)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = dup(0xffffffffffffffff) ftruncate(r5, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x1e000000, 0x3, 0x0, 0x0) 23:03:09 executing program 7: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000002, 0x127}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x8080, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r7, 0x0, r7) fcntl$dupfd(r6, 0x406, r7) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x7, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd=r5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}, 0xa0) io_uring_enter(r3, 0x5253, 0x95b9, 0x2, &(0x7f00000001c0)={[0x4b3]}, 0x8) r9 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r9, 0x0, 0x0}, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) sendmsg$NL80211_CMD_SET_POWER_SAVE(r5, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x0, 0x8, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x5b}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4890}, 0x4008000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x20, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r10, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:03:09 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0xf0ffff, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:03:09 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487f49f8000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r4, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) 23:03:09 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={&(0x7f00000001c0)={0x30, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0xe}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x80, 0x0, 0x1, 0x301, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_TUPLE_MASTER={0x6c, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x44001}, 0x44000) 23:03:09 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, 0x0, 0x0, 0x0) io_setup(0x2d47, &(0x7f0000000000)) 23:03:09 executing program 2: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000001c0)={r4, 0x1, 0x6, @random="23b76636f0bb"}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000200)={'veth0\x00', {0x2, 0x0, @dev}}) [ 2227.579807] __nla_validate_parse: 1 callbacks suppressed [ 2227.579821] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2227.586979] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2227.589554] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2227.595428] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10926 comm=syz-executor.7 [ 2227.612009] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2227.626300] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2227.648150] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2227.658057] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10926 comm=syz-executor.7 23:03:09 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = dup(0xffffffffffffffff) ftruncate(r5, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x20000000, 0x3, 0x0, 0x0) 23:03:09 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x1000000, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:03:09 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x4c000000, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:03:09 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x4c, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:03:09 executing program 7: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000040)={0x1, 0x6, 0x2, 0xfffffffffffff801, 0x0, 0x3}) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:03:09 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0x91}, {&(0x7f0000002a80)=""/102400, 0x19000}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x24}, {&(0x7f00000002c0)=""/237, 0xed}], 0x8, 0x0) io_setup(0x2d47, &(0x7f0000000000)) [ 2227.841531] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2227.855940] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2227.923786] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2227.929722] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 23:03:23 executing program 4: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x3, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:03:23 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487f49f8000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r4, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) 23:03:23 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0x91}, {&(0x7f0000002a80)=""/102400, 0x19000}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x24}, {&(0x7f00000002c0)=""/237, 0xed}], 0x8, 0x0) io_setup(0x2d47, &(0x7f0000000000)) 23:03:23 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x2000000, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:03:23 executing program 2: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x7, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) 23:03:23 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x63020000, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:03:23 executing program 7: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000000140)=0x0) r2 = signalfd(r0, &(0x7f0000000740)={[0x9]}, 0x8) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x110, r2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r4, 0x0, r4) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000200)="eba330ee17b5470f1e29d05199c514a8c1c3f95dbb0c4ce9b40a99c81be1a1e9890887e1bdff181afe66a9f21ad280608db0ace74f766803caa7bfc159e2f55b5b3349055737a84bfe421999620eac3606bf4ef7677f9c328618893f11600f9bd449ebcf75ead5f98bcfa53b414aaf94fad60080d08aadae00f3b1669fef47545002133ffcf9f733b0b682a8d4c5700854fd2876e77f9a47a7250371b3ab6350f0d9ccbb6e682ee895e71df19b81e2733c6549b76c9c91df2e179c9a9efdbf", 0xbf}, {&(0x7f00000002c0)="2cc29ca98bdaf7a0edf00f612702580941b3de4e11e59cb8c1fbb72c132c8aab84f8dc3a8f4581d73763aa9471963de9b7029d7d7d87b75414fd2d3ef5e232ab5e51ed5e062b", 0x46}, {&(0x7f0000000340)="c6e560d438964760df78ba2149008565d340afed9e6b01e4388a4dbebc991bebfd64ed8eefac17272d0f708de21968be1977ce5f3b7918319c5a13a916bd3323f32b1246f54d72c737e4bc2acd29f73eb68ec9dd6d7a6159c3bef2de2ad8d00decb35bc6fb6138fed232d3123029a7e8925e520e4b9366bf41a5bd0746f45290b8c882df6e8e3f8a06fb3589f868242032b2", 0x92}, {&(0x7f0000000000)="fde96ecc015f817aad557861744a6bd6ac1f6cca136c8d853f37bef0c702da853a69", 0x22}, {&(0x7f0000000400)="0a0bc16ecd4280d3d8bd45feec4756f6c7c4bebaddc998398eb14d777609", 0x1e}, {&(0x7f0000000440)="65af90880dc3ae4fd1d97b432c53c56c58ce28840550bef36d7cacd1cd912327ec935325ba027c1fd9ff8366da60a40be80f59f678618c007f64ad2df3aa70f650d8bd524d0909fd6d872b68d80177361c8084916777284a1179e1de89519b2fd61d45197ff308e0386a93ffec5e7ac1468ef236ff", 0x75}, {&(0x7f00000004c0)="d132997d61deec2ccb49f6fa49d77ba3729e3073bf15cf0adc9334719829cd55454f03e919bcd14bed1197d39a0364deb39cfb404e0eb80dc0d1edb413ea9abdde3ba2d844e13ea380873b81be83415efd89e14ce0d54b9e92079236948ac283e6401f98eee2b4e9651855e472ff3a7697d45b3aeae44ecbb90bb41f33e1701b2c0e48122b434fedfb74743d859d5eaa97054a9fedf08e55bc0cd493fac06e119fc2b347ff9bbbf354eeb64676a1d2a066a9e1", 0xb3}, {&(0x7f0000000580)="2eb5071aaaefc059003b3fa046af29760930e5dfaf46e687c2b302d76eeee1d1f881dbed907f4d05361c2af733af61b43b067b9e57bcf5120c9a", 0x3a}, {&(0x7f00000005c0)="99e027cf18b78e715a16ad31fec36a16f251d9bc81ed1e9884fce5fa1fec6879fa5dd9980d75cbce5bcd8a866841dda015ac49638ec776ae206ffd165c45f1672b17282c5f2e077a56ec11d1c3192db42ddca82261237e0411a83ffce1b32bad690f", 0x62}], 0x9) syz_io_uring_submit(r3, r1, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x3, 0x2004, @fd=r4, 0x1, &(0x7f00000001c0)="6dcec51a1e907497ac4a907e96b67451c7a436bdbe9a8dfdd71c3eabcec1", 0x1e, 0x2, 0x1}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r5, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, &(0x7f0000000700)=0x2, 0x4) 23:03:23 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = dup(0xffffffffffffffff) ftruncate(r5, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x24000000, 0x3, 0x0, 0x0) [ 2241.583082] __nla_validate_parse: 1 callbacks suppressed [ 2241.583097] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2241.591101] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2241.595095] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2241.597599] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 23:03:23 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x3000000, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:03:23 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = dup(0xffffffffffffffff) ftruncate(r5, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x2a000000, 0x3, 0x0, 0x0) 23:03:23 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = accept4$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000240)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vxcan1\x00', 0x0}) sendmsg$inet6(r1, &(0x7f0000000640)={&(0x7f00000002c0)={0xa, 0x4e21, 0x37c1, @local}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000300)="34474eecbcefb28351d44d4d830653b2d5b5dbece922ecd2e4b9cbf473242f0fad52eb78ecdb49c76514d184d1d2167e738b8aa525492969dcde060411c13a50acee5a428d70f300b1245aea55be5b9c69b1aee8", 0x54}, {&(0x7f0000000380)="75459c611266e2b0467a95afca7fe547eb8ac41a652364aed30ee1c8a58e84ef4f9c52ec0341881e4e282f1f5ae3eb2c6027cdf31e9d171c1520d736d114eb92d4aebf387fdd1806a4c9a18ebba530a5c7b2d8685c44868fc3018bc2642d10bcb19665942ad43ba2d49e96c3d9615320b5f5684f64c617955c219a12d956d634133f54b06138c4e3e8ecc5d44862b41e731edfea42429d7a928097db8949a687d592f9b3", 0xa4}], 0x2, &(0x7f00000004c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x5}}, @dstopts={{0xf0, 0x29, 0x37, {0x11, 0x1b, '\x00', [@generic={0xc8, 0xc4, "947854c53014b8d59628b89413ab7c857aa9af36ed8d91c1a47439f4df944802ac6699c21b68a67a323b84bd46056ba8f08cf9f07b750415a36d3726f9bd3c6feb4c311ef5325ec5a6b5a1c2ce85dd45438a300917df39b1aeeb15b396e87f08d742576c8aeab2ff588a7242c04ed7ba22c5772bd6afd3d3eeddba1e7f5efc3807dbe06b99bc1793f3aa42bc1ae344bb67fc3573c424650380ce1c6af741c1e1aa2bac37869f2eb284ea70f450df6b0a8c0a4de9c9f12b6177f798e46adc1a88c4c13082"}, @hao={0xc9, 0x10, @private0}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private2, r2}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x4}}, @dontfrag={{0x14, 0x29, 0x3e, 0x4}}], 0x160}, 0x0) connect$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x33e83b9ac308769a, r2, 0x1, 0x40, 0x6, @random="81ea7dda7cc0"}, 0x14) r3 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r6 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, 0x0}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r3, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r7, r5, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r3, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:03:23 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x68000000, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) [ 2241.758503] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 23:03:23 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x0) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={&(0x7f00000001c0)={0x30, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0xe}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x80, 0x0, 0x1, 0x301, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_TUPLE_MASTER={0x6c, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x44001}, 0x44000) [ 2241.780022] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 23:03:23 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0x91}, {&(0x7f0000002a80)=""/102400, 0x19000}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x24}, {&(0x7f00000002c0)=""/237, 0xed}], 0x8, 0x0) io_setup(0x2d47, &(0x7f0000000000)) 23:03:23 executing program 7: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xd552}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:03:23 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x4000000, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:03:23 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = dup(0xffffffffffffffff) ftruncate(r5, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x30000000, 0x3, 0x0, 0x0) 23:03:23 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487f49f8000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r4, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) [ 2241.881781] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2241.912717] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2241.917438] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 23:03:23 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x6c000000, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:03:23 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x0) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={&(0x7f00000001c0)={0x30, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0xe}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x80, 0x0, 0x1, 0x301, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_TUPLE_MASTER={0x6c, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x44001}, 0x44000) [ 2242.020069] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 23:03:37 executing program 7: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'gretap0\x00', &(0x7f0000000200)={'gre0\x00', 0x0, 0x1, 0x20, 0x1, 0x8, {{0xd, 0x4, 0x1, 0x37, 0x34, 0x68, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010101, @local, {[@rr={0x7, 0x17, 0x1, [@dev={0xac, 0x14, 0x14, 0x42}, @rand_addr=0x64010100, @empty, @broadcast, @rand_addr=0x64010101]}, @end, @end, @ra={0x94, 0x4, 0x1}, @end]}}}}}) bind(r3, &(0x7f00000002c0)=@xdp={0x2c, 0x9, r5, 0xb}, 0x80) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x4840, 0x0) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f00000001c0)={0x0, 0x1000}, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:03:37 executing program 2: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000340)=ANY=[@ANYBLOB="010000e901000000180000007ab89cfe1dfb7160736da017087e55c32f1238aa6436097d16abf832c0ddef69d86bc143de1800"/74, @ANYRES32=r3, @ANYBLOB="02000000000000002e2f66696c653000"]) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x80000) sendmmsg(r3, &(0x7f0000001f40)=[{{&(0x7f00000003c0)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000440)="81f1e3cb877598e647de248105d5e2192df15c0763a037a054955496b0718e185a225cea5acda1b9a667dc10f7642d53c1b17a5d8f60243bb1704c3c393cc1bbb31bd146905ecd1f534d7829ce986488dc2be42709c8243ff0a8b1d4e7cd9ea95b8807806a7d94314ee6c272058fb455029da4a5ee01cc687b95107af4bd1f9e46ce2d81fcb4f685ef06a94a4689f8b8", 0x90}, {&(0x7f0000000040)="ff0e55046455edfece8697f8d2", 0xd}, {&(0x7f0000000500)="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", 0xfc}, {&(0x7f0000000600)="addee528e55db1ba1c36a3e5838df81bb60349a234d4a6973b29d85fe909469b151f8117dd1136865fd256fa65314c485faf4ab9bfe5d6bbf8fd019af02a441b42b6d333e59b619bcbcd19cb6048cc6c62da33b55fcdffbabf7f2c19e82a543d1e251ce8e149a8ed10f5a78810279a0a0d4d74408a001d1a6d87cf24ca98008b5d9c508ccb9dd42a1c", 0x89}, {&(0x7f00000006c0)="a58cf5215cdafa24536d7d40f039757dacfccb6dc01e48fec0678ae5107405c7225ef5f36eb20ba1f0dd8245127d60c22b92a24a2154602b32104412da347be9081f0560a32436f79682bf199c1b1515aef880fb443a3b8d4b8556d26bf9e61b67031fe846b18d3fd09a3c145a5cee7af9c4a67a5b792d6b9cbc8fd0d80514dd1ad9ae6db1b6a60a68d505628e0304418ede15009b2080ddd483ba690941b98db4eca7eb4004214d7f59a6460054907699acff79c95b64403eafec7f063e87fa530f51521a510bd7973b8960695265119d8a02c8454dfda35ae85b1ade644dad6c8cb0144763c47c2848197d02dea780", 0xf0}], 0x5, &(0x7f0000000840)}}, {{&(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x0, 0x0, 0x1, {0xa, 0x4e24, 0x8, @mcast1, 0x1}}}, 0x80, &(0x7f0000001e80)=[{&(0x7f0000000900)="5443e4adf3ea9890138b496e1bab5edb377fd8d737aa916ed396daa0d687086473a5726ef10133e96cd2675e0a791703025508f24f025243a48610595fd33fed73ec920b0368d8c19eb4076a7424c6f7ff2b601a7365edc6f6d28915be76dff306f11f756e0371acd4342ddb70071599a29f2c38f46e87b25fcbcbddbdebf855fbfb23d5c8175b990b194776caf8b992a10041c0e94867d7cd82965d23fb7fd1837cdc99ff30007af03449f5a5960d37e89e96a5b9cb8ef03277017f9743b7c336b7b228c634c87aa28d5ece794f58d90db21802b2116743ce40f9e6739bf7856480dd9292834049afeb50e438fffd40c1a87075d3026de90f907277b2541ee1b606f815006c435ad7f474777358e4932a7cddeeba415fd91b14a964dca37b82a6cf7f6434d4fa1e3a716b05bd443ff80a009b94cbcbfb573dda50a84e44ef94b0ff2076b36d4a50040b11f569d4d80610d2e1867ab57379b27c364c7cf185882291ceab3bc7c518f806169ceff3f2c9fc25f67f199339684357f447788c1c2a479b20287d2eaa15fde5219e48b7d214bdfe1b0b1b79a59b6aa6555cd026e6348c66a6bc1c6276d3738a11663629105cec5c2a494bb6d70be2c63aab84a89b4ec5c6b49641d94c6bc4b5326a89d8fc4577235f9d68cb5615fafb34a5cfcedfce72b9b292cb0d75a7817d2d78ecb123f2d874d22fade48e18e0ea74b14e8a640fde4bab39ba20001044f7eb8d5616a1cc4d43b70d5c6431bf831f0ef17951ff6560e4cf3f0c4450bafc458f475ac617d11b1d1f4cd14a9d490e83de9cea32a59f9d1370c4ceff7bbecafacc259a1611cb3888e2679c2563f61c8e6e743275ee2c49f47fd57112468705fcea52f7dacdbc08fb690655cd3699aed3a7ed24f857656f6f93e7814c7da53baab5ffc08f901f7f508e6f2acf724e9c0d3e817187a446004f0a1f73f33b444f7110c981961ee55fed801a2109296ca5fd9fd0dc151d164d0bd2994dbc63ac3f0fa2abb399413eeef2fea805c98cac379092ef56812ef7409af827b5c464612f4271fe9d896181cfb47a9bdb33e5432917db50736c83a66eb50dd15fad5e7e4d29e019485bc24cae74f1640549113388457782d00dd9d884ff6b7e4125dfd34de2ee8841d22a0c1779e7815173881efaf52b02e3524b7b51f8afb2cf12934d345f67179be77267480d8944c73ce98a4e3d727f79b9f7c7d2309de3d4df803aea9005e2cc160919a827e23a17d0ec619bae60c6f5725d738b885f9dda50ec710a1ad9643163f062650a035eb37ca3ba808b520443af24401fa0c642dc751f775aad03a855498eb418e2d684d4e76deec086bd8cbb061f41772d98bbe1e6222173bc9a8fc3cede193b438beb2c8624a60334561a37d0c389da0e1a7cd7afde8991582edba72896ebf65ca613a15a5fce08849e422583bdede7767096fe510659cd3b7e117984c86f0399ff598837b8404587d564c2e3aa8812620b323e51b4d6e8bab0005bcc5351fbe39cd349983bd9cf8187be5621a09dc6c90cb38fc61b099c276e18b4064423ef24285c965e2a7437a910b5a200f650b3f3474465c74c2e8239cac8951b85450a893efa47059f035af9827f33cc7b6afe7867ee7f678ae9a72af6ba8c0c437990abd431e8789afaf4e9b6c396d7038d76d6ced25e2e3a6eb54cb1ec1b557b5dc801076267406b3c05c921351d4476d7a898b847971b6e73eaabd8b56789c3273ce033ee89187fd0f51aa9be871b344d88cf2b0c38a92c5f50b93317aac7f043d9687e454b4afd7a97cfd99f634b6f963b007b1a07dd9eae40184e1fd943691dda6890919f27beac576d0b5a27979a167bd6334c15ebe3f850e73388fd0421987a110b10fccafdeb667baa068289c494ecf40b5297aefa6a1b40802548b8a270514065e7e7740a45217878e18437acb3d9fdf68809f5dd779e17c35811644ca5c5a4584c8d76fbd574f9bc9ad66ff40a4476077f1f26d9ece64881c3515ed993e4e5f9b862078685ded22cd90dd78895723f5da4437cc5cf595c0152aa083f4b9bff1a960e48b988ac27cb2aa5131d4d8e66e4dc42e87b56cd0babee4c275d1fff8bd3d017837d09224a72ce27c5fc4faf9c7e0e3f75898aeace7fdb22787d99588c2ede89db64aceba3be76c7cf080fe39faa5aba6bc158289a782fe9f10088791184500175cb5f35fda50a26f885e04a73247278c1493168f1fccf2905b0d65906c160d33a91e72da7026a59c18dfca7958ee3bfda548f449457512f1875baf09207adacf77d02efba83a5a805a58ae6c1d66338edced7819f89f2654ca6b04dd8567ebfc23622ff747c853cbbec5f07d0d7969d424ce38f24f9186729c0f0ede14951185a00a86d6e07d8e4f2fb9f5df099897f7e1123ad4cebe0df51fb78ba9a9cf4036ef1fc786a11a352a159f23fe2437f5e5b763bc276f061462b5828d7cc602ce2e1ecd54f4f8adfbac8915b97667a5337a26d24341805fedb6b3e8dfa84cd6786d96f7d74a19116b32506f370275e8d0dc34a19f99c90dacc422cd111eb02129b26a7c72149d096745fc8a82032581b6c6fe8b60b0eb20d93ea1fc1c17e62ad8af7923e4c11b084eb5e5339a58513f909ff9ae2a160beac324904676425dbd92ebc55eb5f1e34ba9c9eafb0ba6cac0f8a4ba6bd1a3eda5ce9122380f27653768bf69925448cfab0890062228680256c69a2bb860932fc7a8a5e54677113e0d3619b2db35f392a7ca12bbdace4f833e1ff12c51ce9ed934f9087624ddfc2d780fe89c3329b252e6f188c04d575b122a6e9e0e58f143bc223089f461e97972fd1f65931eb347f11c6d03a359d9ede4c7f53bbcdd21ed113dc3e935b7641911edd5abe274cf761f212d66301b0cd582911e34ba8c9da75f43c1ef270a1f38abd6dd5c64cf640c5c736ede990ba37f5c744fa167d74d2cc371cbdd17fc734f4026f9fe9790b007ddcdad29039cf5e408da12213827d0ccbecd2fc68f8acc5d3639cd56dac86855fd7857c3b58e8060f809645ef157d86d74e1dab9c2629c13fbdad8456abdbbac04801546ef36ef417e9cb37d4280217415c23b63ad6bc2948e0f8a7fb8ae82d0c9d563b175afbfdfff69faeb52a7248b68b5a9416e5ae3feca5e0d87c14b4d76c933c543612490fb626106ecc6144d1241894bcbf3d52aecc2fe1691f03e40391c1fedff5ff4eee6f2ecd13423dc00f2e9778f0912a227ee83064da53643b4025a9f8ce3a32b966da1a9e5b6be1d499e242d163d2dbbb4a694c2c7fd4482133ec1847de78e5af84370a1bc94c010f6d31260d61451167869722a926e7ecccc35dacf2e44f2d162eae473a110c0dad24057cb746111e34542ba7137b9191f61f9ee1a0f8025c68d4246171602086a522163aa3c8a90d6ad309211bbcecb636c7576dc27d7345475b1a5a291d6d0cb6e96dcddceb7430b4ec56c473c3ca127413c8c547820a737c423c42eaf741dd2b49ecb9cf9f407fbe21d8d9245c03a189917c7027f944c7a01aecfb302c7f392ff3b1c97c4e78b704c0622cb10708f2a6d1cbd5a2951fe1c3d3d339998424a60c17000b4b5d335c7162ce428f6841f69cfa3aaa39a4ae3e0e1bb2c92f76a0704d29d3743a7f3187127b3e5b18281f9d7cfac7515a5d68a7516c6d10350d65645d5cf50f21e725967d47b3080074fa37368f7ef8f74897e3b045d2177565f4b90a9dd739ea8540c56ea74c8ca2f83958040f1618531b47c1eb8c7d3c8b5f235a6b6b13da009368a450f391923737ad17c76bea4c278d586444609b4d1c3239608903ff732b93fc3b7a3c5d89fa1297780d33c647a06d25448ef579f7e68745481e40009ac1b07ab63950a6d91858a4c7638b2072350bf82986cda16e1e1471812861df9a1bc41f6d88dfd89a7f87d75af4ef3cb31dea41e6ab1ba92d64862f0a09e72eef8cdc6bdc0a0cb4cbe0940f0dd419b4564763b72e5971596ef14593b33e5385943f508a5c7dfbc193a2ac8a5548babc10c970927a96c8a24ecae489646fa1135c0e199bbb551e9c4e7955104a67ee1df4ee16e67485ec75801b43b1bb476526f7e88873ba61987537f2c9ca2ffa2f47cf0724b8f92c49c2ebe70dd90ef1e651e77b25f6030c55d8a9bc60a7448d57845ab87978182987fdad5b8439bc84f991f8ae6d9fbfebdc824574031e0624e6aff1587ac113692983979b0620449c12b07e8db18b5998b99c8d7278193b67bd22a192c40de28a5db1173a38df49ea79c5c43ade1862fd8fefbd2a0acba84880cea1188f0a67c8a23901b7ed938d4462bd189e921bf6d301e01cf02e98a41ed2ad75719650e71e474e9ec222713a56c0d284f688e2764f324a7ecaf4e71d44bbc4ad8d84172a776af6f2bf21e5ba48f983385e4127963bf8f55456d2d730353a77b5f12dfb5e8e295736d39dfc1d6168f96951217258d6542f04e95c394eb6810f609c96c781d61462a5ad92391758cea4814f39abcb756aa5da1306ab5609b938ab45e4cd487079650eb621c405a18367a541de10f65fdc90fd2256bc6f4c03f1894045504f05bdf4f7ab68bd28a3fb1f9a7798402fbbb6b52590d55f2454b22b0399d57377e515f628ec96d384a77a972234fb685dd51cefe84ee74fa7b4d4c5ed5293425dc298dd0bef646b54ab47f3f93514cb84a3262c34134e66a0c10aa95d86c3d6a9eb4df9c6a43676b7e41f6c6e25eb4d8a38c42166f667ead5c67632078feeb16844f1a069923c750f7e2455e072adf1a0094f047679967cdaaa84aca123a027d2b2e42659da86dde017632903925d09066b42f438cae2aad13615be40cc0950ccc92fc3204a7c1078a23c164fb126f3457d97a7055138e781d215de6df1e1b3429417b96fbf9d6a1af71c1546c5e09f23660cc8de64c76b2cf3bf7855bb285295e2d55dab40d31103d473fbda12b300b2e87bf5e6c07597b758ebca27be30926c787da19c3369e3500ba59aa62990d87fcdbdbfb28894db61dc2bd5509bac1491e5d2c94b6c87a4d4a046cc745af1532d3944de510f0d6a903b5b384c74f62835ae27bec83a349302b37289370f121c6e6388da6b3fbd71dd7406c0ff3332ced8e7e9db5b9fd6b0d54e8b3b6de6a850aef733aecb745ee4be8f4dc56e6f7d15ba434351bc630d24c03c679d4b333e97fad493011687732afbb3c4d99a9ae345274db9e0b75b3c1d0091089ab4c8ae7fa0fe13ad8d15319a553366e9a4d3c9516baf7389662737f22f7b564e3daf1978ef3b896b0f4296cda0546ed20773c13f2d4cbe429c7c60e4cc94ed28c9772e8028ea11d947087a22c785e4d39771d935d6c64a21a279fa8df086fd6c1a606afb07d71d57b5a3debfed0a4451e08bf7d848f932cb76d44c997de443d1172eaca2746e75d0eba228f7f0d791cf0dbaab4158eb2e3c89b9cc360e8b5af5b0e5b426e3eb634c4e9e9958e7b5de75220d8289018459b0c702124219580c29f4fb9c90a4f4d7d12943ee7d65a914798d0029051347d43f9e2fdfb290058346fb833b02b8e17078650bc9aee5cbe6c5230f0ae88248cd5aa54dfe2b0e1a1f33ff86e76d7dec6e20d71e4511e377c40f2aa37a16c3929f7d40ca8b41187989465c51c56a5bbbb3e903fda3119db428f872ddd7ec2bd361e246951f77e5047e7265657dc7aa7041f60d7e27311ae2532ef4d2c8fb4958ad3123c419f2c5039b3485be641eb26e6e5072db607c6006646b5efb14ac901f908d16520ef9b709208a16c02b1b3e55c2112f3d3f788c3c5c998c3f80418549", 0x1000}, {&(0x7f0000001900)="bfb32ccc64d36be2c1ba5e29d4e014fcff", 0x11}, {&(0x7f0000001940)="f95682b4e077219f608d0080b881ea648d50859fb2e50156bf430c385bde731e452e5dc5a1102e7577be233eb1e8c31dac7688d47e53573f5826264eab9a6feeeb3ed0bbf2ab70b0dfa039b2999ecc6158541ed4352b784b0b22389962bfdca015da1f673255bf5567c7cabfadce1a606eb231f6d2f4280ef6406af19eae49d1653ff7b6da677fad9f0c704d102164", 0x8f}, {&(0x7f0000001a00)="732bb175d2c0bed4786ab9c01b2aa9de190c48aaa5146451f8514a9b28c3227d08f7a25268f95d063b47555e6e252bed3f084e10d0cd26f8d577aacd90f8b654a21a777303e7198aa0cfad1faf4e26dc27", 0x51}, {&(0x7f0000001a80)}, {&(0x7f0000001ac0)="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", 0xfc}, {&(0x7f0000001bc0)="48fbd136ef2404b3cc98418d7c9fabc9a9f3a6dcb5c23cee60a858f9d9b60a01dac947d7427ea77f4ce5bc2941d9a90093c4685eee74ec4870f8c46bf8ca6c9e894ace95b2582f781433f5f13cb2ca84bd9bbbf720fe8197b4fca3850db3c9ce690b59697993763d6e1b5e45fddde981238291af31a071a351cb95ce2d92b7eee914aca758365613d3c66d29115816ed40b1f444191fc31e630a04702b313870735177a3f67148e13bfdbcbe8676185f9609858a35403f2a8d25682c25628dff0057ca0b1ae3205f84529eaaaeaee4023cc6b2dd844584", 0xd7}, {&(0x7f0000001cc0)="440ff5b30b8f584e44d6e5b1bced52ba287a9f9ac70c3b03cce5b41b67dc26a62824f84c660a97f25d0bf37f096f9694da77f5c4235cacc1668af60a4fae91e6a48a3721b4101aa144f077dd865f6b699ffb4b42b0680715109c35b0a4d26d8ced0b3a11a7cff8683c", 0x69}, {&(0x7f0000001e00)="6ca39c12123bdffbb285292a1a7cb561a755553c32ccf2951ac61c1b294b192c0bfbfbdb0d5f45b6e060f17c34e54cf5442775d9f8193b8f025e76a710883c73abfe09c2afb3aaad8b75a62cb80c1ec82bfef203d704b53f53a078f992793974772634a89676b4b0ce22b71d16de4ccf0cf85dbf403c7e32b986f347e9a06c", 0x7f}], 0x9}}], 0x2, 0x20008081) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x5, 0x0, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x5, &(0x7f0000000280)={r7, r8+10000000}, 0x1, 0x1, 0x1}, 0x0) syz_io_uring_submit(r1, r6, &(0x7f00000001c0)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x11}, 0x100) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:03:37 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487f49f8000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xf5d, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r4, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) 23:03:37 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{0x0}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={&(0x7f00000001c0)={0x30, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0xe}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xa}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x9}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x80, 0x0, 0x1, 0x301, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_TUPLE_MASTER={0x6c, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x44001}, 0x44000) 23:03:37 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x5000000, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:03:37 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = dup(0xffffffffffffffff) ftruncate(r5, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x36000000, 0x3, 0x0, 0x0) 23:03:37 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x74000000, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:03:37 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0x91}, {&(0x7f0000002a80)=""/102400, 0x19000}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x24}, {&(0x7f00000002c0)=""/237, 0xed}, {0x0}], 0x9, 0x0) io_setup(0x2d47, &(0x7f0000000000)) [ 2255.514551] __nla_validate_parse: 3 callbacks suppressed [ 2255.514564] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2255.520453] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2255.522538] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2255.525713] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2255.540033] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 23:03:51 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487f49f8000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xf5d, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r4, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) 23:03:51 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x7a000000, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:03:51 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0x91}, {&(0x7f0000002a80)=""/102400, 0x19000}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x24}, {&(0x7f00000002c0)=""/237, 0xed}, {0x0}], 0x9, 0x0) io_setup(0x2d47, &(0x7f0000000000)) 23:03:51 executing program 7: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000000140)=0x0) r2 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) syz_io_uring_submit(r3, r1, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r2, 0x0, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x200000f, 0x4000010, r0, 0x5ef30000) syz_io_uring_submit(r5, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:03:51 executing program 2: r0 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$revoke(0x3, r0) request_key(&(0x7f0000000040)='keyring\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='\x00', r0) r1 = syz_io_uring_setup(0x1703, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x0, 0xfffff7ff}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r4 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:03:51 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x6000000, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:03:51 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = dup(0xffffffffffffffff) ftruncate(r5, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x3c000000, 0x3, 0x0, 0x0) 23:03:51 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) (fail_nth: 1) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) [ 2269.449809] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2269.457902] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2269.460730] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2269.462971] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2269.501104] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 23:03:51 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x87170000, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:03:51 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 23:03:51 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0x91}, {&(0x7f0000002a80)=""/102400, 0x19000}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x24}, {&(0x7f00000002c0)=""/237, 0xed}, {0x0}], 0x9, 0x0) io_setup(0x2d47, &(0x7f0000000000)) 23:03:51 executing program 2: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) socket$packet(0x11, 0x3, 0x300) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:03:51 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x7000000, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:03:51 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = dup(0xffffffffffffffff) ftruncate(r5, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0xfaffffff, 0x3, 0x0, 0x0) 23:03:51 executing program 7: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001800210c000000000000000002000000080000000000000008000700", @ANYRES32=0xee01, @ANYBLOB="fdda33e58ea60af188108f0915bd0ded85d5e0287ae4537cb05f"], 0x24}}, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x1}, 0x0, {0x0, r7}}, 0x3ff) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:03:51 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487f49f8000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xf5d, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r4, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) [ 2269.649652] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2269.659905] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2269.675141] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 23:03:51 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x9effffff, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:03:51 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0x91}, {&(0x7f0000002a80)=""/102400, 0x19000}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x24}, {&(0x7f0000000100)=""/3, 0x3}], 0x8, 