB [ 2013.484374] scsi_sense_cache 8KB 8KB [ 2013.484991] sd_ext_cdb 3KB 3KB [ 2013.485625] virtio_scsi_cmd 16KB 16KB [ 2013.486268] sgpool-128 59KB 59KB [ 2013.486887] sgpool-64 63KB 63KB [ 2013.487519] sgpool-32 63KB 63KB [ 2013.488192] sgpool-16 90KB 90KB [ 2013.488822] sgpool-8 41KB 48KB [ 2013.489458] io_kiocb 340KB 393KB [ 2013.490071] mqueue_inode_cache 62KB 62KB [ 2013.490715] nfs_commit_data 15KB 15KB [ 2013.491354] nfs_write_data 47KB 47KB [ 2013.491976] jbd2_inode 7KB 7KB [ 2013.492623] ext4_system_zone 7KB 7KB [ 2013.493257] ext4_io_end_vec 7KB 7KB [ 2013.493875] ext4_bio_post_read_ctx 15KB 15KB [ 2013.494564] kioctx 31KB 31KB [ 2013.495202] aio_kiocb 7KB 7KB [ 2013.495822] bio-2 4KB 4KB [ 2013.496462] pid_namespace 7KB 7KB [ 2013.497076] posix_timers_cache 15KB 15KB [ 2013.497715] rpc_buffers 31KB 31KB [ 2013.498356] rpc_tasks 3KB 3KB [ 2013.498972] UNIX 320KB 320KB [ 2013.499605] ip4-frags 7KB 7KB [ 2013.500241] UDP-Lite 63KB 63KB [ 2013.500867] tcp_bind_bucket 8KB 8KB [ 2013.501496] inet_peer_cache 4KB 4KB [ 2013.502136] ip_fib_trie 8KB 8KB [ 2013.502752] ip_fib_alias 19KB 19KB [ 2013.503384] ip_dst_cache 36KB 36KB [ 2013.503998] PING 31KB 31KB [ 2013.504638] RAW 92KB 92KB [ 2013.505278] UDP 164KB 283KB [ 2013.505893] request_sock_TCP 7KB 7KB [ 2013.506528] TCP 60KB 60KB [ 2013.507167] hugetlbfs_inode_cache 30KB 30KB [ 2013.507822] bio-1 11KB 11KB [ 2013.508464] eventpoll_pwq 19KB 19KB [ 2013.509073] eventpoll_epi 35KB 35KB [ 2013.509711] inotify_inode_mark 23KB 23KB [ 2013.510362] request_queue 60KB 60KB [ 2013.510980] blkdev_ioc 18KB 18KB [ 2013.511619] bio-0 115KB 132KB [ 2013.512256] biovec-max 1041KB 1041KB [ 2013.512877] biovec-64 173KB 189KB [ 2013.513515] biovec-16 45KB 45KB [ 2013.514147] user_namespace 15KB 15KB [ 2013.514755] uid_cache 8KB 8KB [ 2013.515384] dmaengine-unmap-2 4KB 4KB [ 2013.515998] audit_buffer 7KB 7KB [ 2013.516645] skbuff_fclone_cache 105KB 105KB [ 2013.517294] skbuff_head_cache 2235KB 2235KB [ 2013.517903] file_lock_cache 66KB 66KB [ 2013.518529] file_lock_ctx 7KB 7KB [ 2013.519161] fsnotify_mark_connector 16KB 16KB [ 2013.519832] net_namespace 86KB 86KB [ 2013.520466] task_delay_info 135KB 135KB [ 2013.521074] taskstats 108KB 108KB [ 2013.521702] proc_dir_entry 355KB 375KB [ 2013.522343] pde_opener 43KB 43KB [ 2013.522956] seq_file 48KB 48KB [ 2013.523587] sigqueue 133KB 133KB [ 2013.524227] shmem_inode_cache 1193KB 1289KB [ 2013.525334] kernfs_iattrs_cache 227KB 227KB [ 2013.525980] kernfs_node_cache 5192KB 5222KB [ 2013.526771] mnt_cache 165KB 165KB [ 2013.527454] filp 590KB 1275KB [ 2013.528070] names_cache 212KB 386KB [ 2013.528728] hashtab_node 278KB 278KB [ 2013.529372] ebitmap_node 1149KB 1149KB [ 2013.529990] avtab_node 4976KB 4976KB [ 2013.530632] avc_node 31KB 31KB [ 2013.531293] lsm_inode_cache 3130KB 3249KB [ 2013.531910] lsm_file_cache 84KB 180KB [ 2013.532566] key_jar 39KB 39KB [ 2013.533209] uts_namespace 15KB 15KB [ 2013.533830] nsproxy 19KB 19KB [ 2013.534495] vm_area_struct 1102KB 1420KB [ 2013.535129] fs_cache 47KB 64KB [ 2013.535755] files_cache 249KB 255KB [ 2013.536413] signal_cache 357KB 494KB [ 2013.537024] sighand_cache 342KB 420KB [ 2013.537672] task_struct 1292KB 1837KB [ 2013.538324] cred_jar 97KB 180KB [ 2013.538951] anon_vma_chain 279KB 330KB [ 2013.539596] anon_vma 335KB 350KB [ 2013.540236] pid 46KB 67KB [ 2013.540861] Acpi-Operand 203KB 233KB [ 2013.541507] Acpi-ParseExt 27KB 27KB [ 2013.542145] Acpi-Parse 