0x0) io_setup(0x2d47, &(0x7f0000000000)) [ 2269.741410] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2269.744116] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 23:03:51 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 23:03:51 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x8000000, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:04:04 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0xf0ffffff, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:04:04 executing program 7: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x4) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:04:04 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487f49f8000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd, 0x0, 0x0, 0xf5d, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r4, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) 23:04:04 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x2, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 23:04:04 executing program 2: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x519f, 0xc720, 0x1, &(0x7f0000000040)={[0x3]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:04:04 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = dup(0xffffffffffffffff) ftruncate(r5, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0xfffffffa, 0x3, 0x0, 0x0) 23:04:04 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0x91}, {&(0x7f0000002a80)=""/102400, 0x19000}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x24}, {&(0x7f0000000100)=""/3, 0x3}], 0x8, 0x0) io_setup(0x2d47, &(0x7f0000000000)) 23:04:04 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x9000000, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) [ 2283.170131] __nla_validate_parse: 5 callbacks suppressed [ 2283.170150] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2283.176816] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2283.190597] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2283.197456] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2283.201879] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2283.205759] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2283.235197] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 23:04:05 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x3, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 23:04:05 executing program 7: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(0x0, r2, &(0x7f0000000300)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', 0x20, 0x400}, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}, 0x8820, 0x3, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000040)=0x6) 23:04:05 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = dup(0xffffffffffffffff) ftruncate(r5, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x2, 0x0, 0x0) 23:04:05 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0xffffe000, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:04:05 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0x91}, {&(0x7f0000002a80)=""/102400, 0x19000}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x24}, {&(0x7f0000000100)=""/3, 0x3}], 0x8, 0x0) io_setup(0x2d47, &(0x7f0000000000)) 23:04:05 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0xa000000, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:04:05 executing program 2: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:04:05 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487f49f8000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd, 0x0, 0x0, 0xf5d, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r4, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) [ 2283.381139] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2283.466198] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 23:04:05 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x4, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) [ 2283.480778] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 23:04:20 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = dup(0xffffffffffffffff) ftruncate(r5, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x8, 0x0, 0x0) 23:04:20 executing program 7: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000003f00)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000017c0)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) bind$packet(r5, &(0x7f0000003f40)={0x11, 0x1, r7, 0x1, 0x6, 0x6, @broadcast}, 0x14) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:04:20 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487f49f8000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd, 0x0, 0x0, 0xf5d, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r4, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) 23:04:20 executing program 2: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x5, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000280)={0x3, 0x80, 0x23, 0xf7, 0x8, 0x1e, 0x0, 0x9, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_config_ext={0x2, 0x3}, 0x0, 0x9, 0x6, 0x6, 0xde, 0x10000, 0x74, 0x0, 0x0, 0x0, 0x7fffffff}, 0xffffffffffffffff, 0x10, r5, 0x9) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) sendmsg$nl_generic(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x7, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) r8 = getpgid(0x0) sched_getaffinity(r8, 0x8, &(0x7f0000000080)) fcntl$lock(r7, 0x4c, &(0x7f0000000300)={0x2, 0x4, 0x10000, 0x6, r8}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) syz_io_uring_submit(r4, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000100)={r9, r10+60000000}, 0x1, 0x1}, 0x8001) io_uring_enter(r0, 0x2cd8, 0x9405, 0x2, &(0x7f0000000040)={[0xffff]}, 0x8) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r11, 0x80049367, &(0x7f00000001c0)) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:04:20 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0xfffff000, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:04:20 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x5, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 23:04:20 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0x91}, {&(0x7f0000002a80)=""/102400, 0x19000}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x24}, {0x0}, {&(0x7f0000000100)=""/3, 0x3}], 0x9, 0x0) io_setup(0x2d47, &(0x7f0000000000)) 23:04:20 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0xb000000, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) [ 2298.946791] __nla_validate_parse: 5 callbacks suppressed [ 2298.946808] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 23:04:20 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0x91}, {&(0x7f0000002a80)=""/102400, 0x19000}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x24}, {0x0}, {&(0x7f0000000100)=""/3, 0x3}], 0x9, 0x0) io_setup(0x2d47, &(0x7f0000000000)) [ 2298.957593] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2298.959859] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2298.961854] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2298.974474] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2299.012677] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 23:04:20 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = dup(0xffffffffffffffff) ftruncate(r5, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x30e, 0x0, 0x0) 23:04:20 executing program 2: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) r8 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x406340, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000300)='\x00', 0x0, r8) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, {0x0, r9}}, 0x101) syz_io_uring_setup(0x6413, &(0x7f0000000240)={0x0, 0xd461, 0x10, 0x3, 0x22, 0x0, r5}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000380)=0x0, &(0x7f00000003c0)) syz_io_uring_submit(r10, r7, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x2, 0x0, @fd_index=0xa, 0x9, &(0x7f0000000400)="f27e032ab1c5d7f7f1b941785a08b8de407a06065631c2c9a7b090d1739cc771a0f9142c42", 0x25, 0x8, 0x0, {0x0, r9}}, 0x5) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) r11 = syz_open_dev$mouse(&(0x7f0000000040), 0x7fffffff, 0x82) ftruncate(r11, 0x2) 23:04:20 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0xffffff7f, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:04:20 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x6, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 23:04:20 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0x91}, {&(0x7f0000002a80)=""/102400, 0x19000}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x24}, {0x0}, {&(0x7f0000000100)=""/3, 0x3}], 0x9, 0x0) io_setup(0x2d47, &(0x7f0000000000)) 23:04:20 executing program 7: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, 0x4000010, r0, 0x10000000) syz_io_uring_submit(r1, r4, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:04:20 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0xf000000, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) [ 2299.213593] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2299.246100] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2299.253175] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2299.300297] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 23:04:34 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x7, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 23:04:34 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0x91}, {&(0x7f0000002a80)=""/102400, 0x19000}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f00000002c0)=""/237, 0xed}, {&(0x7f0000000100)=""/3, 0x3}], 0x8, 0x0) io_setup(0x2d47, &(0x7f0000000000)) 23:04:34 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = dup(0xffffffffffffffff) ftruncate(r5, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x6) 23:04:34 executing program 2: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = dup2(r0, r3) bind$packet(r4, &(0x7f0000000040)={0x11, 0x5, 0x0, 0x1, 0x20}, 0x14) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) sendmsg$nl_generic(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000001800210c000000000000000002000000080000000000000008000700", @ANYRES32=0xee01, @ANYBLOB="26de596d99c7d983011ca717652a52535c1906000000ca20a9d23ebc3fb7ef8dc8830d0c81b609f1047a58401d8a0498e1853c9ba10460d2995d33619d1eed562a9475cdfb1683032d048497bb048c686586393238fe2eea8cd8928fe07a2620e3f40e3570944e4394d932cf25ff57be462f2f346d4533a9203658f10baac136e1fcaa7f506490110906501b1de39d72ede5b506b72b25494efd136f1316b76447aa0ed32a1b13aef6935863643373fa0b57004e6b0977309bae67b2d82c34f076f7059db12a1b341561b31c79"], 0x24}}, 0x0) io_uring_enter(r7, 0x5189, 0xbf28, 0x1, &(0x7f0000000200)={[0x41]}, 0x8) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x5, 0x0, 0x0) r8 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r8, 0xf503, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) sendmsg$nl_generic(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x7, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) io_uring_enter(r10, 0x4469, 0x85f4, 0x3, &(0x7f00000001c0)={[0x4848b67f]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:04:34 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0xffffff9e, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:04:34 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x10000000, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:04:34 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487f49f8000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r4, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) 23:04:34 executing program 7: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x14001, 0x5) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 2312.840546] __nla_validate_parse: 2 callbacks suppressed [ 2312.840559] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2312.851737] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2312.864524] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2312.867191] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 23:04:34 executing program 2: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x5, 0x0, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0xe0) io_uring_register$IORING_UNREGISTER_FILES(r5, 0x3, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) syz_io_uring_submit(r6, r2, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000040)={0x0, 0x3938700}}, 0x6) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:04:34 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x8, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 23:04:34 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0xfffffff0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:04:34 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x11000000, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:04:34 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = dup(0xffffffffffffffff) ftruncate(r5, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0xc) [ 2313.033028] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 23:04:34 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0x91}, {&(0x7f0000002a80)=""/102400, 0x19000}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f00000002c0)=""/237, 0xed}, {&(0x7f0000000100)=""/3, 0x3}], 0x8, 0x0) io_setup(0x2d47, &(0x7f0000000000)) 23:04:34 executing program 7: r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x88900) r1 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0x66, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) r4 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x6, 0x80, 0xff, 0x4, 0x0, 0x2, 0x4e8, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000040), 0x7}, 0x922, 0x7, 0x200, 0x7, 0x1, 0x8001, 0x1, 0x0, 0xe7, 0x0, 0x5a}, 0x0, 0x3, r6, 0x2) syz_io_uring_setup(0x6358, &(0x7f0000000240)={0x0, 0xe928, 0x10, 0x2, 0xf}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fee000/0x12000)=nil, &(0x7f00000002c0), &(0x7f0000000300)=0x0) syz_io_uring_submit(r5, r7, &(0x7f0000000340)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ff0000/0x2000)=nil, 0x2000, 0x11}, 0xfffffffa) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r1, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 2313.101684] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2313.116662] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 23:04:35 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487f49f8000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r4, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) [ 2313.183257] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2313.303430] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 23:04:49 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0xffffffff, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:04:49 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487f49f8000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r4, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) 23:04:49 executing program 7: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) r7 = signalfd4(r3, &(0x7f00000018c0)={[0x3]}, 0x8, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) sendmsg$nl_generic(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x7, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) ftruncate(r9, 0x96f) openat(0xffffffffffffffff, &(0x7f0000001980)='./file0\x00', 0x80282, 0x8) accept4$packet(r7, &(0x7f0000001900)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001940)=0x14, 0x400) syz_io_uring_submit(r5, r2, &(0x7f0000001880)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, r3, 0x0, &(0x7f0000001840)={&(0x7f00000001c0)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000000240)=""/97, 0x61}, {&(0x7f00000002c0)=""/166, 0xa6}, {&(0x7f0000000040)=""/46, 0x2e}, {&(0x7f0000000380)=""/190, 0xbe}, {&(0x7f0000000440)=""/139, 0x8b}, {&(0x7f0000000500)=""/70, 0x46}, {&(0x7f0000000580)=""/108, 0x6c}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/153, 0x99}], 0x9, &(0x7f0000001780)=""/167, 0xa7}, 0x0, 0x10001, 0x0, {0x2}}, 0xfffffff8) 23:04:49 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x3f000000, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:04:49 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0x91}, {&(0x7f0000002a80)=""/102400, 0x19000}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f00000002c0)=""/237, 0xed}, {&(0x7f0000000100)=""/3, 0x3}], 0x8, 0x0) io_setup(0x2d47, &(0x7f0000000000)) 23:04:49 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = dup(0xffffffffffffffff) ftruncate(r5, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x12) 23:04:49 executing program 2: r0 = syz_io_uring_setup(0x11e, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x274}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001800210c0000000000388d0089000000020000000800000000000000852eeb08", @ANYRES32=0xee01, @ANYBLOB="5fac2a3077ffadb6ee0529c54482c363f09bc8d235c7ecb2e173005089e2186cdb40c87722d31c84235bcc8c7b06c87d0c5f47eddb44d819c07050fdc5c927b6c5e57caed730c07c192e896d35bd621ef2132d9b13f0a15ac4c462eab1408d684fbd69697eee5f05acac270b61d89baa6791bb05dfa948f21858288e5abd2bc47b166b5565d51e5ecfcd621b051e3e52ef6b32194208e78d4ab7de6350"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f00000002c0)={0x2}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={r3, 0x0, 0x3f, 0x1}) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f00000001c0)={0x2, 0x1000}, 0x4) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) clock_gettime(0x6, &(0x7f0000000200)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, r8}}, 0x80) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r7, r2, &(0x7f0000000040)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r9, 0x0, r9) fcntl$setsig(r9, 0xa, 0x1c) 23:04:49 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x9, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) [ 2327.489959] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2327.492037] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2327.495723] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2327.511911] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2327.516940] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2327.518659] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 23:04:49 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="0f0000001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) [ 2327.554139] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 23:04:49 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = dup(0xffffffffffffffff) ftruncate(r5, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x18) 23:04:49 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0x91}, {&(0x7f0000002a80)=""/102400, 0x19000}, {&(0x7f0000001e40)=""/9, 0x9}, {0x0}, {&(0x7f00000002c0)=""/237, 0xed}, {&(0x7f0000000100)=""/3, 0x3}], 0x9, 0x0) io_setup(0x2d47, &(0x7f0000000000)) 23:04:49 executing program 2: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="240000001800210c000000000000000002000000080000000000000008000700", @ANYRES32=0xee01, @ANYBLOB="6175c05add5e4b7278ff717b73c9215859fc94648058c4ed775941c0a0781387003c7cece40a8ca0a5b0c1112388017e63f19589353d95496cfdee2ff9789cd58f3151e449b643b1200f802eea04713f9fef48d6b7bbbfbe0f983bda94369fb1312be014c8594525aa63d1baee8de190291acbf2d71e2e6f3b8da385863d2cd460f06c43bcd4ed091fe6ee002b9c8e7cc0f3ee86efd6c5853faa6a4c85db4aeb82210e4efdca43875c86a2005b11690ed0e0af469b000000000000000000"], 0x24}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x7, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0xe) fcntl$dupfd(r6, 0x0, r6) r7 = syz_mount_image$nfs4(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x5, 0x5, &(0x7f0000000540)=[{&(0x7f0000000240)="1ed13cc8f3a776e0c814bd1f0dbde34172", 0x11, 0xb5}, {&(0x7f0000000280)="e68d6109173e4e66c5c5de0f1293b125", 0x10, 0x3}, {&(0x7f00000002c0)="9dccb55928c58deecf3df822574c54a250f04cdfc1899ba53aead5b5e559d6f14c7b55d37fea4fba98fae8721a2b0bf4e02684ed8eec65f5022952c0680d8bab9e48776d96cdca7ea93fff3ad7363c70d3bfde386c7469237a238e9be4acb6df7c36b38ce3b3c546dc05daa7c0c781361c54005b94367cd1b25b3d008784d7c016788d8d064ee3e310f36b12e10650d1cc276aa2b821509722d7083326c19500e5545f24ce", 0xa5, 0x7}, {&(0x7f0000000380)="d6c5d1421784722b75a181aed93dcdbfa57060b848d7cd59084ce211c914c869b1f9b61f430d315a1628cfa5cd31c0447473cf068e9d22b9a3fe8fad594d7f7859eb7e636a1a7a2f36e68d832dbecf84a4788f8f119b6ca4a9f81dfa3728b834c16e3dc9582d9c4a95cacd3e6ace4f63167726aa7011c357bf7a2d72356dc18c3824670eff6739bd4c6574284dcc40911d", 0x91, 0x40}, {&(0x7f0000000440)="bb5e2b71a1aaacea7dfb46324b675f9f3b9c7c4fe391b11c2ed33da34bd3d636e0186986a368411559a00587d93f5434d50879367d225688c5ca1c9d3d0926ca4293a136611d51963c6e948c1275cc2b2e06d2550b0161804bece53437d08ecbf03620d16509e8bee0c78a2aad1244af408be45b7224d0898e7e5234759d246439de615dfd2f105162164cd94723d6aa4045175eb59d58c186597924fd848646d9589f40a81fcfd8cf1386b8940ddf5454fe9cc0dd64ed9207b74dd4c99e94ab70fff918eddc37b01f0c5d50c546ecb770ef0039b8a3122ae96015079363", 0xde}], 0x840800, &(0x7f00000005c0)={[{'\x00'}], [{@seclabel}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@hash}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}, {@euid_lt={'euid<', 0xee00}}, {@uid_lt={'uid<', 0xee01}}, {@fsuuid={'fsuuid', 0x3d, {[0x5, 0x35, 0x61, 0x31, 0x66, 0x37, 0x61, 0x34], 0x2d, [0x38, 0x64, 0x61, 0x30], 0x2d, [0x61, 0x61, 0x38, 0x38], 0x2d, [0x38, 0x63, 0x34, 0x37], 0x2d, [0x35, 0x33, 0x66, 0x30, 0x35, 0x65, 0x31, 0x36]}}}, {@smackfsdef={'smackfsdef', 0x3d, '\x00'}}]}) r8 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x406340, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000300)='\x00', 0x0, r8) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, {0x0, r9}}, 0x101) syz_io_uring_submit(r1, 0x0, &(0x7f00000006c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000680)=[r0, r3, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, r5, r6, r3, r7], 0xa, 0x0, 0x1, {0x0, r9}}, 0x6ff) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r10, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:04:49 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="f00000001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:04:49 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x40000000, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:04:49 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0xa, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 23:04:49 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487f49f8000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0xf5d}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r4, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) 23:04:49 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001800210c000000000000000002000000080000000000000008000700", @ANYRES32=0xee01, @ANYBLOB="5ee2ab511263"], 0x24}}, 0x0) r2 = syz_io_uring_setup(0x4c4f, &(0x7f00000001c0)={0x0, 0x5e75, 0x0, 0x3, 0x420c, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r5 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$packet(0xffffffffffffffff, &(0x7f00000017c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000040)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) syz_io_uring_submit(r6, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r2, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 2327.849131] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 23:04:49 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="070100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) [ 2327.864761] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2327.878163] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 23:04:49 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0x91}, {&(0x7f0000002a80)=""/102400, 0x19000}, {&(0x7f0000001e40)=""/9, 0x9}, {0x0}, {&(0x7f00000002c0)=""/237, 0xed}, {&(0x7f0000000100)=""/3, 0x3}], 0x9, 0x0) io_setup(0x2d47, &(0x7f0000000000)) 23:04:49 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x48000000, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:05:03 executing program 7: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x20010, r0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001800210c00e99e9f18ec0000030000000000000000080000000000000008000700", @ANYRES32=0xee01, @ANYBLOB="674ba4aff4f7f09e2f1645886e29787dd717e6c0c2e9343107cfede70cebd3b669f63b78151863cdac"], 0x24}}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000008, 0x4010, r6, 0x8000000) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f00000001c0)={0x0, 0x393b430f2a7a606b}, 0x4) r8 = fcntl$dupfd(r7, 0x0, r7) sendmsg$nl_generic(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x7, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_setup(0x48b6, &(0x7f00000002c0)={0x0, 0xb09, 0x0, 0x3, 0x3b7, 0x0, r8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, {0x0, r10}}, 0x101) syz_io_uring_submit(r1, r9, &(0x7f0000000880)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000840)={&(0x7f00000003c0)=@xdp, 0x80, &(0x7f0000000780)=[{&(0x7f0000000440)=""/92, 0x5c}, {&(0x7f0000000200)=""/19, 0x13}, {&(0x7f00000004c0)=""/58, 0x3a}, {&(0x7f0000000500)=""/110, 0x6e}, {&(0x7f0000000580)=""/168, 0xa8}, {&(0x7f0000000640)=""/7, 0x7}, {&(0x7f0000000680)=""/199, 0xc7}], 0x7, &(0x7f0000000800)=""/6, 0x6}, 0x0, 0x2, 0x1, {0x1, r10}}, 0x6) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:05:03 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = dup(0xffffffffffffffff) ftruncate(r5, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x1e) 23:05:03 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0xb, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 23:05:03 executing program 2: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5e, 0x2800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r5, 0x0, r5) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x406340, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000300)='\x00', 0x0, r6) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, {0x0, r7}}, 0x101) syz_io_uring_submit(r4, r2, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x6000, @fd=r5, 0x9, 0x401, 0x800, 0x14, 0x1, {0x2, r7}}, 0x928) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) r8 = fsmount(0xffffffffffffffff, 0x0, 0x7c) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff2000/0xc000)=nil, 0xc000, 0x4, 0x40010, r8, 0x8000000) 23:05:03 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="600100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:05:03 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487f49f8000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0xf5d}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r4, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) 23:05:03 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x4c000000, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:05:03 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0x91}, {&(0x7f0000002a80)=""/102400, 0x19000}, {&(0x7f0000001e40)=""/9, 0x9}, {0x0}, {&(0x7f00000002c0)=""/237, 0xed}, {&(0x7f0000000100)=""/3, 0x3}], 0x9, 0x0) io_setup(0x2d47, &(0x7f0000000000)) [ 2341.700756] __nla_validate_parse: 5 callbacks suppressed [ 2341.700768] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2341.722682] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2341.723521] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 23:05:03 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="c00200001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) [ 2341.766068] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 23:05:03 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x68000000, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:05:03 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0x91}, {&(0x7f0000002a80)=""/102400, 0x19000}, {&(0x7f0000001b00)=""/36, 0x24}, {&(0x7f00000002c0)=""/237, 0xed}, {&(0x7f0000000100)=""/3, 0x3}], 0x8, 0x0) io_setup(0x2d47, &(0x7f0000000000)) 23:05:03 executing program 7: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) signalfd4(r3, &(0x7f0000000080)={[0xffffffff]}, 0x8, 0x80800) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) io_uring_enter(0xffffffffffffffff, 0x3172, 0x8b76, 0xb8d2fe622c9dd4a4, &(0x7f0000000180)={[0x80000001]}, 0x8) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91, 0x0, 0x9}) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, 0x0}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:05:03 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0xf, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 23:05:03 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = dup(0xffffffffffffffff) ftruncate(r5, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x24) 23:05:03 executing program 2: prctl$PR_CAPBSET_READ(0x17, 0xa) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40004}, 0x634) prctl$PR_CAPBSET_READ(0x17, 0x27) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) prctl$PR_CAPBSET_READ(0x17, 0x11) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x5, 0x0, 0x0) prctl$PR_CAPBSET_READ(0x17, 0x7) r5 = perf_event_open$cgroup(&(0x7f00000001c0)={0x1, 0x80, 0x9, 0x7, 0x1, 0x3, 0x0, 0x7fff, 0x10000, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xffffffe1, 0x1, @perf_config_ext={0x2, 0x140}, 0x408, 0xe391, 0x5, 0x3, 0x5, 0x51c, 0x0, 0x0, 0x1, 0x0, 0x2}, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f0000000240)={0x401, 0x0, &(0x7f0000000040)=[r5, r3]}, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000003, 0x10010, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) syz_io_uring_submit(r6, r2, &(0x7f0000000280)=@IORING_OP_ASYNC_CANCEL={0xe, 0x1, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x8001) lseek(r3, 0x64e, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) unshare(0x28000280) 23:05:03 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="c00e00001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) [ 2341.943006] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2341.949055] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2342.012793] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2342.031150] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 23:05:17 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0x91}, {&(0x7f0000002a80)=""/102400, 0x19000}, {&(0x7f0000001b00)=""/36, 0x24}, {&(0x7f00000002c0)=""/237, 0xed}, {&(0x7f0000000100)=""/3, 0x3}], 0x8, 0x0) io_setup(0x2d47, &(0x7f0000000000)) 23:05:17 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x69020000, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:05:17 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="e03f03001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:05:17 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x10, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 23:05:17 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = dup(0xffffffffffffffff) ftruncate(r5, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x2a) 23:05:17 executing program 2: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x4000010, r0, 0x0) syz_io_uring_setup(0x59e7, &(0x7f00000001c0)={0x0, 0x55c, 0x10, 0x1, 0x3e4, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0x7) 23:05:17 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487f49f8000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0xf5d}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r4, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) 23:05:17 executing program 7: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r5, 0x0, r5) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x406340, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000300)='\x00', 0x0, r6) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, {0x0, r7}}, 0x101) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x3, 0x0, r5, 0x0, &(0x7f0000000240)="d7d7ca6a77f2821d4c881525abe5fee5f143fa1501da5dc405bf90f4085c8e90bde39bc0b5da74136f9e2e1a2c5d2803c127fb50a9638fc85bfa45a5ba681ee473717ad8b714c925236d5e0967aac47c9cc2b46889d3b4e70e3474a1c6f191d94568956d1f137cc33c0c3a67691f68deddabbef3a9214fe5e3dd43f6ff564741f325ca30239059d33dc562e612c502cd804ccb7ac886178666d0d4bc6eb24c87f0f2da660ff771416caf7c833073c8a8bb73e8ccd102", 0xb6, 0x42, 0x1, {0x0, r7}}, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_setup(0x6e68, &(0x7f00000001c0)={0x0, 0x2a63, 0x20, 0x0, 0x22e, 0x0, r0}) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 2355.431501] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2355.437000] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2355.444692] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2355.450469] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 23:05:17 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100201a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) [ 2355.499901] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 23:05:17 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x6c000000, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) [ 2355.628723] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2355.657061] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 23:05:31 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = dup(0xffffffffffffffff) ftruncate(r5, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x30) 23:05:31 executing program 2: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) preadv(r3, &(0x7f0000000700)=[{&(0x7f0000000040)=""/51, 0x33}, {&(0x7f00000001c0)=""/235, 0xeb}, {&(0x7f00000002c0)=""/133, 0x85}, {&(0x7f0000000380)=""/174, 0xae}, {&(0x7f0000000440)=""/25, 0x19}, {&(0x7f0000000480)=""/93, 0x5d}, {&(0x7f0000000500)=""/54, 0x36}, {&(0x7f0000000540)=""/188, 0xbc}, {&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f0000000680)=""/68, 0x44}], 0xa, 0x80, 0x7) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000a40)=[&(0x7f0000000800)='(\x8e\x00', &(0x7f0000000840)='\x00', &(0x7f0000000880)='\x00', &(0x7f00000008c0)='\x00', &(0x7f0000000900)='\x00', &(0x7f0000000940)='\'/!