150KB 166KB [ 2013.542765] Acpi-State 177KB 192KB [ 2013.543412] Acpi-Namespace 24KB 24KB [ 2013.544039] numa_policy 3KB 3KB [ 2013.544697] trace_event_file 176KB 176KB [ 2013.545327] ftrace_event_field 280KB 280KB [ 2013.545958] pool_workqueue 32KB 32KB [ 2013.546596] task_group 16KB 16KB [ 2013.547241] mm_struct 301KB 378KB [ 2013.547861] vmap_area 748KB 748KB [ 2013.548521] page->ptl 300KB 315KB [ 2013.549171] kmemleak_scan_area 374KB 374KB [ 2013.549809] kmemleak_object 836508KB 836508KB [ 2013.550462] kmalloc-8k 4496KB 4672KB [ 2013.551128] kmalloc-4k 5408KB 7520KB [ 2013.551772] kmalloc-2k 4280KB 4992KB [ 2013.552433] kmalloc-1k 2194KB 3296KB [ 2013.553049] kmalloc-512 33800KB 33800KB [ 2013.553704] kmalloc-256 1243KB 1456KB [ 2013.554347] kmalloc-192 613KB 628KB [ 2013.554984] kmalloc-128 516KB 584KB [ 2013.555636] kmalloc-96 734KB 856KB [ 2013.556288] kmalloc-64 1623KB 1768KB [ 2013.556921] kmalloc-32 100776KB 100776KB [ 2013.557569] kmalloc-16 348KB 368KB [ 2013.558210] kmalloc-8 307KB 310KB [ 2013.558833] kmem_cache_node 47KB 47KB [ 2013.559479] kmem_cache 75KB 75KB [ 2013.560124] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/ssh.service,task=syz-fuzzer,pid=254,uid=0 [ 2013.562845] Out of memory (oom_kill_allocating_task): Killed process 253 (syz-fuzzer) total-vm:1170768kB, anon-rss:169584kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:796kB oom_score_adj:0 [ 2014.665380] oom_reaper: reaped process 10706 (syz-executor.7), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB VM DIAGNOSIS: 01:25:32 Registers: info registers vcpu 0 RAX=dffffc0000000000 RBX=0000000000000002 RCX=ffffffff85d4c1de RDX=1ffff1100d9c1355 RSI=0000000000000001 RDI=ffff88800e69f4b8 RBP=ffff88806ce09a8d RSP=ffff88806ce09980 R8 =ffffffff85d4c1e3 R9 =ffff88800e69f4c0 R10=0000000000032047 R11=1ffff1100d9c1338 R12=ffff88800e69f4c0 R13=ffff88806ce09a58 R14=1ffff1100d9c1338 R15=ffffffff85d4c1e2 RIP=ffffffff81109e66 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f866bef9700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f11c41ae5e0 CR3=00000000473ca000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ff0000000000ffff0000000000ff0000 XMM02=ff000000000000ff0000000000ff0000 XMM03=66207463656e6e6f6373696420646576 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=0d0c0f0e09080b0a0504070601000302 XMM07=00000000000000000000000000000000 XMM08=000a0d732a2e25006c61746166003367 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=fffff94000237299 RBX=ffff88801ccacf78 RCX=ffffffff81680873 RDX=fffff94000237299 RSI=0000000000000008 RDI=ffffea00011b94c0 RBP=fffff94000237298 RSP=ffff88803924fbd8 R8 =0000000000000000 R9 =ffffea00011b94c7 R10=fffff94000237298 R11=0000000000000001 R12=00000000000001ed R13=dffffc0000000000 R14=00000000000001fe R15=ffffea00011b94c0 RIP=ffffffff816d0287 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f6687cbf35c CR3=0000000004e26000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f668838844000007f6688387f20 XMM02=00007f6687cd106000007f6687fb2b30 XMM03=00007f668838844000007f6688387f20 XMM04=00007f66881ce000000055dd467db4d0 XMM05=00007f6687cd282000007f66881cef60 XMM06=00007f668838895000007f6688388440 XMM07=00007f6688387f2000007f6687cd2120 XMM08=00007f6687cd1b1000007f6687cd15f0 XMM09=ffffffffffff00ffffff00ffffff00ff XMM10=00002000000000202020002020200000 XMM11=f6b565626617696be7722f5ac2ba5a70 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000