*]\x00', &(0x7f0000000980)='^!{]\xd8\xaa\x00', &(0x7f00000009c0)='\x00', &(0x7f0000000a00)='\x00'], &(0x7f0000000bc0)=[&(0x7f0000000ac0)='\x00', &(0x7f0000000b00)='*-}#&:}\'$^)^{++.\x00', &(0x7f0000000b40)='\x00', &(0x7f0000000b80)='%[#&+\x00'], 0x1000) 23:05:31 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x74000000, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:05:31 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487f49f8000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0xf5d, 0x5}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r4, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) 23:05:31 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0x91}, {&(0x7f0000002a80)=""/102400, 0x19000}, {&(0x7f0000001b00)=""/36, 0x24}, {&(0x7f00000002c0)=""/237, 0xed}, {&(0x7f0000000100)=""/3, 0x3}], 0x8, 0x0) io_setup(0x2d47, &(0x7f0000000000)) 23:05:31 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="00f0ff7f1a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:05:31 executing program 7: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x110, r0, 0x8000000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x406340, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000300)='\x00', 0x0, r5) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, {0x0, r6}}, 0x101) syz_io_uring_submit(r4, r2, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r3, 0xfffffffffffff800, 0x0, 0x2, 0x0, 0x1, {0x0, r6}}, 0x5) 23:05:31 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x11, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) [ 2369.373111] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2369.373459] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2369.384551] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2369.407966] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 23:05:31 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0x91}, {&(0x7f0000002a80)=""/102400, 0x19000}, {0x0}, {&(0x7f0000001b00)=""/36, 0x24}, {&(0x7f00000002c0)=""/237, 0xed}, {&(0x7f0000000100)=""/3, 0x3}], 0x9, 0x0) io_setup(0x2d47, &(0x7f0000000000)) 23:05:31 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x48, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 23:05:31 executing program 2: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000c, 0x4000010, r0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:05:31 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487f49f8000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0xf5d, 0x5}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r4, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) 23:05:31 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="effdffff1a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:05:31 executing program 7: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000008, 0x80010, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:05:31 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x7a000000, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:05:31 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = dup(0xffffffffffffffff) ftruncate(r5, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x36) [ 2369.597556] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2369.605289] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 23:05:31 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0x91}, {&(0x7f0000002a80)=""/102400, 0x19000}, {0x0}, {&(0x7f0000001b00)=""/36, 0x24}, {&(0x7f00000002c0)=""/237, 0xed}, {&(0x7f0000000100)=""/3, 0x3}], 0x9, 0x0) io_setup(0x2d47, &(0x7f0000000000)) 23:05:31 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x4c, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) [ 2369.644008] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2369.718619] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2369.786959] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2369.792826] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 23:05:45 executing program 7: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:05:45 executing program 2: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x5, 0x0, 0x0) r5 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) r8 = dup2(r0, r5) syz_io_uring_submit(r6, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, r8, &(0x7f0000000240)={0x4200, 0xf4, 0x10}, &(0x7f0000000280)='./file0\x00', 0x18, 0x0, 0x23456}, 0x5) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x20010, r0, 0x8000000) r10 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x8010, 0xffffffffffffffff, 0x10000000) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x2, 0x4000, @fd_index=0xa, 0x2, 0x9, 0x1f, 0xe, 0x0, {0x2, r11}}, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000300)='\x00', 0x0, 0xffffffffffffffff) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, {0x0, r12}}, 0x101) syz_io_uring_submit(r6, r10, &(0x7f00000001c0)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x0, {0x0, r12}}, 0x1f) 23:05:45 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x9effffff, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:05:45 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487f49f8000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0xf5d, 0x5}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r4, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) 23:05:45 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x68, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 23:05:45 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580200001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:05:45 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = dup(0xffffffffffffffff) ftruncate(r5, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x3c) 23:05:45 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0x91}, {&(0x7f0000002a80)=""/102400, 0x19000}, {0x0}, {&(0x7f0000001b00)=""/36, 0x24}, {&(0x7f00000002c0)=""/237, 0xed}, {&(0x7f0000000100)=""/3, 0x3}], 0x9, 0x0) io_setup(0x2d47, &(0x7f0000000000)) [ 2383.474094] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2383.477150] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2383.502486] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2383.503696] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2383.522854] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 23:05:45 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580300001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:05:45 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0xbf1f0000, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:05:45 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = dup(0xffffffffffffffff) ftruncate(r5, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x600) 23:05:45 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0x91}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x24}, {&(0x7f00000002c0)=""/237, 0xed}, {&(0x7f0000000100)=""/3, 0x3}], 0x8, 0x0) io_setup(0x2d47, &(0x7f0000000000)) 23:05:45 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x6c, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 23:05:45 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x7, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000440)) r2 = syz_io_uring_setup(0x4c4b, &(0x7f0000000080), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r5 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) sendmsg$nl_generic(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x7, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r7, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0x1, 0x2, 0x301, 0x0, 0x0, {0xc, 0x0, 0x9}, [@CTA_EXPECT_NAT={0x4}, @CTA_EXPECT_ZONE={0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0x20}, 0x800) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r8, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) sendfile(r5, r2, &(0x7f0000000400)=0x5, 0x508) syz_io_uring_setup(0x6831, &(0x7f00000001c0)={0x0, 0xea83, 0x8, 0x0, 0x2c4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000240)) io_uring_enter(r2, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:05:45 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580800001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:05:45 executing program 2: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r6, 0x0, r6) r7 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x406340, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000300)='\x00', 0x0, r7) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r5, &(0x7f0000001940)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, r6, 0x0, &(0x7f0000001900)={&(0x7f0000000240)=@can, 0x80, &(0x7f0000001840)=[{&(0x7f00000002c0)=""/87, 0x57}, {&(0x7f0000000340)=""/193, 0xc1}, {&(0x7f0000000440)=""/107, 0x6b}, {&(0x7f00000004c0)=""/229, 0xe5}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/223, 0xdf}, {&(0x7f00000016c0)=""/116, 0x74}, {&(0x7f0000001740)=""/220, 0xdc}, {&(0x7f0000000040)=""/14, 0xe}], 0x9, &(0x7f0000001e00)=""/4096, 0x1000}, 0x0, 0x0, 0x1, {0x2, r8}}, 0x6) r9 = socket$packet(0x11, 0x3, 0x300) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x5, 0x0, 0x0) ioctl$sock_SIOCDELRT(r9, 0x890c, &(0x7f00000001c0)={0x0, @in={0x2, 0x4e23, @private=0xa010102}, @hci={0x1f, 0x4, 0x2}, @ethernet={0xd988238042da7f44, @local}, 0x3, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0xffff, 0x400}) setxattr$security_evm(&(0x7f0000001980)='./file0\x00', &(0x7f00000019c0), &(0x7f0000001a00)=@v1={0x2, "adac1dd452351d328a94d8496d4ab99385"}, 0x12, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r10, r1, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:05:45 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487f49f8000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0xf5d, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r4, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) [ 2383.753393] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2383.762148] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2383.794821] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2383.821746] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=11542 comm=syz-executor.7 [ 2383.876898] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2383.893449] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=11551 comm=syz-executor.7 23:06:00 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x74, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 23:06:00 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0xf0ffffff, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:06:00 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487f49f8000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0xf5d, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r4, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) 23:06:00 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000010000000d00"], 0x1c}}, 0x0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_RESP(r0, &(0x7f0000000b00)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x208000, 0x0) write$binfmt_elf64(r3, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x40, 0x1f, 0x3, 0x0, 0x3, 0x6, 0x4, 0x20f, 0x40, 0x1c0, 0x387, 0x8, 0x38, 0x2, 0x3ff, 0x800, 0x39a5}, [{0x60000000, 0xff, 0xde, 0x8001, 0x101, 0x10001, 0xc42, 0xfffffffffffffffd}], "8ff3bbfcdd85c0419f955a700c0f68f90435910866071603d640a1c0d69766065589cb1685980eab967d40e7aea178a092fcf8d36598ee575c03dbfcb09ba2ce6b2140d63342b9d546fca1c33a77f2fd5dd83824e6c9417140c6efca538aa4973d26b687c2348c8dd47623329e8caf68d9472755a27959e2b725a08485a2278e58070fe6dfb39a208bd3c8d73eb3bd8b9c10ac591df9a8fa5dfdff47c82c28d8d4c9a8d0ccb25d42758e0c30d8", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x825) r4 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xec, 0x0, r3}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) r7 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, 0x0}, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r8, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r4, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:06:00 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = dup(0xffffffffffffffff) ftruncate(r5, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0xc00) 23:06:00 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580900001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:06:00 executing program 2: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x5, 0x0, 0x0) getresgid(&(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r5, @ANYBLOB="020000d6a71800000000002e2f316f6c653000"]) 23:06:00 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0x91}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x24}, {&(0x7f00000002c0)=""/237, 0xed}, {&(0x7f0000000100)=""/3, 0x3}], 0x8, 0x0) io_setup(0x2d47, &(0x7f0000000000)) [ 2398.533660] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2398.534609] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2398.543784] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2398.546040] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2398.586582] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 23:06:00 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580a00001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) [ 2398.619355] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.7'. 23:06:00 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = dup(0xffffffffffffffff) ftruncate(r5, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x1200) 23:06:00 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487f49f8000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0xf5d, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r4, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) 23:06:00 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0x91}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x24}, {&(0x7f00000002c0)=""/237, 0xed}, {&(0x7f0000000100)=""/3, 0x3}], 0x8, 0x0) io_setup(0x2d47, &(0x7f0000000000)) 23:06:00 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0xffffe000, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:06:00 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x7a, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) [ 2398.817505] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2398.916021] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2398.917782] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2398.929845] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 23:06:13 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="581000001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:06:13 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487f49f8000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0xf5d, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r4, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) 23:06:13 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0x91}, {0x0}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x24}, {&(0x7f00000002c0)=""/237, 0xed}, {&(0x7f0000000100)=""/3, 0x3}], 0x9, 0x0) io_setup(0x2d47, &(0x7f0000000000)) 23:06:13 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0xf0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 23:06:13 executing program 2: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x5, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r5, 0x0, r5) pwrite64(r5, &(0x7f0000000240)="8f8f53d51faf5347d94e7850eed455cff00e4f0c4ec87b13f2540f736dea74bdfda88319cef1359228669ac044fdfb863903ad928221db648398d07ffc434a0743b3c06e9d114ee55a2b", 0x4a, 0x3) r6 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000004, 0x12, 0xffffffffffffffff, 0x8000000) r8 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x406340, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000300)='\x00', 0x0, r8) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) syz_io_uring_submit(r10, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x12345}, 0x9) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, {0x0, r9}}, 0x101) syz_io_uring_submit(r7, r2, &(0x7f0000000040)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r6, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r9}}, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:06:13 executing program 7: r0 = syz_io_uring_setup(0x4c4c, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000200)={0x40, {0xd, 0x200, 0x2, 0x6e6, 0x7fff}}) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x4, 0x4}, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800000, 0x0, @perf_bp={0x0}}, 0x0, 0x9, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x3197, 0x55f8, 0x3, &(0x7f00000001c0)={[0x1]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:06:13 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = dup(0xffffffffffffffff) ftruncate(r5, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x1800) 23:06:13 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0xfffff000, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) [ 2412.062108] __nla_validate_parse: 1 callbacks suppressed [ 2412.062132] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2412.063568] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2412.067660] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 23:06:13 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="581900001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) [ 2412.116832] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2412.135940] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 23:06:14 executing program 7: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) io_uring_enter(r0, 0x15a9, 0xe1b5, 0x1, &(0x7f0000000040)={[0x3]}, 0x8) 23:06:14 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x2fe, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 23:06:14 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0xffffff7f, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:06:14 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0x91}, {0x0}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x24}, {&(0x7f00000002c0)=""/237, 0xed}, {&(0x7f0000000100)=""/3, 0x3}], 0x9, 0x0) io_setup(0x2d47, &(0x7f0000000000)) 23:06:14 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = dup(0xffffffffffffffff) ftruncate(r5, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x1e00) 23:06:14 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="582500001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) [ 2412.386515] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 23:06:14 executing program 2: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x16}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000640)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000240)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x10}, &(0x7f00000001c0)='./file0\x00', 0x18, 0x0, 0x23456, {0x0, r3}}, 0xff) r4 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_mount_image$msdos(&(0x7f0000000280), &(0x7f0000000380)='./file0\x00', 0x100, 0x3, &(0x7f0000000580)=[{&(0x7f00000003c0)="234c8182c1ce37d3532bf6ac429094f1529e8d5dc00c68809bf8bde399e6", 0x1e, 0x5}, {&(0x7f0000000400)="01d7685a7cc150db01dbcea15746810c296038359fee9d13d8095d7082bad24ea28781b3a44b999641345d218e1399608876896a1f8eda762111dd6a8a522af849d0741bfb434c0f6df40c594fb697c6ba76a50c", 0x54, 0x80000000}, {&(0x7f0000000480)="8b284c37efe825424ef47c27422985493997aecfaa2c8f25c75acb0fcb6485609ac07e249faf102b9a1b07f66a070a004f4ee556a338e84b4a15ac17f6bb778ade28dc6fd9221edad5f33895573af71b08113fb8cfa5ee31cf75127cfb3ee4230aed351637d7270572e58913e53afca5fe101336fdf1d55e0bc953def30130d4bf1e0e73c9053ae912179a0a4ee9c840dea051d91a24eb0caae8ebef6e9d60825dd694fb1dd3fd6623b190596b462118da59af506964ab0757741f39ad52ab5ec0c45d8d571d454e2b38cade22af99cee31f995374", 0xd5, 0x101}], 0x201092, &(0x7f0000000700)=ANY=[@ANYBLOB='dots,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c6368642c6d6561737572652c736d61636b66736861743d292c0044cf09c747182d0bd6a18df1da96de0c4791f1"]) r7 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x406340, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000300)='\x00', 0x0, r7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000017c0)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @remote}, 0x14) bind(r7, &(0x7f0000000680)=@can={0x1d, r8}, 0x80) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, {0x0, r9}}, 0x101) syz_io_uring_submit(r1, r6, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x2, 0x4004, @fd_index, 0x5, 0x0, 0x0, 0xa, 0x1, {0x2}}, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0x0, {0x5668}}, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r10, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 2412.406720] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2412.457471] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 23:06:14 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487f49f8000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0xf5d, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r4, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) [ 2412.525901] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2412.582985] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 23:06:14 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0xffffff9e, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:06:14 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0x91}, {0x0}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x24}, {&(0x7f00000002c0)=""/237, 0xed}, {&(0x7f0000000100)=""/3, 0x3}], 0x9, 0x0) io_setup(0x2d47, &(0x7f0000000000)) 23:06:14 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = dup(0xffffffffffffffff) ftruncate(r5, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x2000) 23:06:14 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="586000001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:06:14 executing program 7: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0x2}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x406340, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000300)='\x00', 0x0, r6) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, {0x0, r7}}, 0x101) syz_io_uring_submit(r4, 0x0, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x400, 0x400, 0x0, {0x0, r7}}, 0xff) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) process_vm_readv(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000003c0)=""/55, 0x37}, {&(0x7f0000000400)=""/250, 0xfa}, {&(0x7f0000000580)=""/182, 0xb6}, {&(0x7f0000000500)=""/2, 0x2}], 0x4, &(0x7f0000000680), 0x0, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r11, r12, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) syz_io_uring_submit(r9, r12, &(0x7f0000000380)=@IORING_OP_MADVISE={0x19, 0x4, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xb, 0x1, {0x0, r7}}, 0x7) syz_io_uring_submit(r8, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:06:29 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0xfffffff0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:06:29 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x300, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 23:06:29 executing program 7: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x20000042}, 0x3f) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:06:29 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = dup(0xffffffffffffffff) ftruncate(r5, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x2400) 23:06:29 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000002a80)=""/102400, 0x19000}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x24}, {&(0x7f00000002c0)=""/237, 0xed}, {&(0x7f0000000100)=""/3, 0x3}], 0x8, 0x0) io_setup(0x2d47, &(0x7f0000000000)) 23:06:29 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487f49f8000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0xf5d, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r4, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) 23:06:29 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580102001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:06:29 executing program 2: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0x1f89, 0x0, 0x3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) io_uring_enter(r0, 0x2445, 0x1257, 0x1, &(0x7f0000000040)={[0xafdd]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 2427.609845] __nla_validate_parse: 2 callbacks suppressed [ 2427.609861] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2427.616949] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2427.623541] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 23:06:29 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580103001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) [ 2427.654888] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2427.658138] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 23:06:29 executing program 2: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) socket$packet(0x11, 0x2, 0x300) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x5, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f0000000040), &(0x7f00000001c0)=0x4) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) syz_io_uring_setup(0x4f90, &(0x7f0000000300)={0x0, 0x3eaa, 0x4, 0x3, 0x35, 0x0, r0}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000380)=0x0) r9 = syz_open_dev$vcsn(&(0x7f00000003c0), 0x1ff, 0x40000) syz_io_uring_submit(r1, r8, &(0x7f0000000400)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd=r5, 0x0, 0x0, 0xfffffffb, 0x8, 0x0, {0x0, 0x0, r9}}, 0x800) sendmsg$nl_generic(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x7, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) openat(r7, &(0x7f0000000200)='./file0\x00', 0x10001, 0x80) 23:06:44 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000002a80)=""/102400, 0x19000}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x24}, {&(0x7f00000002c0)=""/237, 0xed}, {&(0x7f0000000100)=""/3, 0x3}], 0x8, 0x0) io_setup(0x2d47, &(0x7f0000000000)) 23:06:44 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580104001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:06:44 executing program 2: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x100, 0x114) 23:06:44 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487f49f8000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0xf5d, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) 23:06:44 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x500, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 23:06:44 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = dup(0xffffffffffffffff) ftruncate(r5, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x2a00) 23:06:44 executing program 7: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$getown(r3, 0x9) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) sendmsg$nl_generic(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x20, 0x18, 0xc21, 0x0, 0x0, {0xff}, [@typed={0x8, 0x0, 0x0, 0x0, @u32=0xfffffffc}, @nested={0x4, 0x10}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000004}, 0x0) io_uring_enter(r5, 0x3650, 0x17c3, 0x1, &(0x7f00000001c0)={[0x3ff]}, 0x8) io_uring_enter(r0, 0x62c, 0xad22, 0x2, &(0x7f0000000040)={[0x1f]}, 0x8) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) sendmsg$nl_generic(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x7, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x0, 0x0, r5, 0x0, r5, 0x2, 0x0, 0x1}, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:06:44 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0xffffffff, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) [ 2442.734955] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2442.758780] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 23:06:44 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580105001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) [ 2442.780710] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2442.830710] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2442.840968] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 23:06:44 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="0f0000001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:06:44 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000002a80)=""/102400, 0x19000}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x24}, {&(0x7f00000002c0)=""/237, 0xed}, {&(0x7f0000000100)=""/3, 0x3}], 0x8, 0x0) io_setup(0x2d47, &(0x7f0000000000)) 23:06:44 executing program 2: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r4, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)="c3c109160bd0ceb234ceb1ac9173f727331b25431d228756e5f7efb213ff91a925be28528ea9545ccee6b9133aad3a9beb4582f300829d193fba27ac81822434a55f13072decfad35931ee3f841db76b79a6a8e77d539dc2c617c4aaed1b42e910abebf0a16d491996c29ba13fb0ce4470937d05db1efe2ee841c640ae878d4219c82e92956bf1df64c6e015a557da15d56c8fb8f30632b8b045e616c75b4da038f929097c1e5e183ce44f1181cad00a3e8b094007c8afe5da387ff906bab5b8d7721d11d92c86d0d52a8455125381ae3fa1", 0xd2, 0x800, 0x0, {0x0, r5}}, 0x100) r6 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, 0x0}, 0x0) r7 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x101000, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r8, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r9 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r9, 0x0, r9) epoll_ctl$EPOLL_CTL_DEL(r7, 0x2, r9) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:06:44 executing program 7: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x1, 0x9, &(0x7f00000006c0)=[{&(0x7f0000000200)="fbe2454726c69a1924782f647f98ca9f2db500b9d88dd48d1099accd0be5cdf96b1bc7b5dbc486bb31e1ad13a3b97ba00e22ad1b83b8653d4d40776fcfed362169864cf5cb9a21d18bbfbc8f29a94620a443e01f4dc024675b97c103032450f4764b112ffc9bb1a00cea1e1f3370246ecf98dce9393cd86401d00f576667823ceaa819cb497c77047120fb5127f79b34c51f9d50844bfc6d34a17f260f29bbbc36cac2637b5e70c4a843fb5b5d2f7b7cd1131118f97defdf62a262bad147e38d8804d4b7ed6364a98d", 0xc9, 0x6}, {&(0x7f0000000300)="df917367c9ba6b01548d7e697ca3360c511196629d11d19e923b4a4d1e1e9b4124b4471a618a0aaaffc04cd837c1ad92a9ff84dfc0ffc08d4e1cde50aa42b752f3bff484262bb6e2727703d1e7", 0x4d, 0x7fffffff}, {&(0x7f0000000380)="db41b230b84819c788550f08a7d538c06d101b565fe70c8fe58d32a327f4c6b49472cb4f36610d4c0f2faf6df8e5cd4650b2bab580514d4f83e10e45613dcf95b22d240350d4274b3286c5d38cdd66fce7b007fcb956f060eba4058d6fdc3e435e70c92def3da4a00e0c78109664965954fbc594505a40f94722b182a997684dbb905316f655adad0bf62730bdd1c2a92acd183696ed65355163ae3463e9", 0x9e, 0x401}, {&(0x7f0000000440), 0x0, 0x5}, {&(0x7f0000000480)="dbe87c9ca94495ea2101", 0xa}, {&(0x7f00000004c0)="c39a4960f3c14da92fa1cddafbda773a3fdfb2fafa647aa6a7d3aba987f8a71aaaff036f19759411163dad0a0789148a5fba48689eff24ff47c91602685359cb2e1f6c3a2ce5ce7c8fc4205d30de3fe5ea657093a2711f23090bb651498d92452733eb4081e166cf5af7669d51b654e005ab", 0x72, 0x2}, {&(0x7f0000000540)="11f4b51eab675f742aea1a", 0xb, 0x4000000}, {&(0x7f0000000580)="cba323c3c7d1d05cb9f4459da18c8967a2edb71992b5105c0f6b01f9c6b3a8f394a480abb0419dbe2bdbc17792c50662ffb72ae0ba81247a03", 0x39}, {&(0x7f00000005c0)="588cb517281519f979fea281423960b96d734a36b73656c95d89a321fc8a1e9c2547e7c78c44ea07ef3c4b17fbb5796d8652ededbca496bce2bc3538f12d3f3854ac6aa6641a706f1d7c09e0fa633155594b3ce382db0e5729e0f778bbe4c3a204e7867c4c62be406158219a1a1165f76beebe1899907ad802c971ded83c7dcb23bf5b20bb9ed6b7d01cdacea05a82fb41afde7825b0bdb1c00c6047bd53d0b3d4983c45e880c377428ff8785a7b465e5176e22e218a3dc10570b609ca0578db49614ad2eb2dbb0191dd05312e69650cd8a6e4d6f48019ea24424a54a64961c1270ffdd36ff19c1cebf5f9339deea76ea729164cfbe7", 0xf6, 0x2}], 0x80000, &(0x7f00000007c0)={[{@nobh}, {@quota}, {@orlov}, {@data_journal}], [{@uid_gt={'uid>', 0xee01}}, {@measure}, {@obj_user={'obj_user', 0x3d, '\x00'}}]}) syz_io_uring_submit(r1, r2, &(0x7f00000008c0)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, r3, &(0x7f0000000840)={0x34400, 0x5}, &(0x7f0000000880)='./file0\x00', 0x18, 0x0, 0x12345}, 0x6) r4 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:06:44 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580106001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:06:44 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x600, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 23:06:44 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = dup(0xffffffffffffffff) ftruncate(r5, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x3000) 23:06:44 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="f00000001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) [ 2443.173047] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 23:06:45 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487f49f8000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0xf5d, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) 23:06:45 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="070100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:06:45 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580107001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) [ 2443.399474] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2443.514862] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.1'. 23:06:59 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487f49f8000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0xf5d, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) 23:06:59 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580108001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:06:59 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = dup(0xffffffffffffffff) ftruncate(r5, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x3600) 23:06:59 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x700, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 23:06:59 executing program 2: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) socket$packet(0x11, 0x3, 0x300) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x406340, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000300)='\x00', 0x0, r3) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, {0x0, r4}}, 0x101) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x0, @fd_index=0x7, 0x1, &(0x7f0000001680)=[{&(0x7f00000001c0)=""/144, 0x90}, {&(0x7f0000000280)=""/112, 0x70}, {&(0x7f0000000380)=""/80, 0x50}, {&(0x7f0000000400)=""/111, 0x6f}, {&(0x7f0000000480)=""/157, 0x9d}, {&(0x7f0000000580)=""/210, 0xd2}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x7, 0x8, 0x1, {0x0, r4}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:06:59 executing program 7: listen(0xffffffffffffffff, 0xfb29) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, r3, 0x0, &(0x7f0000000240)="ca528c99434cbd914a4687228b09474b560af793ef546d3731bfb0737e83bb50f09a3b405dc3872ec23912aa5c0f20461c659aa9553b08c394cfaf3abc8ab839ff3831019a14b0ce82abebd6a4358a4927f3de35b9b36e6db60743cd9bb22b43f45c565efb01602f68f2923a", 0x6c, 0x2000}, 0x1) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x9, 0x0, 0x0, 0x3ff, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = dup3(r5, 0xffffffffffffffff, 0x80000) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r6, 0x800c6613, &(0x7f00000001c0)=@v1={0x0, @aes256, 0x0, @desc2}) r7 = openat$cgroup_ro(r6, &(0x7f0000000300)='cpuset.memory_pressure\x00', 0x0, 0x0) syz_io_uring_setup(0x264d, &(0x7f0000000340)={0x0, 0x61aa, 0x20, 0x1, 0x2b4, 0x0, r7}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000003c0), &(0x7f0000000400)) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x2000, 0x1c) 23:06:59 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="600100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:06:59 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {0x0}, {&(0x7f0000002a80)=""/102400, 0x19000}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x24}, {&(0x7f00000002c0)=""/237, 0xed}, {&(0x7f0000000100)=""/3, 0x3}], 0x9, 0x0) io_setup(0x2d47, &(0x7f0000000000)) [ 2457.534644] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2457.556686] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 23:06:59 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580109001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) [ 2457.620830] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 23:07:13 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="c00200001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:07:13 executing program 2: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) lstat(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000140)) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:07:13 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = dup(0xffffffffffffffff) ftruncate(r5, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x3c00) 23:07:13 executing program 7: ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xfd46, 0x0, 0xfffffffc}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) epoll_pwait(0xffffffffffffffff, &(0x7f0000000040)=[{}, {}, {}, {}], 0x4, 0x4, &(0x7f00000001c0)={[0x7]}, 0x8) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) sendmsg$nl_generic(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001800210c000000000000000002000000080000000000000008000700", @ANYRES32=0xee01, @ANYBLOB="b4453c5fadba7b850cb4e82211867f36375fcded40ddd9ff4ca9a0"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000200)={0xc0000001}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r5, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:07:13 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x900, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 23:07:13 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487f49f8000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0xf5d, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r4]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) 23:07:13 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {0x0}, {&(0x7f0000002a80)=""/102400, 0x19000}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x24}, {&(0x7f00000002c0)=""/237, 0xed}, {&(0x7f0000000100)=""/3, 0x3}], 0x9, 0x0) io_setup(0x2d47, &(0x7f0000000000)) 23:07:13 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58010a001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) [ 2471.726876] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2471.747115] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2471.776087] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 23:07:13 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="c00e00001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:07:13 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58010b001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:07:13 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {0x0}, {&(0x7f0000002a80)=""/102400, 0x19000}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x24}, {&(0x7f00000002c0)=""/237, 0xed}, {&(0x7f0000000100)=""/3, 0x3}], 0x9, 0x0) io_setup(0x2d47, &(0x7f0000000000)) 23:07:13 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0xa00, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 23:07:13 executing program 7: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000001005bf200dc58304a29cd4871c6000018000000", @ANYRES32=r5, @ANYBLOB="e7000000000000002e2f66696c653000"]) r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x6, 0x4010, r0, 0x8000000) syz_io_uring_setup(0x741e, &(0x7f00000001c0)={0x0, 0x4d4a, 0x20, 0x2, 0x57}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x0, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x2075) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:07:13 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = dup(0xffffffffffffffff) ftruncate(r5, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x800000) 23:07:13 executing program 2: r0 = syz_io_uring_setup(0x4c4d, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x5, 0x0, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x4004, @fd_index=0x2, 0x1, 0x8001, 0x9, 0x18, 0x1, {0x3, r5}}, 0x800) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 23:07:13 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487f49f8000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0xf5d, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r4]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) [ 2472.023462] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2472.043486] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 23:07:13 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58010f001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:07:13 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="e03f03001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) [ 2472.079014] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 23:07:13 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0xb00, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 23:07:13 executing program 7: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) [ 2472.157661] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 23:07:14 executing program 2: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x7, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x100000e, 0x100010, r0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x5, 0x0, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f0000000040)={0x5, &(0x7f0000001480)=[{0x1000, 0x9e, &(0x7f00000001c0)="d6e1586fa9f25d0e3aec77e1f7aa35254cf819c4ebbb6e1666049c1ff05a8a06876d8c1138a13908672c76b37aa9d5e184af488b3f76ce2ef5be17c73b523bbdec2ad04bc339afe4611c700cce18070d13234c0915ff871136f73c2973fb9dd01072d1e79271c3b53fdcb1a962a83f8637230c8d9078ca678ea91dd3453c7d6b81473363b4ce84408cc044e322016e85968cd88e9b1f8081acca07296834", 0x1}, {0x8a60, 0x1000, &(0x7f0000000280)="739a088e92336411fcd47d3bb025deb84ecf81699b9043dbb1b85b1ddd6e1460bdaea394b98f1f50f104008d662aecca30a12f251319f7556d2abc1ce0e7816e03dd690b39a1400f99f74cd96db60da6b506501732c6bb26d4aad829c751cffde4276446aa8cbd6209098973a380d9cb837cd6c427060ea827d5e30460b0257fe13c4731d043b7b3d0e9404e0319aa6c9a0db7eadd7a1e9ff5a4dcc567319090714eaf2e7cd72a07de543c16d9bb9ec92598a0c6eedc225e87283218712176a60787bab4020011dce865d78fc3c2446aea4e514573a8b50ce81376bbb5630e5dd4b787f80586fcaf7319e27c0cd43baa0bf55e5b785d0a7a005c2f856f21d28176bb4ce04051afdaec1086782c148feb2fb2e66002abe65e09ea0c6b052edfe5e711361d0e940c18cbb0adedee7ae9ecaccb26e03ac05812a719c30ff840b2efe05d7bb468059e3b154c138499ff17930ff412e570205a6376ed764a158962f33bba288ad6c556141a15da219cfeb306ba29c7f30ad907fd14a9a3d2fe25b1605133782aa73e806a677024e2da4c413c2ce2d3d3a63f6b2f908846a00ee680668228659ee46689e9b1eed37f69060871e9e0f8a28c8b11167fbf4be64cfe0896e2ea835c34044227fba7198da378a8e43319c05bed0b683e529bdf8164a546f4b2758dc714a29d7423b04ec9f7724f392d1f7bc0a7e9e7191f7fe7fa8419e75ff7140a5de38a9402b72ad02a223f3244525d4dbea3f6908b8b95732fb8b34cb2f8bc435e2b6a39907bdc3049e970b026194bc504a24e20cc5daed2af5b741076c53a674661bb6c221ad181f88620e422808d5ea3afa0c2067602f9e206c5ae8a2d1883a518d4325738f3292770f341b0c2bc23c31b19a107cc7633b88fb15e70b55dbe81822929f80115360afcebefe20181598c439f93ee95248d05ca5cbb451a95ed0d75e64f0426dd62b3571c8d366dd34097659f8d5e9489189bd13904ec994d26a22e49ee1a200833ee6625ca8b12b9afab6243ad6afcdeac7a3dc8f78a217a4b909fa4bf382792eae29a0e11e10269606b42324192180075b6fa8703c188dd4df897d2f1c66d5c95c1b622e20df798dbf93a05e91b2be943414b99e63acc0d1150bfb5d379f1632436f1fd1d36014901b607e07622a4f197e5acf8cd84dea043ca8b9efe93e63f2ade83971e1b6b2396dfa36b366d7f4956f11959a15bddcd6e9ff55f7aae16fc7b26f696b1dd3c14788550ff323b42445f2e554fd929c1f9da315827326cb87a642232799d0a3cdc3ef841db3cd112c5242f4aafdacf3f7d35c192e2daa93ba9a82604e1efca392c7b5d2ed049c5f29c27773cb90fc8f0955d175dbbb4a8746eabb5998540be166141317c364703c4c4db311418851cbe8be356eae3ae14db21c187c77f05236cf54df1d00ad34fc16d33f9c91b759409670844d2cc1cf381ec7fdfbc02f9eca1807fd983a9e97085b942e2c0beb9c4f77bf410fd7c2ce4c34576e6b9f47e19548c68ff5b27f32514d1e489db38f1d0ab8f111658a5559ad2f3ba8f57fc31fba35961ebb473b71e13cd39aef76bf6163075807969376eed98507378314b9df3b82b8b119686eb0543892c34d94349a9998073a4f08a90ae18728e499e0576f27487fe7c8079f38f1a8b2abf9642ef6245a3229fb4aefe56a294bdab4f2fd15a5d9e20e56154e851ac348bafecb36c1de2bcd19332602782b91bc3986b7e6ad28513597831ffc3801ea7263a66f7f5f51cd5e2c35ba62f4919fbcfd81c04fa879d171827f67ed2433968268be382c41fb95902c2d81f0ffa2c23218b155751e2684aff6ee45f2ab07c9a875118c1ef923ac823ae2372c40a79b9a7a9078a49cc7ea6265753abe629c26fbfb4afb17e9f939f1d08a41a601bb8ffb37e97ed19f33a0cfa53499a386d9a48aab5165abdb9d9f151f8bea539247aa98fefd1da78edae0b6eba7f525399d7dc91bf1217866a00ca7b4ac669ffdc6868bf1d32f7794af39b367a8566ac349faf573a416c8a5492b752891a7f0dd9ce4569ae56b55d5a86dc83c60bea1c7d9ff885d704f08baf27cb3e1645db02fe4e285a82459d90a9315b422193649b69c6194a19e744a72ccc5f45b1a0636b7bfb82ca58b3040232d15acd249f9777410f3e2a1a87f7d43a04d3d9aa09d1270dede18f2b6dd34cfe4b34b6309222e50196549a5d45251f4178c6615d2a98079e1e274f20d6597f05f37bf99fe56b7588cf54eabcc18da7085861fd113b02bfc24b84f68633b4d5ea95e091ee13786a2288ecf87d9a0d82235b4350cd1f658db9591a2867b70f475e3958cbd5a2a816bfddbd8b4fae8b9f7068a31b6c37ac3717de4ec24bb39030daf769c9d772ba8f14ad4cf19b5524c725d905b18f1fda007f285a3faf3772682daef3a307fcd29d20a708f461194dcc8ed00655ecfe79d8b5cd1371b623a2e443dbb3ddd59c30e146887a5d34c68f472929a5ff32ab2312b3db5562e91f5e361bb4cadbc52a93f386062542619ba36648d6f4f981d29dee1ad5cce97a4a595131d925b83afff222d44278907bded9f02fba1dc8e891baa49f1d59ec05dcb0f8a455d13f925ced1926464562b618cc4e9bdbd53f544614b58f839e2c07c0bb14441f7088f48f0d45f82a7110da08f7d48e4398a3690d22729645a9780ed5ebefea6d5ab1352c49150a54e06b4128a7a181265c07ee4866b38f78856692daf7571d178ffb6f171ed6f9869e0272fc3230c37914716df2d3d5471461cb88886f170231d458fb2a57479bc7d20f5509f42b411f00ec61ac36f618ca37f8c53b923a7a993fc1d53f5213b0915fd384cea90ce40e56fda43f9c0d4aae47988f2b3fda3bc5601f84995857b263328fa355a9b3c9d30753f644386dc1cc70d39917f9fdec2459bb056cee1a8d125ba3ee6bd50979fd183bfd1601f170fc9cfbd6196f82228afd3f5b4d2d236bb86872d44983dcc4049a83dff6c86914a9109e16ba1bfe20f5a8f9deecbe56c4cdaeb9b4ff94f61817f91b91c5b71b32daba9d7dae55f520c3fac9368bf32408eae007bd34f42d68b0cfb7dbcd34e83432a401419aa7ad94fc20fcec5abeef82e46342271f8100b07e14a03671d7e0217e7d243627d11cc5a40b0384e55cf55e340cdf65960b92734582a17860b711a1b5f039c7645053659aead68f09c3f5d4d65586a651da02a31eb5acf8817669f1fe54aa8714fe83034dd82e705eceb1bb97a0e3eeb3f264b34077ef3f5e9ad7800da2e1c616bdd762bc760e50c8e25815cac0d2ede6e387cef37945b97e45a3e8a18412c6904f18e42cdaedd82ef84879eb5ad0c1656099acc78930eb7e60e1fec01b519132809f918ee05fae73e94f703aec7139b92163d415ef2acc7bdad82c90b729030e50c6d03dd0331a84e88b5dab6a367c569e84b03d8ce35af030934262d7e6e46d2c998239ef6214c9e65b2e79945a190de842886a3b7443000f4d7221116a02e334c61f2106082f44b7d00a928e582d2dfb60605e477410a758f33b08ac1bb45186f500cdf7b7cec275c266812131616f06d27ac2a1d91ef6bc526d5a3ce8619ea9f71a331925c4165770f09001c6a7b945c2fd18bf4520433416c51d63296c5dcbf4968899721a96a6359f521df8ebbb42fff662a9d7bb86bffb224dc2860e7f215e210eb54e850b91f635487508e0709d34273b2a7f2d753b42f7c183e9fb013f9b5e0ce70ec943d613443150bfa73be6497298e2d6a4e6e1ab1be00e858832b70e872dd0f497bb9668ea8834a594d818cac3e879ce4a1c755988faa7414febd9c10eae7ce83087139b4baad5ab30684af09e1dbdcf58dc32fb053e17ab15350c093831641a610157d41a21dac56a97da4cde183c98cee660e9aac4300b0682231b245a277e0004cb60dd1b106a4fa97feea6cf85d28403aaa9f40a8362cb091c9bce9abf8d33dde53f36d09c6408e39f59762ed450979cf678ee6eb437ed78d50b67081b442b7d38924ad2fdc9bf77f03e3a182a11d2d1a847ea8f8ce45d3c0ea899e03938e17e7b94d178d369d7e982c47cd7baaed0fb7583f589f3fc1ddff3a182ff699adefb26f6d997a4719cee66f3dcd6fc266c631a5620e71316d564124806e9a6339e863ff675dcb3fb6c6cba850101738973dd5f7f0a6f9afb36e4f1fcf69ed652fc4264ee44e2cb69a6b084868998de67669168125c67fc67deb007dc7f7e7d6b42422ba335f1b051643698e01e275b30953bd98364d14addd4bb5daa8aae4c571cb772bd9515fbac62a506d459b03d816e31970ec2b401f4d87c4301289632999c6a5ed82389659d70b44ba4060a0f028e432a5860473b9f483ca9be7a7c3703954e6c010b7cc6e265e8d93569ae7d2ceb8370739bf6edb11a456df00c31cff8d448940ec90bc0ee53630e896a3bb9582f9dd0e9ee0e60350880e19cf896fc7ec4286b6514f64f9ab562a2f0b941458ade1211ec143dc010ce68e3fc7b754816bd1298baa93de0ffd2176408abafc061b95e8261433863c17b8dcadb93b750f89505d394c77f777b6bd3181838201e03c738855bafc8cbc76ae64ce39270a6a7aa3da4ad44ac26a3a2c4f97a746154215223ed4784437739841b441f0eee1cf3eb2ba3c40b9977deb6ec852193047d97749110fab83d574a973c661582d5986e0982cce3b89860315c226de11fe5658a75ce6664173b347ad27cbd84d56a247103e61745793b0da536228987d7b71506eaf53817c63b88cd648904fd90902d7e31b7e44e8fab603d5b993314c0910354fb7ff289194c6e8cf770ffdd232ac9ed3514dc07b98b736818a7da57cbcce6931abba05ad4c82e3d138a6d09f9d585700717a55bbe11067f88bfa61d14a5871be86659834936223d3be0bffee9e4e8a1e035f253d917a23aaafd5246b24e6520f30a88c81dbb7b945b5e749a18a1bbfcffee2f5ff2543968b6d0da28b98e97120bc594c59557c3fb08b40c00631b94f3a8911a6223373ee3a53ea1462081788fd04aabad33a695adc2a7e97bbf69567adad98055dd83a6fefa1cc2f0ae613dffff7295294ab5ff3ee264feec5f9c51a8cca1719b55c78c99b06a5ddcac319abaacdd6a7c17c318e26094cd1336240f31bd5db3cd2dc1e8eb736b5d5daecd129cafc8c5a703919f38b99f9b5caaf22a9fbf5a5715137ee9df40431405e8332d57315f6c3d4ff52bbba5c26654d403d07be187bdacd79aaa9325edc0d7b8760271f4778b4052acc320c4f5afb34ee49e5b637c75228f0a2476a1496a2a39a23c173fb11fe1623a4dabbb8b9a4adcafcd2a485f709cbf6d5530f7fd4f2edb5d2b990f10db439cb36408d199cc569d01a45525a4803e03755695136cbcb8b0247d4e512af35e9b86f9ba716f1935fd717a0d94a3de732cab210081dbc0219cde6d1eb25f35301da94b11e446ff54605408e83da41fd9d57158a102dcde734eb4bda3cbbae8f6dfcd0111b5f58a6bcac82586e650a176168ea2cfcfe5b56017b3bc83c3cd586b0b840c8027da81e033473c1b1e7cac7e3f63c2fb5b2680ba41107da06e25bf6f5147f9bc5bfec7ea6f0ca4313e48a5e6785d9a62dd2e4a3e0be909bb701a9f84e860680f1d2aeb5068e5f43328d8c61aebb2e91ebaf80a704452389ada55058e6ffe961be6a0278e550290712c1cb8d86dd5a3665395e36616c342e8e5e9b94465edaa69bb6506490461cd32b1b56c9954a232edc778b6e1fc241c8cbb7f27c97425b39276d36aa59c98c55d84447ecd763dc1a3b7c3b6cc83"}, {0x7df, 0xda, &(0x7f0000001280)="6c0de2bf2884561101e2be6fb8e3f86714aed169b531986c60550fdc428ee3a86535e51d0c2d1eb0a74f563babed4357f5d091fdd51cab3c6576b86175ca6e2e965c432335efb182079ceaca2f4170473c8eb3a5f6333ea1a45f5a13e05693b84a42e0c01437dde1a926b9da731c0ac7510ea8c5bcaa9140fbf6aa4280631a1ac71823e8cc45d04bdb7a7a87991e7a81a4fced7fc9ab8beba3bd5655b4636ff2f7f5326b180d59ddd65efba50fc1825ac1d1995908ce98914828b9eab769e73f246fa39591df1081d0577b3cbec007d2c2aa3cf5be4618c3f7e2", 0x1, 0x1}, {0x20, 0xe0, &(0x7f0000001380)="fda448d8b0050ea325e007c3e97d2f520d937b518ddacd89ba2b6984d8377aaf245135eef2e97de8265bdbe95fe39aae140cba884d8cb82e0f6c2a872e80cd12c88c660b32fa8f2844b89326d82117698b391c6751eb99af042a803eabbd4037dafe53378de1f5917340de3ac2674e9b3f2a834a5884e0ad8d7a678bdfa4803ece6195143784042bd6a0e238ef969eb124a53b4190ada1af1edb4b4c600fe1ac0b5a341f9edd95708ff351525072b5fc5bbae15a96a020a86bbe2c6e8647ca3e1096c5e010601cb4a1bc60061539d526e6151c66b3980a767fd26669fa6e7772", 0x1, 0x1}, {0x8, 0x1000, &(0x7f0000001e00)="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", 0x1}]}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001540)='./cgroup/syz0\x00', 0x200002, 0x0) dup2(r8, r0) openat(0xffffffffffffffff, &(0x7f0000001580)='./file0\x00', 0x100, 0x93) fcntl$dupfd(r7, 0x0, r7) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x4, 0x0, r7, 0x0, 0x0, 0x0, 0x2043, 0x1, {0x3}}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:07:14 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {&(0x7f0000001c40)=""/145, 0x91}, {&(0x7f0000002a80)=""/102400, 0x19000}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x24}, {&(0x7f00000002c0)=""/237, 0xed}, {&(0x7f0000000100)=""/3, 0x3}], 0x8, 0x0) io_setup(0x2d47, &(0x7f0000000000)) [ 2472.232922] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 23:07:28 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580110001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:07:28 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = dup(0xffffffffffffffff) ftruncate(r5, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x6000000) 23:07:28 executing program 2: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x5, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r5, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = accept4$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000240)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000480)={'vxcan1\x00', 0x0}) sendmsg$inet6(r6, &(0x7f0000000640)={&(0x7f00000002c0)={0xa, 0x4e21, 0x37c1, @local}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000300)="34474eecbcefb28351d44d4d830653b2d5b5dbece922ecd2e4b9cbf473242f0fad52eb78ecdb49c76514d184d1d2167e738b8aa525492969dcde060411c13a50acee5a428d70f300b1245aea55be5b9c69b1aee8", 0x54}, {&(0x7f0000000380)="75459c611266e2b0467a95afca7fe547eb8ac41a652364aed30ee1c8a58e84ef4f9c52ec0341881e4e282f1f5ae3eb2c6027cdf31e9d171c1520d736d114eb92d4aebf387fdd1806a4c9a18ebba530a5c7b2d8685c44868fc3018bc2642d10bcb19665942ad43ba2d49e96c3d9615320b5f5684f64c617955c219a12d956d634133f54b06138c4e3e8ecc5d44862b41e731edfea42429d7a928097db8949a687d592f9b3", 0xa4}], 0x2, &(0x7f00000004c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x5}}, @dstopts={{0xf0, 0x29, 0x37, {0x11, 0x1b, '\x00', [@generic={0xc8, 0xc4, "947854c53014b8d59628b89413ab7c857aa9af36ed8d91c1a47439f4df944802ac6699c21b68a67a323b84bd46056ba8f08cf9f07b750415a36d3726f9bd3c6feb4c311ef5325ec5a6b5a1c2ce85dd45438a300917df39b1aeeb15b396e87f08d742576c8aeab2ff588a7242c04ed7ba22c5772bd6afd3d3eeddba1e7f5efc3807dbe06b99bc1793f3aa42bc1ae344bb67fc3573c424650380ce1c6af741c1e1aa2bac37869f2eb284ea70f450df6b0a8c0a4de9c9f12b6177f798e46adc1a88c4c13082"}, @hao={0xc9, 0x10, @private0}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private2, r7}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x4}}, @dontfrag={{0x14, 0x29, 0x3e, 0x4}}], 0x160}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6tnl0\x00', r7, 0x4, 0x1, 0xfb, 0xfff, 0x4, @dev={0xfe, 0x80, '\x00', 0x23}, @loopback, 0x700, 0x7800, 0x20, 0x4}}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:07:28 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {&(0x7f0000001c40)=""/145, 0x91}, {&(0x7f0000002a80)=""/102400, 0x19000}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x24}, {&(0x7f00000002c0)=""/237, 0xed}, {&(0x7f0000000100)=""/3, 0x3}], 0x8, 0x0) io_setup(0x2d47, &(0x7f0000000000)) 23:07:28 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0xf00, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 23:07:28 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100201a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:07:28 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487f49f8000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0xf5d, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r4]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) 23:07:28 executing program 7: r0 = syz_open_dev$hidraw(&(0x7f0000000340), 0xfffffffffffffffb, 0x101141) fcntl$setlease(r0, 0x400, 0x0) r1 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r4 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0xfefffffffffffffe, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_io_uring_setup(0x3b13, &(0x7f0000000240)={0x0, 0x5652, 0x0, 0x0, 0x262, 0x0, r1}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000000100), &(0x7f00000002c0)) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r5, r7, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, r8, 0x0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001640)=""/23, 0x17}, {&(0x7f0000000380)=""/174, 0xae}, {&(0x7f0000000440)=""/35, 0x23}, {&(0x7f0000000480)=""/53, 0x35}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/126, 0x7e}, {&(0x7f0000001540)=""/220, 0xdc}, {&(0x7f0000001900)=""/236, 0xec}], 0x8, &(0x7f00000017c0)=""/198, 0xc6}, 0x0, 0x10001}, 0x7ffd) syz_io_uring_submit(r5, r3, &(0x7f00000001c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x4, 0x0, r4, 0x0, &(0x7f0000000040)="493696be17b4a1a6aafef77dba7327e450f82a5d0f91be27d2c3c0c10f07b80dd91a569ac53437a11dfa1cf0957a46b39578e82bb6", 0x35, 0x40000000}, 0x4) io_uring_enter(r1, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 2486.992078] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2487.013333] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2487.016594] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 23:07:28 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="00f0ff7f1a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:07:28 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {&(0x7f0000001c40)=""/145, 0x91}, {&(0x7f0000002a80)=""/102400, 0x19000}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x24}, {&(0x7f00000002c0)=""/237, 0xed}, {&(0x7f0000000100)=""/3, 0x3}], 0x8, 0x0) io_setup(0x2d47, &(0x7f0000000000)) 23:07:28 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580111001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:07:28 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x1100, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 23:07:29 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = dup(0xffffffffffffffff) ftruncate(r5, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0xc000000) [ 2487.226435] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2487.270308] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 23:07:42 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = dup(0xffffffffffffffff) ftruncate(r5, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x12000000) 23:07:42 executing program 7: r0 = syz_io_uring_setup(0x714b, &(0x7f0000000080)={0x0, 0xcb39, 0x5, 0x3}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:07:42 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {0x0}, {&(0x7f0000001c40)=""/145, 0x91}, {&(0x7f0000002a80)=""/102400, 0x19000}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x24}, {&(0x7f00000002c0)=""/237, 0xed}, {&(0x7f0000000100)=""/3, 0x3}], 0x8, 0x0) io_setup(0x2d47, &(0x7f0000000000)) 23:07:42 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487f49f8000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0xf5d, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) 23:07:42 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580148001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:07:42 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="effdffff1a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:07:42 executing program 2: r0 = syz_io_uring_setup(0x11f1, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000740)=@IORING_OP_RECVMSG={0xa, 0x3, 0x0, r3, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@un=@abs, 0x80, &(0x7f0000000640)=[{&(0x7f0000000240)=""/244, 0xf4}, {&(0x7f0000000340)=""/106, 0x6a}, {&(0x7f00000003c0)=""/193, 0xc1}, {&(0x7f00000004c0)=""/239, 0xef}, {&(0x7f00000005c0)=""/91, 0x5b}], 0x5, &(0x7f00000006c0)=""/108, 0x6c}, 0x0, 0x10000, 0x6839348f3106f364, {0x3}}, 0x2) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r7, 0x0, r7) read(r7, &(0x7f0000000780)=""/168, 0xa8) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xc, 0x2010, 0xffffffffffffffff, 0x10000000) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:07:42 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x3f00, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) [ 2500.340728] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2500.368773] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 23:07:42 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {0x0}, {&(0x7f0000001c40)=""/145, 0x91}, {&(0x7f0000002a80)=""/102400, 0x19000}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x24}, {&(0x7f00000002c0)=""/237, 0xed}, {&(0x7f0000000100)=""/3, 0x3}], 0x8, 0x0) io_setup(0x2d47, &(0x7f0000000000)) 23:07:42 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58014c001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:07:42 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580200001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:07:42 executing program 7: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fed000/0x10000)=nil, 0x10000, 0x1000004, 0x1010, r0, 0x8000000) [ 2500.467967] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 23:07:42 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = dup(0xffffffffffffffff) ftruncate(r5, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x18000000) 23:07:42 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x4000, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 23:07:42 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {0x0}, {&(0x7f0000001c40)=""/145, 0x91}, {&(0x7f0000002a80)=""/102400, 0x19000}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x24}, {&(0x7f00000002c0)=""/237, 0xed}, {&(0x7f0000000100)=""/3, 0x3}], 0x8, 0x0) io_setup(0x2d47, &(0x7f0000000000)) 23:07:42 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580168001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) [ 2500.723732] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2500.751662] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 23:07:56 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = dup(0xffffffffffffffff) ftruncate(r5, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x1e000000) 23:07:56 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580800001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:07:56 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487f49f8000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0xf5d, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) 23:07:56 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {0x0}, {0x0}, {&(0x7f0000001c40)=""/145, 0x91}, {&(0x7f0000002a80)=""/102400, 0x19000}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x24}, {&(0x7f00000002c0)=""/237, 0xed}, {&(0x7f0000000100)=""/3, 0x3}], 0x9, 0x0) io_setup(0x2d47, &(0x7f0000000000)) 23:07:56 executing program 7: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000000), &(0x7f00000001c0)=0x4) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:07:56 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x4800, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 23:07:56 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58016c001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:07:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x7, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="240000001800210c00000000000000000200000000000000000008000700", @ANYRES32=0xee01, @ANYBLOB="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"], 0x24}}, 0x0) r4 = syz_io_uring_setup(0x41eb, &(0x7f0000000080)={0x0, 0x955d, 0x0, 0x8, 0x0, 0x0, r3}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r7 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, 0x0}, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$netlink(0x10, 0x3, 0x8) syz_io_uring_submit(r8, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r4, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 2515.043493] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2515.060921] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2515.096752] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 23:07:56 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580900001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:07:57 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580174001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:07:57 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {0x0}, {0x0}, {&(0x7f0000001c40)=""/145, 0x91}, {&(0x7f0000002a80)=""/102400, 0x19000}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x24}, {&(0x7f00000002c0)=""/237, 0xed}, {&(0x7f0000000100)=""/3, 0x3}], 0x9, 0x0) io_setup(0x2d47, &(0x7f0000000000)) 23:07:57 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = dup(0xffffffffffffffff) ftruncate(r5, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x20000000) 23:07:57 executing program 7: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x480c, 0x8000000, 0x0, 0x0, 0x1000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x5) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:07:57 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x4c00, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 23:07:57 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487f49f8000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0xf5d, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) 23:07:57 executing program 2: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xeccbe1a1330c8e0c, 0x10, r0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:07:57 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="581000001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:07:57 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58017a001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) [ 2515.371562] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2515.385681] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 23:07:57 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x6800, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) [ 2515.468763] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2515.508464] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2515.553915] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 23:08:10 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="581900001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:08:10 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {0x0}, {0x0}, {&(0x7f0000001c40)=""/145, 0x91}, {&(0x7f0000002a80)=""/102400, 0x19000}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x24}, {&(0x7f00000002c0)=""/237, 0xed}, {&(0x7f0000000100)=""/3, 0x3}], 0x9, 0x0) io_setup(0x2d47, &(0x7f0000000000)) 23:08:10 executing program 2: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x5, 0x0, 0x0) syz_io_uring_setup(0x6ea3, &(0x7f00000001c0)={0x0, 0xca3c, 0x4, 0x1, 0x2fb, 0x0, r0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) syz_io_uring_submit(r5, r7, &(0x7f0000000300)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000280)={0x200, 0x54, 0x15}, &(0x7f00000002c0)='./file0\x00', 0x18, 0x0, 0x12345}, 0x80000001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:08:10 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487f49f8000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0xf5d, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) 23:08:10 executing program 7: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x7, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) io_uring_enter(r6, 0x58a9, 0x8dee, 0x2, 0x0, 0x0) 23:08:10 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = dup(0xffffffffffffffff) ftruncate(r5, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x24000000) 23:08:10 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x6c00, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 23:08:10 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5801f0001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) [ 2528.775117] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2528.794050] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 23:08:24 executing program 7: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) r8 = mmap$IORING_OFF_SQES(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000000, 0x1c2030, r0, 0x10000000) r9 = dup(r5) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r8, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x5, 0x0, r9, 0x80, &(0x7f00000001c0)=@hci={0x1f, 0x2, 0x3}, 0x0, 0x0, 0x1, {0x0, r10}}, 0x1000) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:08:24 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580163021a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:08:24 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = dup(0xffffffffffffffff) ftruncate(r5, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x2a000000) 23:08:24 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0x91}, {&(0x7f0000002a80)=""/102400, 0x19000}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x24}, {&(0x7f00000002c0)=""/237, 0xed}, {&(0x7f0000000100)=""/3, 0x3}], 0x8, 0x0) io_setup(0x2d47, &(0x7f0000000000)) 23:08:24 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="582500001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:08:24 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487f49f8000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0xf5d, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) 23:08:24 executing program 2: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x406340, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000300)='\x00', 0x0, r6) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) r8 = open_tree(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x80000) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r8, 0x29, 0x41, &(0x7f0000000280)={'mangle\x00', 0x3, [{}, {}, {}]}, 0x58) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, {0x0, r7}}, 0x101) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, r5, &(0x7f00000001c0)={0x30000, 0x140, 0x12}, &(0x7f0000000200)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r7}}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:08:24 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x7400, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) [ 2542.712759] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2542.721076] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 23:08:24 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0x91}, {&(0x7f0000002a80)=""/102400, 0x19000}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x24}, {&(0x7f00000002c0)=""/237, 0xed}, {&(0x7f0000000100)=""/3, 0x3}], 0x8, 0x0) io_setup(0x2d47, &(0x7f0000000000)) [ 2542.755295] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 23:08:24 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100031a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:08:24 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0x91}, {&(0x7f0000002a80)=""/102400, 0x19000}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x24}, {&(0x7f00000002c0)=""/237, 0xed}, {&(0x7f0000000100)=""/3, 0x3}], 0x8, 0x0) io_setup(0x2d47, &(0x7f0000000000)) 23:08:24 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="586000001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:08:24 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = dup(0xffffffffffffffff) ftruncate(r5, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x30000000) 23:08:24 executing program 2: r0 = syz_io_uring_setup(0x4c53, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:08:24 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x7a00, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 23:08:24 executing program 7: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = syz_io_uring_setup(0x7b96, &(0x7f00000001c0)={0x0, 0x2d8, 0x4, 0x1, 0x2eb, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r6 = syz_io_uring_setup(0x1e76, &(0x7f0000000440)={0x0, 0x1bd6, 0x20, 0x2, 0x3d, 0x0, r0}, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f00000004c0), &(0x7f0000000500)) syz_io_uring_setup(0x7867, &(0x7f0000001580)={0x0, 0xa8be, 0x10, 0x0, 0x3bd, 0x0, r6}, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000001600), &(0x7f0000001640)) r7 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x406340, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000300)='\x00', 0x0, r7) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, {0x0, r8}}, 0x101) syz_io_uring_setup(0x46b3, &(0x7f0000000380)={0x0, 0x6261, 0x1, 0x1, 0xbf}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000400)=0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r9, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x3, 0x6000, @fd_index=0x9, 0x200000000000000, &(0x7f0000000580)=""/4096, 0x1000, 0x0, 0x1, {0x0, r10}}, 0x1) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:08:24 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487f49f8000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0xf5d, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) 23:08:24 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100051a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:08:24 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580102001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) [ 2543.016556] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2543.088459] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2543.093659] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 23:08:25 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0x91}, {&(0x7f0000002a80)=""/102400, 0x19000}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x24}, {&(0x7f00000002c0)=""/237, 0xed}, {&(0x7f0000000100)=""/3, 0x3}], 0x9, 0x0) io_setup(0x2d47, &(0x7f0000000000)) 23:08:25 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = dup(0xffffffffffffffff) ftruncate(r5, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x36000000) 23:08:25 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580103001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:08:25 executing program 2: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0x6c8f}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x5, 0x0, 0x0) r5 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x30, r5, 0x8000000) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x3041, &(0x7f0000000240)={0x0, 0x3a9b, 0x10, 0x2, 0x113, 0x0, r0}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000002c0), &(0x7f0000000300)=0x0) syz_io_uring_submit(r6, r8, &(0x7f0000000500)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=@l2tp={0x2, 0x0, @private}, 0x80, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/72, 0x48}], 0x1, &(0x7f0000000480)=""/52, 0x34}, 0x0, 0x4103, 0x1, {0x1}}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000004, 0x80010, 0xffffffffffffffff, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x5, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xf10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0xfffffffc, 0x3, 0x0, 0x0) r9 = accept4$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14, 0x80000) setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000000200)=@req3={0x3, 0x0, 0x3, 0x5, 0x7, 0x9, 0x7f}, 0x1c) 23:08:25 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100061a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:08:25 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0xf000, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) [ 2543.344090] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2543.353383] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 23:08:38 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = dup(0xffffffffffffffff) ftruncate(r5, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x3c000000) 23:08:38 executing program 7: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x7, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) write$binfmt_misc(r6, &(0x7f0000000380)={'syz0', "0ba805cb7c022550c3f7750955002206884bebf88771a593194e9eaee07398066177de3bdf306637de2411e27b2be2e199074ade161fc7f714960b2da509867db628c0617200900472cc4c4a9763bfba3573be7411a8afaacae5a83f242a6ca8a1ff6065ee3c36999987558a3a2e330b089dd12897339776fe5816bb6b4cf6c9eaa557abf25074fee39e87fab10ef1666ac8a6c10fcddf3d2e8037439744f9a1edc2636984200f613c4bc23b29af6e738aa3514e980f3d0523a7af4005"}, 0xc1) syz_io_uring_submit(r1, r4, &(0x7f0000000340)=@IORING_OP_OPENAT2={0x1c, 0x1, 0x0, r6, &(0x7f0000000240)={0x400, 0x20, 0x2}, &(0x7f0000000280)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r7}}, 0x5) r8 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r8, 0x0, 0x0}, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) syz_io_uring_submit(r10, r2, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x1000) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:08:38 executing program 2: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x406340, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000300)='\x00', 0x0, r5) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, {0x0, r6}}, 0x101) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) sendmsg$nl_generic(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x7, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) r9 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x406340, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000300)='\x00', 0x0, r9) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x6, 0x40010, 0xffffffffffffffff, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, {0x0, r10}}, 0x101) syz_io_uring_submit(r4, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r8, 0x80, &(0x7f00000001c0)=@pppoe={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 'veth1_vlan\x00'}}, 0x0, 0x0, 0x0, {0x0, r10}}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:08:38 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0xfe02, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 23:08:38 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487f49f8000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0xf5d, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYRESOCT=r4, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) 23:08:38 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580104001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:08:38 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100071a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:08:38 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0x91}, {&(0x7f0000002a80)=""/102400, 0x19000}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x24}, {&(0x7f00000002c0)=""/237, 0xed}, {&(0x7f0000000100)=""/3, 0x3}], 0x9, 0x0) io_setup(0x2d47, &(0x7f0000000000)) [ 2556.920936] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2556.951625] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2556.980316] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 23:08:38 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = dup(0xffffffffffffffff) ftruncate(r5, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0xfaffffff) 23:08:58 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = dup(0xffffffffffffffff) ftruncate(r5, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0xfffffffa) 23:08:58 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487f49f8000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0xf5d, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYRESOCT=r4, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) 23:08:58 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0x91}, {&(0x7f0000002a80)=""/102400, 0x19000}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x24}, {&(0x7f00000002c0)=""/237, 0xed}, {&(0x7f0000000100)=""/3, 0x3}], 0x9, 0x0) io_setup(0x2d47, &(0x7f0000000000)) 23:08:58 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580105001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:08:58 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x34000, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 23:08:58 executing program 7: r0 = syz_io_uring_setup(0x4c52, &(0x7f00000001c0)={0x0, 0x0, 0x8, 0x0, 0xf6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x0, 0x3f, 0x8, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:08:58 executing program 2: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x8040, 0x1}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.current\x00', 0x0, 0x0) io_uring_enter(r5, 0x58ab, 0x0, 0x0, 0x0, 0x0) 23:08:58 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100091a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) [ 2576.870675] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2576.907476] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 23:08:58 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0xfffffffffffffe51}, {&(0x7f0000002a80)=""/102400}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x2e}, {&(0x7f00000002c0)=""/237}, {&(0x7f0000000100)=""/3, 0x37}], 0x7, 0x0) io_setup(0x0, &(0x7f0000000000)) 23:08:58 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5801000a1a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:08:58 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580106001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:08:58 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = dup(0xffffffffffffffff) ftruncate(r5, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x10000000000) 23:08:58 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x80000, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 23:08:58 executing program 2: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) sendmsg$nl_generic(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x7, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000001900)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, r7, &(0x7f0000001840)=0x80, &(0x7f0000001880)=@in6={0xa, 0x0, 0x0, @remote}, 0x0, 0x180000, 0x1, {0x0, r8}}, 0x1) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r10 = dup3(r0, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r10, 0x0, &(0x7f0000001700)=[{&(0x7f00000001c0)=""/118, 0x76}, {&(0x7f0000000240)=""/169, 0xa9}, {&(0x7f0000000300)=""/144, 0x90}, {&(0x7f00000003c0)=""/101, 0x65}, {&(0x7f0000000440)=""/159, 0x9f}, {&(0x7f0000000500)=""/154, 0x9a}, {&(0x7f0000000040)=""/35, 0x23}, {&(0x7f00000005c0)=""/204, 0xcc}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/8, 0x8}], 0xa) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) perf_event_open(&(0x7f00000017c0)={0x2, 0x80, 0x4, 0x0, 0x2, 0x7f, 0x0, 0x4, 0x400, 0x4, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8001, 0x2, @perf_config_ext={0x3, 0x2}, 0x1, 0xda5b, 0x3, 0x7, 0x36, 0x6e8, 0x8, 0x0, 0x7}, 0xffffffffffffffff, 0x7, r10, 0x1) 23:08:58 executing program 7: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000006, 0x4010, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:08:59 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487f49f8000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0xf5d, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYRESOCT=r4, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) [ 2577.209877] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 23:08:59 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0xfffffffffffffe51}, {&(0x7f0000002a80)=""/102400}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x2e}, {&(0x7f00000002c0)=""/237}, {&(0x7f0000000100)=""/3, 0x37}], 0x7, 0x0) io_setup(0x0, &(0x7f0000000000)) [ 2577.289348] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 23:08:59 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5801000b1a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:08:59 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580107001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) [ 2577.387606] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 23:08:59 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x400300, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 23:08:59 executing program 7: r0 = syz_io_uring_setup(0xc7c, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000040)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x5, 0x0, 0x0, 0x0, 0x12345}, 0x9) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:08:59 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = dup(0xffffffffffffffff) ftruncate(r5, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x7ffffffff000) [ 2577.531726] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2577.582031] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 23:09:16 executing program 2: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x100) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:09:16 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5801000f1a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:09:16 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487f49f8000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0xf5d, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r3, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x0) unshare(0x48020200) 23:09:16 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = dup(0xffffffffffffffff) ftruncate(r5, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x80000000000000) 23:09:16 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580108001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:09:16 executing program 7: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r4 = perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = syz_io_uring_setup(0xb37, &(0x7f0000000240)={0x0, 0x1641, 0x1, 0x1, 0x2bd}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040), &(0x7f00000002c0)) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) r6 = dup2(r5, r4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x44111, r6, 0x0) 23:09:16 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0xf0ffff, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 23:09:16 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0xfffffffffffffe51}, {&(0x7f0000002a80)=""/102400}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x2e}, {&(0x7f00000002c0)=""/237}, {&(0x7f0000000100)=""/3, 0x37}], 0x7, 0x0) io_setup(0x0, &(0x7f0000000000)) [ 2594.325939] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2594.335376] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 23:09:16 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100111a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:09:32 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580187171a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:09:32 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0xfffffffffffffe51}, {&(0x7f0000002a80)=""/102400}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x2e}, {&(0x7f00000002c0)=""/237}, {&(0x7f0000000100)=""/3, 0x37}], 0x7, 0x0) io_setup(0x2d47, 0x0) 23:09:32 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487f49f8000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0xf5d, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r3, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x0) unshare(0x48020200) 23:09:32 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = dup(0xffffffffffffffff) ftruncate(r5, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0xf0ffffff7f0000) 23:09:32 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580109001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:09:32 executing program 7: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = dup3(r3, r3, 0x80000) syz_io_uring_setup(0x6c82, &(0x7f00000001c0)={0x0, 0x630d, 0x2, 0x1, 0x206, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000000040), &(0x7f0000000240)) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:09:32 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x1000000, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 23:09:32 executing program 2: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x5000000, 0x30, r0, 0x8000000) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 2610.673701] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2610.685728] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 23:09:32 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5801003f1a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:09:32 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0xfffffffffffffe51}, {&(0x7f0000002a80)=""/102400}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x2e}, {&(0x7f00000002c0)=""/237}, {&(0x7f0000000100)=""/3, 0x37}], 0x7, 0x0) io_setup(0x2d47, 0x0) 23:09:32 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58010a001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) [ 2610.755791] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 23:09:32 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = dup(0xffffffffffffffff) ftruncate(r5, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x600000000000000) 23:09:32 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100401a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:09:32 executing program 2: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0x1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = accept4$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14, 0x80800) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000200)={0x0, 0x5}, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x30, r0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ff, 0xffffffff}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:09:32 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58010b001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:09:32 executing program 7: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xc100, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001800210c0000000000000000020000000800000000000000080007001963ddc0e8b1ed5cc31db84c751723c077d4073449fdbf9c721058138fee0c1d41f58c2b7486881bec8d55c8762adcf01bdc1f0e247545748222168904ca34808e7e3754741c614fdc42129718b619e63866c5b39ef7729096885c4a74a04886b4b651574b676e01009ce428108d8e973f6200", @ANYRES32=0xee01, @ANYBLOB], 0x24}}, 0x0) syz_io_uring_setup(0x5c2, &(0x7f00000001c0)={0x0, 0x126, 0x20, 0x1, 0x2cf, 0x0, r6}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000240)) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:09:32 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x2000000, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 23:09:32 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0xfffffffffffffe51}, {&(0x7f0000002a80)=""/102400}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x2e}, {&(0x7f00000002c0)=""/237}, {&(0x7f0000000100)=""/3, 0x37}], 0x7, 0x0) io_setup(0x2d47, 0x0) 23:09:32 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487f49f8000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0xf5d, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r3, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, 0x0, 0x0) unshare(0x48020200) 23:09:32 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = dup(0xffffffffffffffff) ftruncate(r5, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0xc00000000000000) 23:09:32 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100481a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) [ 2611.107719] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2611.165070] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 23:09:33 executing program 6: r0 = syz_io_uring_setup(0x4c52, &(0x7f00000001c0)={0x0, 0x0, 0x8, 0x0, 0xf6}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x0, 0x3f, 0x8, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 2611.285953] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 23:09:48 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x3000000, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 23:09:48 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487f49f8000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0xf5d, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r3, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) 23:09:48 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58010f001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:09:48 executing program 6: ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0xfd46, 0x0, 0xfffffffc}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) epoll_pwait(0xffffffffffffffff, &(0x7f0000000040)=[{}, {}, {}, {}], 0x4, 0x4, &(0x7f00000001c0)={[0x7]}, 0x8) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) sendmsg$nl_generic(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001800210c000000000000000002000000080000000000000008000700", @ANYRES32=0xee01, @ANYBLOB="b4453c5fadba7b850cb4e82211867f36375fcded40ddd9ff4ca9a0"], 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000200)={0xc0000001}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x13, r5, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:09:48 executing program 7: r0 = syz_io_uring_setup(0x4c53, &(0x7f0000000080)={0x0, 0x156a}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f0000000240)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}]}, 0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x27}, 0xfffffffd) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000004, 0x4010, r0, 0x8000000) syz_io_uring_submit(r5, r2, &(0x7f0000000140)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x5, 0x0, 0x2, 0x0, &(0x7f00000001c0)="eb3b77534320e6231bab8fa2cafb53c75fa377db22440fcd4251ee91eb769e53cb7965bd2b70455f2b3ff0a1fba4c57c59219f50081e1a2445044aa52eb9274bd5ca93f268f4757640d939c4ae02512b191b82", 0x2, 0x0, 0x0, {0x3}}, 0x7ff) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:09:48 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5801004c1a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:09:48 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = dup(0xffffffffffffffff) ftruncate(r5, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x1200000000000000) 23:09:48 executing program 2: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x7, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) write$P9_RREADLINK(r6, &(0x7f0000000040)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 2626.913085] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2626.937753] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2626.938775] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 23:09:48 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580102631a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:09:48 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x4000000, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) [ 2627.015349] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=279 sclass=netlink_route_socket pid=12368 comm=syz-executor.2 [ 2627.066093] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=279 sclass=netlink_route_socket pid=12368 comm=syz-executor.2 23:09:48 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580110001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:09:49 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r0, 0x0, 0x0}, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 2627.157917] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 23:09:49 executing program 2: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x7, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x4, 0x2000}, 0x4) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:09:49 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = dup(0xffffffffffffffff) ftruncate(r5, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x1800000000000000) 23:10:05 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = dup(0xffffffffffffffff) ftruncate(r5, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x1e00000000000000) 23:10:05 executing program 6: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) signalfd4(r3, &(0x7f0000000080)={[0xffffffff]}, 0x8, 0x80800) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) io_uring_enter(0xffffffffffffffff, 0x3172, 0x8b76, 0xb8d2fe622c9dd4a4, &(0x7f0000000180)={[0x80000001]}, 0x8) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91, 0x0, 0x9}) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, 0x0}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:10:05 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100681a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:10:05 executing program 2: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f0000000040), &(0x7f00000001c0)=0xc) 23:10:05 executing program 7: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x14802}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', 0x7ff, 0x1000}, 0x6) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x30, r0, 0x10000000) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x3, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa}, 0x1) 23:10:05 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487f49f8000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0xf5d, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r3, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) 23:10:05 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x5000000, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 23:10:05 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580111001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) [ 2643.566016] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2643.584486] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 23:10:05 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580148001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:10:05 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5801006c1a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:10:05 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = dup(0xffffffffffffffff) ftruncate(r5, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x2000000000000000) 23:10:05 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x6000000, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 23:10:05 executing program 2: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r7) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r8, 0x609, 0x0, 0x0, {0x23}}, 0x14}}, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x7, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:10:05 executing program 7: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x7d1d, &(0x7f00000001c0)={0x0, 0x8959, 0x0, 0x3, 0x2c2, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000240)=0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000280)=@IORING_OP_NOP={0x0, 0x5}, 0x7) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:10:05 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487f49f8000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0xf5d, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r3, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) [ 2643.899917] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 23:10:05 executing program 6: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000140), 0x8}, 0xdd48a83c10608be0, 0x0, 0x0, 0x2, 0x0, 0x1000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000400)='./file0\x00', 0x6000, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) signalfd4(r3, &(0x7f0000000080)={[0xffffffff]}, 0x8, 0x80800) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) io_uring_enter(0xffffffffffffffff, 0x3172, 0x8b76, 0xb8d2fe622c9dd4a4, &(0x7f0000000180)={[0x80000001]}, 0x8) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x100, 0xb91, 0x0, 0x9}) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r6, 0x0, 0x0}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 2643.966398] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2644.032491] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 23:10:22 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x7000000, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 23:10:22 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = dup(0xffffffffffffffff) ftruncate(r5, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x2400000000000000) 23:10:22 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487f49f8000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0xf5d, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r3, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) 23:10:22 executing program 6: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = dup2(r0, r3) bind$packet(r4, &(0x7f0000000040)={0x11, 0x5, 0x0, 0x1, 0x20}, 0x14) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) sendmsg$nl_generic(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000001800210c000000000000000002000000080000000000000008000700", @ANYRES32=0xee01, @ANYBLOB="26de596d99c7d983011ca717652a52535c1906000000ca20a9d23ebc3fb7ef8dc8830d0c81b609f1047a58401d8a0498e1853c9ba10460d2995d33619d1eed562a9475cdfb1683032d048497bb048c686586393238fe2eea8cd8928fe07a2620e3f40e3570944e4394d932cf25ff57be462f2f346d4533a9203658f10baac136e1fcaa7f506490110906501b1de39d72ede5b506b72b25494efd136f1316b76447aa0ed32a1b13aef6935863643373fa0b57004e6b0977309bae67b2d82c34f076f7059db12a1b341561b31c79"], 0x24}}, 0x0) io_uring_enter(r7, 0x5189, 0xbf28, 0x1, &(0x7f0000000200)={[0x41]}, 0x8) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x5, 0x0, 0x0) r8 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r8, 0xf503, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) sendmsg$nl_generic(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x7, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) io_uring_enter(r10, 0x4469, 0x85f4, 0x3, &(0x7f00000001c0)={[0x4848b67f]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:10:22 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58014c001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:10:22 executing program 2: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x7, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) io_uring_enter(r6, 0x63aa, 0x6415, 0x3, &(0x7f0000000040)={[0xfffffffffffffffc]}, 0x8) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:10:22 executing program 7: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x7, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) getsockopt$packet_int(r5, 0x107, 0x10, &(0x7f0000000040), &(0x7f00000001c0)=0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:10:22 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100741a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) [ 2660.959888] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2660.962028] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2660.993444] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 23:10:22 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580168001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:10:22 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5801007a1a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:10:22 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x8000000, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 23:10:22 executing program 7: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x0, 0x200}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_setup(0x61d2, &(0x7f00000001c0)={0x0, 0x830, 0x10, 0x3, 0xab, 0x0, r0}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000140), &(0x7f0000000240)=0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001800210c000000000000000002000000080000000000000008000700", @ANYRES32=0xee01, @ANYBLOB="8a047166000082fc67aae181ded937760200b48ed8"], 0x24}}, 0x0) syz_io_uring_submit(r1, r4, &(0x7f0000000280)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r6, 0x10000, 0x0, 0x100, 0x4}, 0x40) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:10:23 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58016c001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:10:23 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = dup(0xffffffffffffffff) ftruncate(r5, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x2a00000000000000) 23:10:23 executing program 6: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487f49f8000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd=r0, 0x0, 0x0, 0xf5d, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r4, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) 23:10:23 executing program 2: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x5, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x2244, &(0x7f00000013c0)={0x0, 0x2d3c, 0x10, 0x1, 0x150, 0x0, r0}, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff3000/0xd000)=nil, &(0x7f0000001440), &(0x7f0000001480)=0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000014c0)={{0x1, 0x1, 0x18, r0, {0x9305}}, './file0\x00'}) r8 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x406340, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000300)='\x00', 0x0, r8) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, {0x0, r9}}, 0x101) syz_io_uring_submit(r4, r6, &(0x7f0000001500)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r9}}, 0x9) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = fcntl$dupfd(r10, 0x0, r10) fcntl$getown(r5, 0x9) sendmsg$nl_generic(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)={0xa0, 0x18, 0x20, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @nested={0x81, 0x35, 0x0, 0x1, [@generic="9f03cf93b9d1114023600fac362bba29589f828596e3546bf5b1f715ccf08aaad2577dba1b2275f343cc336caf2955a716d1c1c6deba23a73f7e05b654e818931cbbe6aa772ebabe47f01211bfb4777313e58610294d5271ac177b13f82079344526a11a745cd75914193cbc7fcce125a12637e84e", @typed={0x8, 0x7d, 0x0, 0x0, @u32=0x4}]}]}, 0xa0}}, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r11, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/4096, 0x1000, 0x0, &(0x7f00000011c0)=""/237, 0xed}, &(0x7f00000012c0)=0x40) [ 2661.213913] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2661.242913] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 23:10:23 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580117871a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) [ 2661.393604] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.6'. 23:10:37 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580174001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:10:37 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x9000000, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 23:10:37 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0xfffffffffffffe51}, {&(0x7f0000002a80)=""/102400}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x2e}, {&(0x7f00000002c0)=""/237}, {&(0x7f0000000100)=""/3, 0x37}], 0x7, 0x0) io_setup(0x2d47, &(0x7f0000000000)) (fail_nth: 1) 23:10:37 executing program 2: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001800210c000000000000000002000000080000000000000008000700", @ANYRES32=0xee01, @ANYBLOB="c5302016b2e85f96847c4a42ddf9be92c4b67afdba3f69ba84ee0744d89ab724bfaf26feb8caefde48619684ad4b8d4d93f609d718977d5513a376605f2a7a6457806230d9e0cbddda37611e5496a2427e2b0ecf3feb38a89659a36adf471ff5e94809fe4fb374"], 0x24}}, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x2000}, 0x4) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x110, r5, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:10:37 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100f01a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:10:37 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = dup(0xffffffffffffffff) ftruncate(r5, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x3000000000000000) 23:10:37 executing program 7: r0 = syz_io_uring_setup(0x4c4d, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x40001}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000001200)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r5, &(0x7f0000000040)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x1, 0x0, 0x9, 0x3, &(0x7f00000001c0)="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", 0x7, 0x0, 0x1, {0x2}}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffff, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) sendmsg$nl_generic(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x7, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) r9 = accept4(r3, &(0x7f00000012c0)=@tipc=@id, &(0x7f0000001340)=0x80, 0x800) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000017c0)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$packet(r9, &(0x7f0000001380)="293ab9d35ef6da6e32", 0x9, 0x0, &(0x7f00000013c0)={0x11, 0x10, r11, 0x1, 0x40, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000011c0)={{0x1, 0x1, 0x18, r8, {0x2}}, './file0\x00'}) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:10:37 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487f49f8000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0xf5d, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r3, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) [ 2675.714302] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2675.725452] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2675.731318] FAULT_INJECTION: forcing a failure. [ 2675.731318] name failslab, interval 1, probability 0, space 0, times 0 [ 2675.732519] CPU: 1 PID: 12520 Comm: syz-executor.6 Not tainted 5.10.216 #1 [ 2675.733223] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2675.734010] Call Trace: [ 2675.734275] dump_stack+0x107/0x167 [ 2675.734720] should_fail.cold+0x5/0xa [ 2675.735093] ? ioctx_alloc+0x139/0x1e60 [ 2675.735486] should_failslab+0x5/0x20 [ 2675.735866] kmem_cache_alloc+0x5b/0x310 [ 2675.736267] ioctx_alloc+0x139/0x1e60 [ 2675.736640] ? __might_fault+0xd3/0x180 [ 2675.737031] ? lock_downgrade+0x6d0/0x6d0 [ 2675.737437] ? aio_poll_complete_work+0xa00/0xa00 [ 2675.737909] __x64_sys_io_setup+0xc4/0x1f0 [ 2675.738320] do_syscall_64+0x33/0x40 [ 2675.738679] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2675.739171] RIP: 0033:0x7f300c1a9b19 [ 2675.739538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2675.741283] RSP: 002b:00007f300971f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 2675.742013] RAX: ffffffffffffffda RBX: 00007f300c2bcf60 RCX: 00007f300c1a9b19 [ 2675.742695] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000002d47 [ 2675.743373] RBP: 00007f300971f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2675.744058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2675.744737] R13: 00007ffdcc09d2af R14: 00007f300971f300 R15: 0000000000022000 [ 2675.763726] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 23:10:37 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58017a001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:10:37 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100000f0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:10:37 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0xa000000, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 23:10:37 executing program 2: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x7, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000040)={'syztnl2\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x4, 0x0, 0x1, 0x7fffffff, 0xa, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3763909dd6be8ae8, 0x20, 0x9, 0xfff}}) bind$packet(r4, &(0x7f0000000240)={0x11, 0x1a, r5, 0x1, 0x80, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x14) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x5, 0x2, &(0x7f0000000500)="8d36ec96a3858da8e722f4d630f287a80c88ce8ecb830172c407fc04815e74b78e3fa6654420a63c8493d2ffe909486022075324fc896bf4f1101244d2222c0de43b488e31c284e0bb7bbccdb5795af1a3170f515f37504e96ea3a6f6a357450b71b326c6c8b8e42834f6697f5eabd284f5c2639b6e021cf876c1807f7cfe0ce70b29b68701eae2ab2105e0b6219cb70e0283811572b237043de14d4404b8e8d040ef98088872e6dfdceff7ba499b3d90e6061b36560dc7a4288081d3489aaddf58054df7003de824862f7741a0a2ecfd4089f144826fc41", 0x1, 0x0, 0x0, {0x2, r6}}, 0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) sendmsg$nl_generic(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x7, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) 23:10:37 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = dup(0xffffffffffffffff) ftruncate(r5, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x3600000000000000) 23:10:37 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0xfffffffffffffe51}, {&(0x7f0000002a80)=""/102400}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x2e}, {&(0x7f00000002c0)=""/237}, {&(0x7f0000000100)=""/3, 0x37}], 0x7, 0x0) io_setup(0x2d47, &(0x7f0000000000)) (fail_nth: 2) [ 2675.961915] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=15 sclass=netlink_xfrm_socket pid=12539 comm=syz-executor.0 [ 2675.969613] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=15 sclass=netlink_xfrm_socket pid=12540 comm=syz-executor.0 23:10:37 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5801f0001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:10:37 executing program 7: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) sendmsg$nl_generic(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x7, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) r5 = socket$nl_audit(0x10, 0x3, 0x9) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x406340, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000300)='\x00', 0x0, r6) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, {0x0, r7}}, 0x101) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000001, 0x13, r4, 0x10000000) syz_io_uring_submit(r1, r8, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, r5, &(0x7f0000000040)=0x80, &(0x7f00000001c0)=@sco={0x1f, @fixed}, 0x0, 0x800, 0x1, {0x0, r7}}, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 2676.030573] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2676.084904] FAULT_INJECTION: forcing a failure. [ 2676.084904] name failslab, interval 1, probability 0, space 0, times 0 [ 2676.086757] CPU: 0 PID: 12546 Comm: syz-executor.6 Not tainted 5.10.216 #1 [ 2676.087757] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2676.088937] Call Trace: [ 2676.089326] dump_stack+0x107/0x167 [ 2676.089853] should_fail.cold+0x5/0xa [ 2676.090408] ? create_object.isra.0+0x3a/0xa20 [ 2676.091070] should_failslab+0x5/0x20 [ 2676.091636] kmem_cache_alloc+0x5b/0x310 [ 2676.092230] create_object.isra.0+0x3a/0xa20 [ 2676.092862] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2676.093599] kmem_cache_alloc+0x159/0x310 [ 2676.094208] ioctx_alloc+0x139/0x1e60 [ 2676.094763] ? __might_fault+0xd3/0x180 [ 2676.095339] ? lock_downgrade+0x6d0/0x6d0 [ 2676.095950] ? aio_poll_complete_work+0xa00/0xa00 [ 2676.096666] __x64_sys_io_setup+0xc4/0x1f0 [ 2676.097278] do_syscall_64+0x33/0x40 [ 2676.097816] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2676.098552] RIP: 0033:0x7f300c1a9b19 [ 2676.099089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2676.101705] RSP: 002b:00007f300971f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 2676.102790] RAX: ffffffffffffffda RBX: 00007f300c2bcf60 RCX: 00007f300c1a9b19 [ 2676.103821] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000002d47 [ 2676.104839] RBP: 00007f300971f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2676.105861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2676.106878] R13: 00007ffdcc09d2af R14: 00007f300971f300 R15: 0000000000022000 [ 2676.133149] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 23:10:53 executing program 2: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ftruncate(r4, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="24020000010201022dbd7000fddbdf250200000600d62eeff4ae16510289cccedea6bb177ec7612befe032941a19b3af23a2b6463be2a3ac1621d014b77907dedd9f7ceb25eda14e8ccfbede80a6045848ae965dc7ed5c9591f1202fce7fc309d0fafededaaa1f2cef6109020a666f739fae0e2afdc7def92a4ee736f6080056008703000008005300", @ANYRES32=0xee01, @ANYBLOB="14005c00fc01000000000000000000000000000008004100", @ANYRES32, @ANYBLOB="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", @ANYRES32=0xee00, @ANYBLOB="6d488a2a4c6dda82f244f0f76927a58f372a65cc4839f6af3878693e1dbe7681080080000500000003000000000000000000"], 0x224}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) syz_io_uring_submit(0x0, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x1e14, 0x100, 0x2, 0x0, 0x0) 23:10:53 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58010000110001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:10:53 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0xfffffffffffffe51}, {&(0x7f0000002a80)=""/102400}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x2e}, {&(0x7f00000002c0)=""/237}, {&(0x7f0000000100)=""/3, 0x37}], 0x7, 0x0) io_setup(0x2d47, &(0x7f0000000000)) (fail_nth: 3) 23:10:53 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0xb000000, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 23:10:53 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = dup(0xffffffffffffffff) ftruncate(r5, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x3c00000000000000) 23:10:53 executing program 7: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000040)={0x0, 0x0}) syz_open_procfs(r5, &(0x7f00000001c0)='net/ip6_mr_cache\x00') 23:10:53 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580169021a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:10:53 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487f49f8000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0xf5d, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r3, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) [ 2691.593465] netlink: 304 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2691.593727] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2691.617847] FAULT_INJECTION: forcing a failure. [ 2691.617847] name failslab, interval 1, probability 0, space 0, times 0 [ 2691.620009] CPU: 1 PID: 12575 Comm: syz-executor.6 Not tainted 5.10.216 #1 [ 2691.621038] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2691.621504] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2691.622262] Call Trace: [ 2691.622313] dump_stack+0x107/0x167 [ 2691.622334] should_fail.cold+0x5/0xa [ 2691.622360] ? create_object.isra.0+0x3a/0xa20 [ 2691.625703] should_failslab+0x5/0x20 [ 2691.626275] kmem_cache_alloc+0x5b/0x310 [ 2691.626886] create_object.isra.0+0x3a/0xa20 [ 2691.627550] kmemleak_alloc_percpu+0xa0/0x100 [ 2691.628240] pcpu_alloc+0x4e2/0x1240 [ 2691.628816] ? percpu_ref_put_many.constprop.0+0x2b0/0x2b0 [ 2691.629637] percpu_ref_init+0x31/0x3d0 [ 2691.630369] ? __init_waitqueue_head+0xc6/0x150 [ 2691.631075] ioctx_alloc+0x268/0x1e60 [ 2691.631816] ? __might_fault+0xd3/0x180 [ 2691.632425] ? lock_downgrade+0x6d0/0x6d0 [ 2691.633200] ? aio_poll_complete_work+0xa00/0xa00 [ 2691.633937] __x64_sys_io_setup+0xc4/0x1f0 [ 2691.634735] do_syscall_64+0x33/0x40 [ 2691.635346] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2691.636286] RIP: 0033:0x7f300c1a9b19 [ 2691.636856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2691.640228] RSP: 002b:00007f300971f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 2691.641463] RAX: ffffffffffffffda RBX: 00007f300c2bcf60 RCX: 00007f300c1a9b19 [ 2691.642519] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000002d47 [ 2691.643566] RBP: 00007f300971f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2691.644627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2691.645672] R13: 00007ffdcc09d2af R14: 00007f300971f300 R15: 0000000000022000 23:10:53 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100031a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:10:53 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58010000120001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:10:53 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0xf000000, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 23:10:53 executing program 2: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) dup2(r5, r3) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x1009f4, 0x2000, 0x0, 0x0, 0x0) 23:10:53 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0xfffffffffffffe51}, {&(0x7f0000002a80)=""/102400}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x2e}, {&(0x7f00000002c0)=""/237}, {&(0x7f0000000100)=""/3, 0x37}], 0x7, 0x0) io_setup(0x2d47, &(0x7f0000000000)) (fail_nth: 4) 23:10:53 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = dup(0xffffffffffffffff) ftruncate(r5, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0xfaffffff00000000) 23:10:53 executing program 7: write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c4601c04e7f07000000000000000300030000080000d4020000000000004000000000000000830200000000000001000000000438000200dbff000404000500007000000080257effffffffffff08000000000000000000000000002846060000000000000008000000000000007700000000000000020000000900000009000000000000009a080000000000006a00000000000000050000000000000049000000000000003f000000000000005d03e58137321b94a2422ab7efa6dc125b452489f5305d02e580b0d0dd000000000000000000000000000000000000000000000000000000000000000000000000000000000600"/1485], 0x5cd) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r4, 0x0, r4) close(r4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xc, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x4a00, 0x0) [ 2691.882023] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 23:10:53 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100051a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) [ 2691.899040] netlink: 304 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2691.914973] netlink: 304 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2691.978884] FAULT_INJECTION: forcing a failure. [ 2691.978884] name failslab, interval 1, probability 0, space 0, times 0 [ 2691.981276] CPU: 1 PID: 12603 Comm: syz-executor.6 Not tainted 5.10.216 #1 [ 2691.982817] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2691.984351] Call Trace: [ 2691.984848] dump_stack+0x107/0x167 [ 2691.985511] should_fail.cold+0x5/0xa [ 2691.986225] ? create_object.isra.0+0x3a/0xa20 [ 2691.987066] should_failslab+0x5/0x20 [ 2691.987777] kmem_cache_alloc+0x5b/0x310 [ 2691.988539] ? mark_held_locks+0x9e/0xe0 [ 2691.989301] create_object.isra.0+0x3a/0xa20 [ 2691.990262] kmemleak_alloc_percpu+0xa0/0x100 [ 2691.991149] pcpu_alloc+0x4e2/0x1240 [ 2691.991947] ? percpu_ref_put_many.constprop.0+0x2b0/0x2b0 [ 2691.992773] percpu_ref_init+0x31/0x3d0 [ 2691.993647] ? __init_waitqueue_head+0xc6/0x150 [ 2691.994498] ioctx_alloc+0x268/0x1e60 [ 2691.995346] ? __might_fault+0xd3/0x180 [ 2691.996063] ? lock_downgrade+0x6d0/0x6d0 [ 2691.996806] ? aio_poll_complete_work+0xa00/0xa00 [ 2691.997759] __x64_sys_io_setup+0xc4/0x1f0 [ 2691.998388] do_syscall_64+0x33/0x40 [ 2691.999090] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2692.000085] RIP: 0033:0x7f300c1a9b19 [ 2692.000707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2692.003810] RSP: 002b:00007f300971f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 2692.005093] RAX: ffffffffffffffda RBX: 00007f300c2bcf60 RCX: 00007f300c1a9b19 [ 2692.006425] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000002d47 [ 2692.007465] RBP: 00007f300971f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2692.008524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2692.009558] R13: 00007ffdcc09d2af R14: 00007f300971f300 R15: 0000000000022000 23:11:07 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487f49f8000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0xf5d, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r4, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r2], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) 23:11:07 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58010000130001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:11:07 executing program 2: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) ioctl$sock_SIOCADDDLCI(r3, 0x8980, &(0x7f0000000040)={'dummy0\x00', 0x93e2}) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:11:07 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x10000000, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 23:11:07 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100061a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:11:07 executing program 7: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x800, 0x1}, 0x40000) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) syz_io_uring_setup(0x3aef, &(0x7f00000001c0)={0x0, 0xcfbe, 0x8, 0x1, 0x1b1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000240), &(0x7f0000000300)) r5 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r5, 0x406, r3) r6 = fcntl$dupfd(r5, 0x0, r5) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000001810210c0000000000000000000008000704", @ANYRES32=0xee01, @ANYBLOB], 0x24}}, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f00000017c0)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @remote}, 0x14) bind$packet(r6, &(0x7f0000000040)={0x11, 0x4, r8, 0x1, 0x4}, 0x14) 23:11:07 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0xfffffffffffffe51}, {&(0x7f0000002a80)=""/102400}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x2e}, {&(0x7f00000002c0)=""/237}, {&(0x7f0000000100)=""/3, 0x37}], 0x7, 0x0) io_setup(0x2d47, &(0x7f0000000000)) (fail_nth: 5) 23:11:07 executing program 3: mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240), 0x1000001, &(0x7f0000000380)={[{@huge_always}], [{@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@subj_type={'subj_type', 0x3d, '-%'}}, {@audit}]}) r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r5}}, 0x3) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r8 = dup(0xffffffffffffffff) ftruncate(r8, 0x0) sendfile(r8, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 2705.416959] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2705.422448] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2705.429373] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2705.434800] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2705.469809] FAULT_INJECTION: forcing a failure. [ 2705.469809] name failslab, interval 1, probability 0, space 0, times 0 [ 2705.472298] CPU: 1 PID: 12629 Comm: syz-executor.6 Not tainted 5.10.216 #1 [ 2705.473319] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2705.474531] Call Trace: [ 2705.474938] dump_stack+0x107/0x167 [ 2705.475494] should_fail.cold+0x5/0xa [ 2705.476089] ? percpu_ref_init+0xd8/0x3d0 [ 2705.476724] should_failslab+0x5/0x20 [ 2705.477297] kmem_cache_alloc_trace+0x55/0x320 [ 2705.477992] ? percpu_ref_put_many.constprop.0+0x2b0/0x2b0 [ 2705.478824] percpu_ref_init+0xd8/0x3d0 [ 2705.479428] ? __init_waitqueue_head+0xc6/0x150 [ 2705.480143] ioctx_alloc+0x268/0x1e60 [ 2705.480723] ? __might_fault+0xd3/0x180 [ 2705.481323] ? lock_downgrade+0x6d0/0x6d0 [ 2705.481951] ? aio_poll_complete_work+0xa00/0xa00 [ 2705.482689] __x64_sys_io_setup+0xc4/0x1f0 [ 2705.483332] do_syscall_64+0x33/0x40 [ 2705.483920] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2705.484694] RIP: 0033:0x7f300c1a9b19 [ 2705.485264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 23:11:07 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58010000140001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) [ 2705.487986] RSP: 002b:00007f300971f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 2705.489481] RAX: ffffffffffffffda RBX: 00007f300c2bcf60 RCX: 00007f300c1a9b19 [ 2705.490616] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000002d47 [ 2705.491884] RBP: 00007f300971f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2705.493171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2705.494207] R13: 00007ffdcc09d2af R14: 00007f300971f300 R15: 0000000000022000 [ 2705.527694] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2705.549429] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4120 sclass=netlink_route_socket pid=12632 comm=syz-executor.7 23:11:07 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100071a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:11:07 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0xfffffffffffffe51}, {&(0x7f0000002a80)=""/102400}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x2e}, {&(0x7f00000002c0)=""/237}, {&(0x7f0000000100)=""/3, 0x37}], 0x7, 0x0) io_setup(0x2d47, &(0x7f0000000000)) (fail_nth: 6) [ 2705.608767] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2705.619672] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2705.653947] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4120 sclass=netlink_route_socket pid=12632 comm=syz-executor.7 23:11:07 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x11000000, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 23:11:07 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0xff, 0x8, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) ftruncate(0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x7, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x90, 0x18, 0xc21, 0x0, 0xffffffff, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="8d27d7d7332e87d160d293b3793baa01a41a8e7f53d19f6beee95f0c0612363459c092a16fa09207f41da923e115505d5a65fb69090074725b7b23f18353b49b7e65ced9240fb3cf652476b3fbfa46a0b22d4e0dfcfc49faef2ee789de0f444ca9d2b6874f094995d4b98ab1317e85f0b38787da"]}, 0x90}}, 0x0) r7 = dup3(r0, 0xffffffffffffffff, 0x80000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000500)=ANY=[@ANYBLOB="976e1d10010000628c7affdd833f2357bebaa831b8b2d5c05a24f95710ce33298886ba662f3177719f909c1eb8977b3730816334805a8fe1724200778ceb21fe7159bb1a99951769bba30ab038f29ea6c9feac1fdc17647e7bc9554f962f384c0b9a43ad00000000000000000090f099b868f021d4535df2f8f32197853016b16421570aba76268660fb570191c711ff41471fc109c65c7c68ca61ddafb512b2113dcad1b40dadbdeb000000000000000000000000000000008931383cd4c3ce51bd776271096d582a37bf4ec14e94f5e74a5f3ee621ffba1d168bbb92a1528a204ed95f507ee363f65e59991bffae0491fcf4ac222501bd79df4790307ede83a56f8910ed2045f9ed72daab997811fd35e1c90de65f0527a5f006b31fa49402157d801f0bfd137fb7cb8621fc59be9e5db5fb36a7710e9e312d2011092264a6342e601f9a81ee9de903b8dcaec3192e1f0fb7d3af6de0c011f20d18fa49ff14f07623", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r9 = openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x2081, 0x1, 0x1c}, 0x18) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000240)=[0xffffffffffffffff, r6, r7, r8, r9], 0x5) [ 2705.761724] FAULT_INJECTION: forcing a failure. [ 2705.761724] name failslab, interval 1, probability 0, space 0, times 0 [ 2705.763791] CPU: 1 PID: 12650 Comm: syz-executor.6 Not tainted 5.10.216 #1 [ 2705.765054] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2705.766553] Call Trace: [ 2705.767058] dump_stack+0x107/0x167 [ 2705.767727] should_fail.cold+0x5/0xa [ 2705.768456] ? create_object.isra.0+0x3a/0xa20 [ 2705.769305] should_failslab+0x5/0x20 23:11:07 executing program 2: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x406340, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000300)='\x00', 0x0, r7) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, {0x0, r8}}, 0x101) syz_io_uring_submit(r4, 0x0, &(0x7f0000000480)=@IORING_OP_READV=@pass_iovec={0x1, 0x5, 0x4004, @fd=r6, 0x100, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/210, 0xd2}, {&(0x7f00000002c0)=""/78, 0x4e}, {&(0x7f0000000340)=""/111, 0x6f}, {&(0x7f00000003c0)=""/152, 0x98}], 0x4, 0x0, 0x0, {0x0, r8}}, 0x400) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 2705.770012] kmem_cache_alloc+0x5b/0x310 [ 2705.770936] create_object.isra.0+0x3a/0xa20 [ 2705.771752] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2705.772704] kmem_cache_alloc_trace+0x151/0x320 [ 2705.773566] ? percpu_ref_put_many.constprop.0+0x2b0/0x2b0 [ 2705.774580] percpu_ref_init+0xd8/0x3d0 [ 2705.775312] ? __init_waitqueue_head+0xc6/0x150 [ 2705.776195] ioctx_alloc+0x268/0x1e60 [ 2705.776907] ? __might_fault+0xd3/0x180 [ 2705.777643] ? lock_downgrade+0x6d0/0x6d0 [ 2705.778414] ? aio_poll_complete_work+0xa00/0xa00 [ 2705.779321] __x64_sys_io_setup+0xc4/0x1f0 [ 2705.780120] do_syscall_64+0x33/0x40 [ 2705.780816] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2705.781760] RIP: 0033:0x7f300c1a9b19 [ 2705.782441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2705.785806] RSP: 002b:00007f300971f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 2705.787210] RAX: ffffffffffffffda RBX: 00007f300c2bcf60 RCX: 00007f300c1a9b19 [ 2705.788497] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000002d47 [ 2705.789793] RBP: 00007f300971f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2705.791108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2705.792426] R13: 00007ffdcc09d2af R14: 00007f300971f300 R15: 0000000000022000 23:11:07 executing program 7: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x5}, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:11:07 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58010000150001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:11:07 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487f49f8000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0xf5d, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r4, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r2], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) [ 2705.865442] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 23:11:07 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0xfffffffffffffe51}, {&(0x7f0000002a80)=""/102400}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x2e}, {&(0x7f00000002c0)=""/237}, {&(0x7f0000000100)=""/3, 0x37}], 0x7, 0x0) io_setup(0x2d47, &(0x7f0000000000)) (fail_nth: 7) [ 2705.933952] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2706.001739] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2706.112319] FAULT_INJECTION: forcing a failure. [ 2706.112319] name failslab, interval 1, probability 0, space 0, times 0 [ 2706.114499] CPU: 1 PID: 12675 Comm: syz-executor.6 Not tainted 5.10.216 #1 [ 2706.115600] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2706.117015] Call Trace: [ 2706.117485] dump_stack+0x107/0x167 [ 2706.118033] should_fail.cold+0x5/0xa [ 2706.118603] ? create_object.isra.0+0x3a/0xa20 [ 2706.119278] should_failslab+0x5/0x20 [ 2706.119974] kmem_cache_alloc+0x5b/0x310 [ 2706.120590] create_object.isra.0+0x3a/0xa20 [ 2706.121398] kmemleak_alloc_percpu+0xa0/0x100 [ 2706.122070] pcpu_alloc+0x4e2/0x1240 [ 2706.122763] ? kill_ioctx+0x2a0/0x2a0 [ 2706.123328] percpu_ref_init+0x31/0x3d0 [ 2706.124082] ? __init_waitqueue_head+0xc6/0x150 [ 2706.124779] ioctx_alloc+0x362/0x1e60 [ 2706.125488] ? __might_fault+0xd3/0x180 [ 2706.126140] ? lock_downgrade+0x6d0/0x6d0 [ 2706.126907] ? aio_poll_complete_work+0xa00/0xa00 [ 2706.127640] __x64_sys_io_setup+0xc4/0x1f0 [ 2706.128429] do_syscall_64+0x33/0x40 [ 2706.128986] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2706.129924] RIP: 0033:0x7f300c1a9b19 [ 2706.130533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2706.133858] RSP: 002b:00007f300971f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 2706.135043] RAX: ffffffffffffffda RBX: 00007f300c2bcf60 RCX: 00007f300c1a9b19 [ 2706.136344] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000002d47 [ 2706.137643] RBP: 00007f300971f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2706.138941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2706.140258] R13: 00007ffdcc09d2af R14: 00007f300971f300 R15: 0000000000022000 23:11:21 executing program 2: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x4}, 0x4) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:11:21 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487f49f8000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0xf5d, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r4, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r2], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) 23:11:21 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0xfffffffffffffe51}, {&(0x7f0000002a80)=""/102400}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x2e}, {&(0x7f00000002c0)=""/237}, {&(0x7f0000000100)=""/3, 0x37}], 0x7, 0x0) io_setup(0x2d47, &(0x7f0000000000)) (fail_nth: 8) 23:11:21 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100091a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:11:21 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x1000}, 0x4) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x492}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = dup(0xffffffffffffffff) ftruncate(r5, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) socket$packet(0x11, 0x3, 0x300) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:11:21 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58010000160001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:11:21 executing program 7: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000040)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0x1}, 0xffffffff) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) syz_io_uring_submit(r7, r2, &(0x7f00000001c0)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x7, 0x3, 0x0, 0x8}, 0x3) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x7, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x1010, r6, 0x8000000) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:11:21 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x3f000000, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) [ 2720.183438] __nla_validate_parse: 3 callbacks suppressed [ 2720.183454] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2720.195835] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2720.215728] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2720.241672] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2720.259569] FAULT_INJECTION: forcing a failure. [ 2720.259569] name failslab, interval 1, probability 0, space 0, times 0 [ 2720.261538] CPU: 0 PID: 12689 Comm: syz-executor.6 Not tainted 5.10.216 #1 [ 2720.262542] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2720.263732] Call Trace: [ 2720.264137] dump_stack+0x107/0x167 [ 2720.264668] should_fail.cold+0x5/0xa [ 2720.265227] ? create_object.isra.0+0x3a/0xa20 [ 2720.265894] should_failslab+0x5/0x20 [ 2720.266449] kmem_cache_alloc+0x5b/0x310 [ 2720.267038] ? mark_held_locks+0x9e/0xe0 [ 2720.267638] create_object.isra.0+0x3a/0xa20 [ 2720.268294] kmemleak_alloc_percpu+0xa0/0x100 [ 2720.268952] pcpu_alloc+0x4e2/0x1240 [ 2720.269512] ? kill_ioctx+0x2a0/0x2a0 [ 2720.270102] percpu_ref_init+0x31/0x3d0 [ 2720.270680] ? __init_waitqueue_head+0xc6/0x150 [ 2720.271362] ioctx_alloc+0x362/0x1e60 [ 2720.271917] ? __might_fault+0xd3/0x180 [ 2720.272502] ? lock_downgrade+0x6d0/0x6d0 [ 2720.273108] ? aio_poll_complete_work+0xa00/0xa00 [ 2720.273816] __x64_sys_io_setup+0xc4/0x1f0 [ 2720.274430] do_syscall_64+0x33/0x40 [ 2720.274965] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2720.275711] RIP: 0033:0x7f300c1a9b19 [ 2720.276262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2720.278882] RSP: 002b:00007f300971f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 2720.279982] RAX: ffffffffffffffda RBX: 00007f300c2bcf60 RCX: 00007f300c1a9b19 [ 2720.281021] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000002d47 [ 2720.282047] RBP: 00007f300971f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2720.283061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2720.284090] R13: 00007ffdcc09d2af R14: 00007f300971f300 R15: 0000000000022000 23:11:22 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487f49f8000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0xf5d, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r3, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) 23:11:22 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5801000a1a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:11:22 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58010000170001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:11:22 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0xfffffffffffffe51}, {&(0x7f0000002a80)=""/102400}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x2e}, {&(0x7f00000002c0)=""/237}, {&(0x7f0000000100)=""/3, 0x37}], 0x7, 0x0) io_setup(0x2d47, &(0x7f0000000000)) (fail_nth: 9) [ 2720.497834] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2720.571661] FAULT_INJECTION: forcing a failure. [ 2720.571661] name failslab, interval 1, probability 0, space 0, times 0 [ 2720.573898] CPU: 1 PID: 12710 Comm: syz-executor.6 Not tainted 5.10.216 #1 [ 2720.574897] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2720.576093] Call Trace: [ 2720.576495] dump_stack+0x107/0x167 [ 2720.576583] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2720.577026] should_fail.cold+0x5/0xa [ 2720.578791] ? percpu_ref_init+0xd8/0x3d0 [ 2720.579413] should_failslab+0x5/0x20 [ 2720.580024] kmem_cache_alloc_trace+0x55/0x320 [ 2720.580793] ? kill_ioctx+0x2a0/0x2a0 [ 2720.581336] percpu_ref_init+0xd8/0x3d0 [ 2720.581907] ? __init_waitqueue_head+0xc6/0x150 [ 2720.582661] ioctx_alloc+0x362/0x1e60 [ 2720.583385] ? __might_fault+0xd3/0x180 [ 2720.584104] ? lock_downgrade+0x6d0/0x6d0 [ 2720.584855] ? aio_poll_complete_work+0xa00/0xa00 [ 2720.585705] __x64_sys_io_setup+0xc4/0x1f0 [ 2720.586430] do_syscall_64+0x33/0x40 [ 2720.587102] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2720.587944] RIP: 0033:0x7f300c1a9b19 [ 2720.588621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2720.591663] RSP: 002b:00007f300971f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 2720.592778] RAX: ffffffffffffffda RBX: 00007f300c2bcf60 RCX: 00007f300c1a9b19 [ 2720.593798] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000002d47 [ 2720.594823] RBP: 00007f300971f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2720.595847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2720.596886] R13: 00007ffdcc09d2af R14: 00007f300971f300 R15: 0000000000022000 [ 2720.603771] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. 23:11:37 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0xfffffffffffffe51}, {&(0x7f0000002a80)=""/102400}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x2e}, {&(0x7f00000002c0)=""/237}, {&(0x7f0000000100)=""/3, 0x37}], 0x7, 0x0) io_setup(0x2d47, &(0x7f0000000000)) (fail_nth: 10) 23:11:37 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x40000000, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 23:11:37 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487f49f8000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0xf5d, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r3, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) 23:11:37 executing program 7: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGETMODE(r5, 0x4b4c, &(0x7f0000000000)) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:11:37 executing program 2: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) sendmsg$nl_generic(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x7, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xd, 0x10, r8, 0x8000000) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) syz_io_uring_submit(r5, r10, &(0x7f0000000040)=@IORING_OP_WRITEV={0x2, 0x4, 0x2007, @fd_index=0x7, 0x2, &(0x7f0000000680)=[{&(0x7f00000001c0)="11dfff6c1a0541d3ae2c6d88571a27585dc4b7c5dca4ad18e65bd45576ad254928edb7ff67332cc21d9b91f102eb1e17e7dade577ec0cd674ecd4e19d71873018745124aed07a916fe35e73744fb52b4fce75254766c76c13c3bf9aab5c39499db47a4542c4a0b8d57f9b0534517bf6cd82004a38d8b8d9119c3600b1fc20b8cf0", 0x81}, {&(0x7f0000000280)="ec0e5547bd1cf6e2da9029a795a2bbd9e44d9bc784285d10dacea4d3090af0f4f3476eaa5f6452a9a9025b1af0ea2ef535a6e9f642f8ae8d050a319e8408b27668c45f5672020f7eb26d94d9f60bd6c446f41477488d59116849aff1da6d15329d90268f96da919cc64dbe114d53246c5f8a0754e7753b12e377d8de3593e38c029e786d548ca6a43ef95be65ddfac9d8910fe67fafe03604143c88986166b298ea4f9a3ecb13609c2944d85883303fc21884db8bdd01744be8292ca46441451bf91f0b02313e8a1964fb0ba94f429a434caef", 0xd3}, {&(0x7f0000000380)="aa19da295e33ab668cdc71fd76f5006b7f89a4f145aa0c9f35ec291f9d22fdcaad09198c462a166d42c338b6887c95a7fcd682bdf81b0789c3cbfcdd3a98577422c0f3467a7b4ea9fd376d6393caa4c40c76af5f06926c05c470cc4705665eebf1de64ba6c387d9a8c6a90278f83549ac6690f54a9355218ca8c278d9727ea9052b776e68da720add4f974cca91a21a26c948fbfecbfece44d7b1e62b4f6d5b656db7039bbc25c2fbcc52f502052716d5942e3175a026150c90feef197358b2a21d056532948a39b945881adfbde600f4889cd85dbc8ba09a070d6a7", 0xdc}, {&(0x7f0000000480)="ea2ad4fb11679cdc0bafc8f34eb14201b07f2e2f9b476fb59773bede0fced1cea5af2f1214d1c299936043a9769e9d76d36502340282bcf7632b68811f165c50d5c1f536c93b6d97c39f9c1f56e1babe8ebcb0f537a32d04f4c5c184051ed649e4c0d4eff6bf7f611ad4b0d3a6f438ce3fac67bb46fa7762a0fe73a4e324d0069e6ec23a43f9e1d9105af0bad8d55d600e3e36f623274558813d19f61eb9a846b4a6e62c1be19a5572ecb69a7cd55443e1732c47a08d234adb87b84710932e427eb347633392f5caddd840c38d0d145a285f00ddcb53acad8a24f26b1846634b1ffa5f4c14b5df0a14c632d34e470a379aa8d33eeb2d20", 0xf7}, {&(0x7f0000000580)="da4c9525436bba21b0d37d77b636cf3c3e00fd3698258886f021ba22b5f001770e53fba299b73dc363a5087a7d039923765d567c235d744aed286efa2fa14531ea54a8dd989c7934a646fc8c09d2638dba0d7ac3030d86de838a844fc4a19bc0", 0x60}, {&(0x7f0000000600)="0f9f8bd5d37b328702ea721945845374b641e9328557249fb053738abf097ac3f05a15795886901979a6ddef7d6f711bd8253c852813b37fee05810efc840f58fad3280e1858c23c4d3db39a4575cf7e9b4f50438b28a32437e824183de894d5152cc965a16673c21bdccd4713", 0x6d}], 0x6, 0x0, 0x1}, 0x9) 23:11:37 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x40}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5205, &(0x7f0000000240)={0x0, 0x4ea6, 0x0, 0x0, 0x46, 0x0, r0}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = dup(0xffffffffffffffff) ftruncate(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) sendmsg$nl_generic(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x7, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r8, 0x4008f510, &(0x7f0000000040)=0x4) sendfile(r6, 0xffffffffffffffff, &(0x7f0000000340)=0x2000, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, r10, &(0x7f0000001540)=@IORING_OP_READV=@pass_iovec={0x1, 0x4, 0x6000, @fd=r8, 0xf23, &(0x7f00000014c0)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/141, 0x8d}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000002e00)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/77, 0x4d}, {&(0x7f0000001440)=""/73, 0x49}, {&(0x7f0000000300)=""/43, 0x2b}], 0x7, 0x10, 0x1, {0x0, r5}}, 0x4) 23:11:37 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5801000b1a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:11:37 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58010000180001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) [ 2735.341515] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2735.345025] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2735.352933] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2735.378413] FAULT_INJECTION: forcing a failure. [ 2735.378413] name failslab, interval 1, probability 0, space 0, times 0 [ 2735.378437] CPU: 1 PID: 12729 Comm: syz-executor.6 Not tainted 5.10.216 #1 [ 2735.378448] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2735.378455] Call Trace: [ 2735.378481] dump_stack+0x107/0x167 [ 2735.378502] should_fail.cold+0x5/0xa [ 2735.378525] ? create_object.isra.0+0x3a/0xa20 23:11:37 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x48000000, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) [ 2735.378547] should_failslab+0x5/0x20 23:11:37 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58010000190001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) [ 2735.378567] kmem_cache_alloc+0x5b/0x310 [ 2735.378592] create_object.isra.0+0x3a/0xa20 [ 2735.378612] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2735.378638] kmem_cache_alloc_trace+0x151/0x320 23:11:37 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5801000f1a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) [ 2735.378662] ? kill_ioctx+0x2a0/0x2a0 [ 2735.378682] percpu_ref_init+0xd8/0x3d0 [ 2735.378702] ? __init_waitqueue_head+0xc6/0x150 [ 2735.378725] ioctx_alloc+0x362/0x1e60 [ 2735.378749] ? __might_fault+0xd3/0x180 [ 2735.378769] ? lock_downgrade+0x6d0/0x6d0 [ 2735.378794] ? aio_poll_complete_work+0xa00/0xa00 [ 2735.378828] __x64_sys_io_setup+0xc4/0x1f0 23:11:37 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0xfffffffffffffe51}, {&(0x7f0000002a80)=""/102400}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x2e}, {&(0x7f00000002c0)=""/237}, {&(0x7f0000000100)=""/3, 0x37}], 0x7, 0x0) io_setup(0x2d47, &(0x7f0000000000)) (fail_nth: 11) [ 2735.378847] do_syscall_64+0x33/0x40 [ 2735.378865] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2735.378878] RIP: 0033:0x7f300c1a9b19 [ 2735.378896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2735.378907] RSP: 002b:00007f300971f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 2735.378929] RAX: ffffffffffffffda RBX: 00007f300c2bcf60 RCX: 00007f300c1a9b19 [ 2735.378940] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000002d47 [ 2735.378952] RBP: 00007f300971f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2735.378963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2735.378975] R13: 00007ffdcc09d2af R14: 00007f300971f300 R15: 0000000000022000 [ 2735.381940] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2735.588360] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.0'. 23:11:37 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x1005204, &(0x7f0000000100)={0x0, 0xfffffffc, 0x0, 0x0, 0x2c2}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = dup(0xffffffffffffffff) ftruncate(r5, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 2735.651492] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 23:11:37 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100021a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:11:37 executing program 2: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x5, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x7, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) perf_event_open(&(0x7f0000001d80)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400}, 0x40000}, 0x0, 0x4, r6, 0xf) syz_io_uring_setup(0x3335, &(0x7f00000001c0)={0x0, 0xddf2, 0x20, 0x0, 0xd, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000240)) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r9, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x75, 0x2400, 0x23456, {0x0, r10}}, 0x6) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 2735.746748] FAULT_INJECTION: forcing a failure. [ 2735.746748] name failslab, interval 1, probability 0, space 0, times 0 [ 2735.748760] CPU: 0 PID: 12760 Comm: syz-executor.6 Not tainted 5.10.216 #1 [ 2735.749887] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2735.751134] Call Trace: [ 2735.751577] dump_stack+0x107/0x167 [ 2735.752177] should_fail.cold+0x5/0xa [ 2735.752824] ? create_object.isra.0+0x3a/0xa20 [ 2735.753717] should_failslab+0x5/0x20 [ 2735.754359] kmem_cache_alloc+0x5b/0x310 [ 2735.755047] create_object.isra.0+0x3a/0xa20 [ 2735.755784] kmemleak_alloc_percpu+0xa0/0x100 [ 2735.756557] pcpu_alloc+0x4e2/0x1240 [ 2735.757199] ioctx_alloc+0x390/0x1e60 [ 2735.757838] ? __might_fault+0xd3/0x180 [ 2735.758506] ? lock_downgrade+0x6d0/0x6d0 [ 2735.759200] ? aio_poll_complete_work+0xa00/0xa00 [ 2735.760003] __x64_sys_io_setup+0xc4/0x1f0 [ 2735.760714] do_syscall_64+0x33/0x40 [ 2735.761331] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2735.762178] RIP: 0033:0x7f300c1a9b19 [ 2735.762799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2735.765778] RSP: 002b:00007f300971f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 2735.767030] RAX: ffffffffffffffda RBX: 00007f300c2bcf60 RCX: 00007f300c1a9b19 [ 2735.768189] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000002d47 [ 2735.769355] RBP: 00007f300971f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2735.770514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2735.771676] R13: 00007ffdcc09d2af R14: 00007f300971f300 R15: 0000000000022000 23:11:37 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100111a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:11:37 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x4c000000, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 23:11:37 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487f49f8000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0xf5d, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r3, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) 23:11:37 executing program 7: r0 = syz_io_uring_setup(0x3439, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2bc}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_setup(0x39aa, &(0x7f00000002c0)={0x0, 0xbf03, 0x20, 0x1, 0x341, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000340), &(0x7f0000000380)=0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r3, &(0x7f00000003c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x40, 0x1, {0x0, r6}}, 0x1c2) r7 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, 0x0}, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r8, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000400)={@loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, 0x1, 0x7, 0xae5, 0x100, 0x100, 0x44800104}) syz_io_uring_setup(0x66d9, &(0x7f00000001c0)={0x0, 0xc245, 0x20, 0x0, 0x2de, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000240)) syz_io_uring_submit(r9, r2, &(0x7f0000000280)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x12, 0x1}, 0x800) 23:11:37 executing program 3: r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x4840, 0x0) r1 = syz_io_uring_setup(0x4c4f, &(0x7f00000001c0)={0x0, 0x47b2, 0x0, 0x1, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r4 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r2, r3, &(0x7f0000000080)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x4c000}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) getsockopt$packet_int(r6, 0x107, 0x10, &(0x7f00000000c0), &(0x7f0000000240)=0x4) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r7 = dup(0xffffffffffffffff) ftruncate(r7, 0x0) sendfile(r7, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r1, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 2736.012394] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2736.025936] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 23:11:37 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5801bf1f1a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:11:51 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0xfffffffffffffe51}, {&(0x7f0000002a80)=""/102400}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x2e}, {&(0x7f00000002c0)=""/237}, {&(0x7f0000000100)=""/3, 0x37}], 0x7, 0x0) io_setup(0x2d47, &(0x7f0000000000)) (fail_nth: 12) 23:11:51 executing program 2: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r5, 0x0, r5) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r5, 0xf502, 0x0) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:11:51 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487f49f8000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0xf5d, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r3, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) 23:11:51 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x6d5, 0x4, &(0x7f0000000540)=[{&(0x7f0000000200)="e6bc334526a260efe5f8ce332ee4ff05fee2f0d3770737dda1ee198d3c938536035411e191a15f18fe90affa46de58e31739be9cfb756573d9216570afddd748a219545d1f473e41b8314622cae7648c8645451b975037eec419b296f21c597c766c9ca077ac89c36ed2113a9f99076ef8d31e54d7486aa6fd582f2536538b15e4760de84c278a41da2c59a954f5e764b0ee0869d9dcea696fa5595f1cdd7b1d8bb2cdd6956352860a58fb5a1cc8ef4d11db34b539153b15b21071d4e248cda2eb445cfeb3069eb8d7c8ad1931affdd5e5528c", 0xd3, 0x101}, {&(0x7f0000000380)="2dc35e55a6acf445dcf4700becae98914403b3322fcedac8c5d6bd60ac040bef416a98531007d75553d69ffc2da28c48fc78ef7d1fe10762a634a06c3d6124774b25f8ff323cbbb48fdd43a9f113f60ffcfc20be03ce631705a2ffedb90273c73ce7b1016b24d5caf75c6ff99bf65f9e71f9c77b811a97acc0fcd1d844196a897f6bef5a521ebfab2a34008b25b6269d5218160d199d82e18a17b6072fdd8924116e0fa3ed99cc0a6a266a874207510e5e", 0xb1, 0x7}, {&(0x7f0000000440)="031ca3af571ee48443c5b53b47151ba30a730a3bbe04864d3ba722c16ab8818329c7337cabc530365f46a6746dc010623a349875c8a57c7433b5057fbfa98cdee3ddc1a737706d7cd55f8939b193892e44ed5eeff780c83e039000e88fc819880a2288e1846f01562191ababdefef37be5521715904095fbe53d9c1d78c24f9abe0279365bb19321b19dea9e002d3c502d7f85f57da901dff953a1733c7f8ed3265ac0eeaf4f97177f9d7960d3854379f9cbcdb5abf8ff9512adcd7ff964791d442b1f9fc189ef17ce0bcdae38b45fbd4f20ecb7", 0xd4, 0x80}, {&(0x7f0000000300)="43f236b26212a2793f446230d74f19622b7f1483ea2fb597ded7cf03695127ddab36c780cf9944a8a87801eb366ea6e9a3476d1b415e5be09e41ae6ca7", 0x3d, 0x8000000000000}], 0x100000, &(0x7f00000005c0)=ANY=[@ANYBLOB='nocompress,dmode=0x0000000000000100,utf8,map=off,mode=0x0000000000000009,uid=', @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESHEX=0x0, @ANYBLOB=',smackfsdef=\x00,uid>', @ANYRESDEC=0x0, @ANYBLOB="07cfc204aead46b92c00"]) r6 = dup(r5) ftruncate(r6, 0x0) sendfile(r6, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:11:51 executing program 7: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x80}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) bind$packet(r3, &(0x7f0000000040)={0x11, 0x1b, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x487f9d43eea60708}}, 0x14) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) close_range(r3, r5, 0x2) 23:11:51 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x68000000, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 23:11:51 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5801003f1a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:11:51 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100031a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) [ 2749.884237] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2749.884416] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2749.911833] FAULT_INJECTION: forcing a failure. [ 2749.911833] name failslab, interval 1, probability 0, space 0, times 0 [ 2749.914377] CPU: 0 PID: 12808 Comm: syz-executor.6 Not tainted 5.10.216 #1 [ 2749.915523] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2749.916870] Call Trace: [ 2749.917299] dump_stack+0x107/0x167 [ 2749.917894] should_fail.cold+0x5/0xa [ 2749.918499] ? create_object.isra.0+0x3a/0xa20 [ 2749.919236] should_failslab+0x5/0x20 [ 2749.919855] kmem_cache_alloc+0x5b/0x310 [ 2749.920514] ? mark_held_locks+0x9e/0xe0 [ 2749.921193] create_object.isra.0+0x3a/0xa20 [ 2749.921917] kmemleak_alloc_percpu+0xa0/0x100 [ 2749.922643] pcpu_alloc+0x4e2/0x1240 [ 2749.923234] ioctx_alloc+0x390/0x1e60 [ 2749.923856] ? __might_fault+0xd3/0x180 [ 2749.924499] ? lock_downgrade+0x6d0/0x6d0 [ 2749.925195] ? aio_poll_complete_work+0xa00/0xa00 [ 2749.925988] __x64_sys_io_setup+0xc4/0x1f0 [ 2749.926670] do_syscall_64+0x33/0x40 [ 2749.927262] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2749.928082] RIP: 0033:0x7f300c1a9b19 [ 2749.928719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2749.931621] RSP: 002b:00007f300971f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 2749.932870] RAX: ffffffffffffffda RBX: 00007f300c2bcf60 RCX: 00007f300c1a9b19 [ 2749.934020] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000002d47 [ 2749.935275] RBP: 00007f300971f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2749.936425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2749.937565] R13: 00007ffdcc09d2af R14: 00007f300971f300 R15: 0000000000022000 [ 2749.949367] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 23:12:04 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100401a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:12:04 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0xfffffffffffffe51}, {&(0x7f0000002a80)=""/102400}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x2e}, {&(0x7f00000002c0)=""/237}, {&(0x7f0000000100)=""/3, 0x37}], 0x7, 0x0) io_setup(0x2d47, &(0x7f0000000000)) (fail_nth: 13) 23:12:04 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x6c000000, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 23:12:04 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100041a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:12:04 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487f49f8000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0xf5d, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r3, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) 23:12:04 executing program 7: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000002e2f66696c653000a6d945b0003de92213622e44ee67fbdd20882986196c8626d1539da958a506c5bc23c3d271cf6b85fef7a1348c62b73afa0ec1102303c6c1a2ddb1d11288cc9e33c1a2dc1221b567c8776a945d423096d7009116746c220af3cc89ea"]) io_uring_setup(0x2969, &(0x7f00000001c0)={0x0, 0xe082, 0x20, 0x3, 0x32d, 0x0, r3}) r4 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000240)={{0x1, 0x1, 0x18, r4, {0x4}}, './file0/file0\x00'}) pipe(&(0x7f0000000280)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x20202, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r6, 0x2) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:12:04 executing program 2: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x5, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = getpgid(0x0) sched_getaffinity(r6, 0x8, &(0x7f0000000080)) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x6, 0x1f, 0x3, 0x0, 0x10000, 0x8, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000040), 0x8}, 0x4000, 0x100, 0x7, 0x9, 0xfff, 0x3, 0x0, 0x0, 0x10000, 0x0, 0x3}, r6, 0x2, r5, 0x3) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) syz_open_procfs$userns(r6, &(0x7f0000000240)) 23:12:04 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r5 = io_uring_setup(0x14f9, &(0x7f0000000100)={0x0, 0x0, 0x10, 0x0, 0x4}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x8c80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) r7 = io_uring_setup(0x7723, &(0x7f00000001c0)={0x0, 0x9d56, 0x10, 0x1, 0x3bb, 0x0, r6}) r8 = dup(0xffffffffffffffff) ftruncate(r8, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2, 0x1d4}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r2, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0x7f, &(0x7f0000000240)=[r6, r5], 0x2, 0x0, 0x1, {0x0, r11}}, 0x81) sendfile(r8, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="240000001800210c007bcd109d0800e601006e670800000000000000080007005ed087852e95906c26bcdaea906757687bdbb2c965f29d166e6e55276443ad0f6153f7988abdebb5c29b844ed351e438b7937ab5f104303d8288e7c6054a8b7ddee03b40b9645f0a6c3b4c57f158b3877314670000068d65086467876c01bee765f433", @ANYRES32=0xee01, @ANYBLOB="9b7e195319fd7212aa777b5c6d857e34870540a3889960df086cb012f4b11eceaa59"], 0x24}}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xc, &(0x7f0000000380)=0x8a18, 0x4) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 2762.774700] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2762.785945] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2762.788979] FAULT_INJECTION: forcing a failure. [ 2762.788979] name failslab, interval 1, probability 0, space 0, times 0 [ 2762.790483] CPU: 0 PID: 12830 Comm: syz-executor.6 Not tainted 5.10.216 #1 [ 2762.791221] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2762.792053] Call Trace: [ 2762.792327] dump_stack+0x107/0x167 [ 2762.792709] should_fail.cold+0x5/0xa [ 2762.793095] ? alloc_inode+0x171/0x240 [ 2762.793491] should_failslab+0x5/0x20 [ 2762.793877] kmem_cache_alloc+0x5b/0x310 [ 2762.794291] ? pcpu_alloc+0x12a/0x1240 [ 2762.794689] alloc_inode+0x171/0x240 [ 2762.795064] new_inode_pseudo+0x14/0xe0 [ 2762.795471] alloc_anon_inode+0x22/0x3d0 [ 2762.795884] ioctx_alloc+0x441/0x1e60 [ 2762.796278] ? lock_downgrade+0x6d0/0x6d0 [ 2762.796703] ? aio_poll_complete_work+0xa00/0xa00 [ 2762.797198] __x64_sys_io_setup+0xc4/0x1f0 [ 2762.797625] do_syscall_64+0x33/0x40 [ 2762.798001] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2762.798513] RIP: 0033:0x7f300c1a9b19 [ 2762.798891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2762.800719] RSP: 002b:00007f300971f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 2762.801490] RAX: ffffffffffffffda RBX: 00007f300c2bcf60 RCX: 00007f300c1a9b19 [ 2762.802201] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000002d47 [ 2762.802917] RBP: 00007f300971f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2762.803631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2762.804352] R13: 00007ffdcc09d2af R14: 00007f300971f300 R15: 0000000000022000 23:12:04 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100481a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) [ 2762.818742] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 23:12:04 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100051a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:12:04 executing program 7: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r5, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = accept4$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000240)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000480)={'vxcan1\x00', 0x0}) sendmsg$inet6(r6, &(0x7f0000000640)={&(0x7f00000002c0)={0xa, 0x4e21, 0x37c1, @local}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000300)="34474eecbcefb28351d44d4d830653b2d5b5dbece922ecd2e4b9cbf473242f0fad52eb78ecdb49c76514d184d1d2167e738b8aa525492969dcde060411c13a50acee5a428d70f300b1245aea55be5b9c69b1aee8", 0x54}, {&(0x7f0000000380)="75459c611266e2b0467a95afca7fe547eb8ac41a652364aed30ee1c8a58e84ef4f9c52ec0341881e4e282f1f5ae3eb2c6027cdf31e9d171c1520d736d114eb92d4aebf387fdd1806a4c9a18ebba530a5c7b2d8685c44868fc3018bc2642d10bcb19665942ad43ba2d49e96c3d9615320b5f5684f64c617955c219a12d956d634133f54b06138c4e3e8ecc5d44862b41e731edfea42429d7a928097db8949a687d592f9b3", 0xa4}], 0x2, &(0x7f00000004c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x5}}, @dstopts={{0xf0, 0x29, 0x37, {0x11, 0x1b, '\x00', [@generic={0xc8, 0xc4, "947854c53014b8d59628b89413ab7c857aa9af36ed8d91c1a47439f4df944802ac6699c21b68a67a323b84bd46056ba8f08cf9f07b750415a36d3726f9bd3c6feb4c311ef5325ec5a6b5a1c2ce85dd45438a300917df39b1aeeb15b396e87f08d742576c8aeab2ff588a7242c04ed7ba22c5772bd6afd3d3eeddba1e7f5efc3807dbe06b99bc1793f3aa42bc1ae344bb67fc3573c424650380ce1c6af741c1e1aa2bac37869f2eb284ea70f450df6b0a8c0a4de9c9f12b6177f798e46adc1a88c4c13082"}, @hao={0xc9, 0x10, @private0}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private2, r7}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x4}}, @dontfrag={{0x14, 0x29, 0x3e, 0x4}}], 0x160}, 0x0) ioctl$sock_SIOCBRDELBR(r5, 0x89a1, &(0x7f0000000680)='veth1_macvtap\x00') sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f00000001c0)={0x334, 0x0, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2e207be43844d4cb}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xa4, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xf}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xe0, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xb}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xc}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xb}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0xc4, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}]}, 0x334}}, 0x24000810) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:12:04 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x74000000, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 23:12:04 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0xfffffffffffffe51}, {&(0x7f0000002a80)=""/102400}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x2e}, {&(0x7f00000002c0)=""/237}, {&(0x7f0000000100)=""/3, 0x37}], 0x7, 0x0) io_setup(0x2d47, &(0x7f0000000000)) (fail_nth: 14) 23:12:04 executing program 2: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0x0, 0x10}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 2763.013392] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 23:12:04 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487f49f8000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0xf5d, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r3, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) 23:12:04 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r4}}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) pipe(&(0x7f0000000040)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = dup(0xffffffffffffffff) ftruncate(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) sendmsg$nl_generic(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000001800210c000000000000000002000000080000000000000008000700", @ANYRES32=0xee01, @ANYBLOB="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"], 0x24}}, 0x0) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f00000001c0)={0x0, 0x1, 0x6, @broadcast}, 0x10) sendfile(r6, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:12:04 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5801004c1a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) [ 2763.047968] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 23:12:04 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100061a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) [ 2763.083815] FAULT_INJECTION: forcing a failure. [ 2763.083815] name failslab, interval 1, probability 0, space 0, times 0 [ 2763.084865] CPU: 0 PID: 12854 Comm: syz-executor.6 Not tainted 5.10.216 #1 [ 2763.085431] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2763.086103] Call Trace: [ 2763.086328] dump_stack+0x107/0x167 [ 2763.086631] should_fail.cold+0x5/0xa [ 2763.086948] ? create_object.isra.0+0x3a/0xa20 [ 2763.087326] should_failslab+0x5/0x20 [ 2763.087643] kmem_cache_alloc+0x5b/0x310 [ 2763.087986] create_object.isra.0+0x3a/0xa20 [ 2763.088348] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2763.088776] kmem_cache_alloc+0x159/0x310 [ 2763.089120] alloc_inode+0x171/0x240 [ 2763.089426] new_inode_pseudo+0x14/0xe0 [ 2763.089755] alloc_anon_inode+0x22/0x3d0 [ 2763.090093] ioctx_alloc+0x441/0x1e60 [ 2763.090413] ? lock_downgrade+0x6d0/0x6d0 [ 2763.090757] ? aio_poll_complete_work+0xa00/0xa00 [ 2763.091162] __x64_sys_io_setup+0xc4/0x1f0 [ 2763.091511] do_syscall_64+0x33/0x40 [ 2763.091816] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2763.092240] RIP: 0033:0x7f300c1a9b19 [ 2763.092556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2763.094055] RSP: 002b:00007f300971f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 2763.094678] RAX: ffffffffffffffda RBX: 00007f300c2bcf60 RCX: 00007f300c1a9b19 [ 2763.095259] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000002d47 [ 2763.095841] RBP: 00007f300971f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2763.096422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2763.097007] R13: 00007ffdcc09d2af R14: 00007f300971f300 R15: 0000000000022000 23:12:04 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x7a000000, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) [ 2763.173624] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 23:12:05 executing program 7: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x567000, 0x0) fadvise64(r4, 0x2eeb, 0x5, 0x1) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x7, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000680)={'ipvlan1\x00'}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r7, 0x6, 0x22, &(0x7f0000000280)=0x201, 0x4) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r8 = accept4$inet6(r7, &(0x7f0000000200)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000240)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000480)={'vxcan1\x00', 0x0}) sendmsg$inet6(r8, &(0x7f0000000640)={&(0x7f00000002c0)={0xa, 0x4e21, 0x37c1, @local}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000300)="34474eecbcefb28351d44d4d830653b2d5b5dbece922ecd2e4b9cbf473242f0fad52eb78ecdb49c76514d184d1d2167e738b8aa525492969dcde060411c13a50acee5a428d70f300b1245aea55be5b9c69b1aee8", 0x54}, {&(0x7f0000000380)="75459c611266e2b0467a95afca7fe547eb8ac41a652364aed30ee1c8a58e84ef4f9c52ec0341881e4e282f1f5ae3eb2c6027cdf31e9d171c1520d736d114eb92d4aebf387fdd1806a4c9a18ebba530a5c7b2d8685c44868fc3018bc2642d10bcb19665942ad43ba2d49e96c3d9615320b5f5684f64c617955c219a12d956d634133f54b06138c4e3e8ecc5d44862b41e731edfea42429d7a928097db8949a687d592f9b3", 0xa4}], 0x2, &(0x7f00000004c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x5}}, @dstopts={{0xf0, 0x29, 0x37, {0x11, 0x1b, '\x00', [@generic={0xc8, 0xc4, "947854c53014b8d59628b89413ab7c857aa9af36ed8d91c1a47439f4df944802ac6699c21b68a67a323b84bd46056ba8f08cf9f07b750415a36d3726f9bd3c6feb4c311ef5325ec5a6b5a1c2ce85dd45438a300917df39b1aeeb15b396e87f08d742576c8aeab2ff588a7242c04ed7ba22c5772bd6afd3d3eeddba1e7f5efc3807dbe06b99bc1793f3aa42bc1ae344bb67fc3573c424650380ce1c6af741c1e1aa2bac37869f2eb284ea70f450df6b0a8c0a4de9c9f12b6177f798e46adc1a88c4c13082"}, @hao={0xc9, 0x10, @private0}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private2, r9}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x4}}, @dontfrag={{0x14, 0x29, 0x3e, 0x4}}], 0x160}, 0x0) bind$packet(r3, &(0x7f0000000040)={0x11, 0x15, r9, 0x1, 0x4, 0x6, @broadcast}, 0x14) [ 2763.241563] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2763.283297] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 23:12:05 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100071a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:12:05 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100681a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:12:05 executing program 2: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = accept4$packet(r3, 0x0, &(0x7f0000000040), 0x800) write$binfmt_elf64(r5, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0xf9, 0x9, 0x2, 0x0, 0x3, 0x2, 0x6, 0x4b, 0x1f2, 0x40, 0x3c3, 0x4, 0xcb62, 0x38, 0x1, 0x2, 0x40, 0x49da}, [{0x7, 0x8, 0xff, 0xa1, 0x9, 0x100, 0x0, 0x7fff}, {0x70000000, 0x8001, 0x1f, 0x4, 0x2, 0x0, 0x8}], "3c4fda12d74203fb01bfbc803c0987b782b8d4fc926383e685c3965bc3425f036800ab7279c66ff53e4a5077a7f1f01ef71037567cc6af29359dfc12f38daaf3d0fd4553def9def6115c8a7968780f8d111c366fe344182afb4315829edd99a450f17ffb9985ccfe5c3e96f2f431c58327f69c8c890af2d92d7b73d4c394dcd81fb6999defec99c89dfdb33a860501", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x73f) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:12:05 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0xfffffffffffffe51}, {&(0x7f0000002a80)=""/102400}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x2e}, {&(0x7f00000002c0)=""/237}, {&(0x7f0000000100)=""/3, 0x37}], 0x7, 0x0) io_setup(0x2d47, &(0x7f0000000000)) (fail_nth: 15) 23:12:05 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x9effffff, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 23:12:05 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x4957, &(0x7f0000000100)={0x0, 0x0, 0x8, 0x0, 0xfffffffc}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = dup(0xffffffffffffffff) ftruncate(r5, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 2763.485370] FAULT_INJECTION: forcing a failure. [ 2763.485370] name failslab, interval 1, probability 0, space 0, times 0 [ 2763.487240] CPU: 1 PID: 12896 Comm: syz-executor.6 Not tainted 5.10.216 #1 [ 2763.488232] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2763.489422] Call Trace: [ 2763.489818] dump_stack+0x107/0x167 [ 2763.490347] should_fail.cold+0x5/0xa [ 2763.490907] ? security_inode_alloc+0x34/0x160 [ 2763.491569] should_failslab+0x5/0x20 [ 2763.492120] kmem_cache_alloc+0x5b/0x310 [ 2763.492719] security_inode_alloc+0x34/0x160 [ 2763.493355] inode_init_always+0xa4e/0xd10 [ 2763.493967] alloc_inode+0x84/0x240 [ 2763.494495] new_inode_pseudo+0x14/0xe0 [ 2763.495074] alloc_anon_inode+0x22/0x3d0 [ 2763.495664] ioctx_alloc+0x441/0x1e60 [ 2763.496228] ? lock_downgrade+0x6d0/0x6d0 [ 2763.496836] ? aio_poll_complete_work+0xa00/0xa00 [ 2763.497543] __x64_sys_io_setup+0xc4/0x1f0 [ 2763.498153] do_syscall_64+0x33/0x40 [ 2763.498692] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2763.499424] RIP: 0033:0x7f300c1a9b19 [ 2763.499960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2763.502573] RSP: 002b:00007f300971f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 2763.503665] RAX: ffffffffffffffda RBX: 00007f300c2bcf60 RCX: 00007f300c1a9b19 [ 2763.504680] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000002d47 [ 2763.505697] RBP: 00007f300971f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2763.506714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2763.507728] R13: 00007ffdcc09d2af R14: 00007f300971f300 R15: 0000000000022000 [ 2763.558557] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2763.581476] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 23:12:18 executing program 7: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') r4 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r4, 0x0, r4) dup2(r3, r4) r5 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_FLUSHABLE(r6, 0x112, 0x8, &(0x7f00000000c0)=0x1, 0x4) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:12:18 executing program 3: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) r1 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r4 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = dup(0xffffffffffffffff) ftruncate(r6, 0x0) sendfile(r6, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r1, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:12:18 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0xf0ffffff, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 23:12:18 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580102691a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:12:18 executing program 2: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) syz_io_uring_submit(r4, r2, &(0x7f00000001c0)=@IORING_OP_CLOSE={0x13, 0x3, 0x0, r5}, 0x9) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:12:18 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0xfffffffffffffe51}, {&(0x7f0000002a80)=""/102400}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x2e}, {&(0x7f00000002c0)=""/237}, {&(0x7f0000000100)=""/3, 0x37}], 0x7, 0x0) io_setup(0x2d47, &(0x7f0000000000)) (fail_nth: 16) 23:12:18 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100081a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:12:18 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487f49f8000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0xf5d, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r4, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRES16=r2, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) [ 2777.127026] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2777.131727] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2777.143741] FAULT_INJECTION: forcing a failure. [ 2777.143741] name failslab, interval 1, probability 0, space 0, times 0 [ 2777.145288] CPU: 1 PID: 12924 Comm: syz-executor.6 Not tainted 5.10.216 #1 [ 2777.145951] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2777.146736] Call Trace: [ 2777.146999] dump_stack+0x107/0x167 [ 2777.147352] should_fail.cold+0x5/0xa [ 2777.147720] ? create_object.isra.0+0x3a/0xa20 [ 2777.148156] should_failslab+0x5/0x20 [ 2777.148521] kmem_cache_alloc+0x5b/0x310 [ 2777.148917] create_object.isra.0+0x3a/0xa20 [ 2777.149336] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2777.149819] kmem_cache_alloc+0x159/0x310 [ 2777.150228] security_inode_alloc+0x34/0x160 [ 2777.150650] inode_init_always+0xa4e/0xd10 [ 2777.151054] alloc_inode+0x84/0x240 [ 2777.151403] new_inode_pseudo+0x14/0xe0 [ 2777.151777] alloc_anon_inode+0x22/0x3d0 [ 2777.152164] ioctx_alloc+0x441/0x1e60 [ 2777.152533] ? lock_downgrade+0x6d0/0x6d0 [ 2777.152932] ? aio_poll_complete_work+0xa00/0xa00 [ 2777.153391] __x64_sys_io_setup+0xc4/0x1f0 [ 2777.153789] do_syscall_64+0x33/0x40 [ 2777.154141] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2777.154619] RIP: 0033:0x7f300c1a9b19 [ 2777.154970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2777.156689] RSP: 002b:00007f300971f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 2777.157398] RAX: ffffffffffffffda RBX: 00007f300c2bcf60 RCX: 00007f300c1a9b19 [ 2777.158069] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000002d47 [ 2777.158735] RBP: 00007f300971f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2777.159396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2777.160056] R13: 00007ffdcc09d2af R14: 00007f300971f300 R15: 0000000000022000 23:12:19 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100091a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:12:19 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5801006c1a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:12:32 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0x7}}, './file0\x00'}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) sendmsg$nl_generic(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x7, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x80400, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r8, 0x4008941a, &(0x7f0000000200)=0x2) io_uring_setup(0x5204, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0, r7}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r9 = dup(0xffffffffffffffff) ftruncate(r9, 0x0) sendfile(r9, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000002c0)={0xa, 0x4e21, 0x37c1, @local}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000300)="34474eecbcefb28351d44d4d830653b2d5b5dbece922ecd2e4b9cbf473242f0fad52eb78ecdb49c76514d184d1d2167e738b8aa525492969dcde060411c13a50acee5a428d70f300b1245aea55be5b9c69b1aee8", 0x54}, {&(0x7f0000000380)="75459c611266e2b0467a95afca7fe547eb8ac41a652364aed30ee1c8a58e84ef4f9c52ec0341881e4e282f1f5ae3eb2c6027cdf31e9d171c1520d736d114eb92d4aebf387fdd1806a4c9a18ebba530a5c7b2d8685c44868fc3018bc2642d10bcb19665942ad43ba2d49e96c3d9615320b5f5684f64c617955c219a12d956d634133f54b06138c4e3e8ecc5d44862b41e731edfea42429d7a928097db8949a687d592f9b3", 0xa4}], 0x2, &(0x7f00000004c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x5}}, @dstopts={{0xf0, 0x29, 0x37, {0x11, 0x1b, '\x00', [@generic={0xc8, 0xc4, "947854c53014b8d59628b89413ab7c857aa9af36ed8d91c1a47439f4df944802ac6699c21b68a67a323b84bd46056ba8f08cf9f07b750415a36d3726f9bd3c6feb4c311ef5325ec5a6b5a1c2ce85dd45438a300917df39b1aeeb15b396e87f08d742576c8aeab2ff588a7242c04ed7ba22c5772bd6afd3d3eeddba1e7f5efc3807dbe06b99bc1793f3aa42bc1ae344bb67fc3573c424650380ce1c6af741c1e1aa2bac37869f2eb284ea70f450df6b0a8c0a4de9c9f12b6177f798e46adc1a88c4c13082"}, @hao={0xc9, 0x10, @private0}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private2}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x4}}, @dontfrag={{0x14, 0x29, 0x3e, 0x4}}], 0x160}, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(r5, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0xb8, 0x0, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0xfffffffa}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x7}, @ETHTOOL_A_EEE_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40801}, 0x8010) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:12:32 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100741a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:12:32 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5801000a1a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:12:32 executing program 7: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0xcd93bb974f23cc1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000001a00)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x4007, @fd_index=0x3, 0xde09, &(0x7f0000001940)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f0000001340)=""/166, 0xa6}, {&(0x7f0000001400)=""/117, 0x75}, {&(0x7f0000001480)=""/253, 0xfd}, {&(0x7f0000001580)=""/21, 0x15}, {&(0x7f00000015c0)=""/177, 0xb1}, {&(0x7f0000001680)=""/190, 0xbe}, {&(0x7f0000001740)=""/230, 0xe6}, {&(0x7f0000001840)=""/223, 0xdf}], 0xa, 0x14, 0x1}, 0x3) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) sendmsg$nl_generic(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001800210c000000000000000002000000080000000000000008000700", @ANYRES32=0xee01, @ANYBLOB="982446dedc2305"], 0x24}}, 0x0) fsetxattr$security_ima(r8, &(0x7f0000000040), &(0x7f00000001c0)=@v2={0x3, 0x1, 0x12, 0x8, 0xfa, "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"}, 0x103, 0x2) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:12:32 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0xfffffffffffffe51}, {&(0x7f0000002a80)=""/102400}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x2e}, {&(0x7f00000002c0)=""/237}, {&(0x7f0000000100)=""/3, 0x37}], 0x7, 0x0) io_setup(0x2d47, &(0x7f0000000000)) (fail_nth: 17) 23:12:32 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487f49f8000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0xf5d, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r4, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRES16=r2, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) 23:12:32 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0xfe020000, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 23:12:32 executing program 2: r0 = syz_io_uring_setup(0x50d4, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x1, 0x9b}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400000002000000080000000800000008000700"/30, @ANYRES32=0xee01, @ANYBLOB="6d7607e3935b967de4f5a5fc4ffc812c0041f11ad664b750eb7d5242823642902677ca75ee2dfadc4b6eb6fbf3a3f49703e40062b819834e9296fddfd69e794f30252530814c5007b4fdb29397452b1a88ab006ae1f1332d9713f046cc7c9d0472d09e849fe4e4ccdd91c08d5ba000d194a4581b05f1aaabdc9eab5372edbd87ca95ebca6c8e520e0907b7b58b7650083396"], 0x24}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xc, 0x20010, r5, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) syz_io_uring_submit(r1, r7, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x8, &(0x7f0000000040), 0x1, 0x1, 0x0, {0x0, r3}}, 0x1) r8 = open(&(0x7f0000000200)='./file0\x00', 0x280, 0x100) io_uring_enter(r8, 0x3e0e, 0xc047, 0x2, &(0x7f0000000240)={[0xac0e]}, 0x8) r9 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r9, 0x0, 0x0}, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r10, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 2790.591454] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=12960 comm=syz-executor.2 [ 2790.601335] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2790.624410] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2790.638872] FAULT_INJECTION: forcing a failure. [ 2790.638872] name failslab, interval 1, probability 0, space 0, times 0 [ 2790.640941] CPU: 0 PID: 12963 Comm: syz-executor.6 Not tainted 5.10.216 #1 [ 2790.642003] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2790.643279] Call Trace: [ 2790.643699] dump_stack+0x107/0x167 [ 2790.644270] should_fail.cold+0x5/0xa [ 2790.644880] ? __d_alloc+0x2a/0x990 [ 2790.645461] should_failslab+0x5/0x20 [ 2790.646055] kmem_cache_alloc+0x5b/0x310 [ 2790.646695] __d_alloc+0x2a/0x990 [ 2790.647240] ? ktime_get_coarse_real_ts64+0x15a/0x190 [ 2790.648040] ? ktime_get_coarse_real_ts64+0xfd/0x190 [ 2790.648806] d_alloc_pseudo+0x19/0x70 [ 2790.649407] alloc_file_pseudo+0xce/0x250 [ 2790.650059] ? alloc_file+0x5a0/0x5a0 23:12:32 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0xfffff000, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) [ 2790.650660] ? do_raw_spin_unlock+0x4f/0x220 [ 2790.651502] ioctx_alloc+0x53f/0x1e60 [ 2790.652091] ? aio_poll_complete_work+0xa00/0xa00 [ 2790.652844] __x64_sys_io_setup+0xc4/0x1f0 [ 2790.653484] do_syscall_64+0x33/0x40 [ 2790.654046] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2790.654821] RIP: 0033:0x7f300c1a9b19 [ 2790.655378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2790.658085] RSP: 002b:00007f300971f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 2790.659229] RAX: ffffffffffffffda RBX: 00007f300c2bcf60 RCX: 00007f300c1a9b19 [ 2790.660358] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000002d47 [ 2790.661422] RBP: 00007f300971f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2790.662481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2790.663542] R13: 00007ffdcc09d2af R14: 00007f300971f300 R15: 0000000000022000 [ 2790.676634] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=12972 comm=syz-executor.2 [ 2790.715948] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 23:12:32 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r6 = io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r7 = dup(0xffffffffffffffff) ftruncate(r7, 0x0) sendfile(r7, r6, &(0x7f0000000340)=0x3f, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:12:32 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5801007a1a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:12:32 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5801000b1a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:12:32 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487f49f8000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0xf5d, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r4, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRES16=r2, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) 23:12:32 executing program 2: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 2790.935369] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 23:12:47 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487f49f8000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0xf5d, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r4, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB], 0x100}}, 0x0) unshare(0x48020200) 23:12:47 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58011fbf1a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:12:47 executing program 2: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x61fa, 0x24f4, 0x2, &(0x7f0000000040)={[0x7]}, 0x8) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x7, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x11, r6, 0x8000000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:12:47 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0xfffffffffffffe51}, {&(0x7f0000002a80)=""/102400}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x2e}, {&(0x7f00000002c0)=""/237}, {&(0x7f0000000100)=""/3, 0x37}], 0x7, 0x0) io_setup(0x2d47, &(0x7f0000000000)) (fail_nth: 18) 23:12:47 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000380), 0x723020, 0x0) sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="0fa45915381c4f81df", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0c0050800800030000000000"], 0x28}}, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x4, 0x2b}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x8c00}, 0x4000010) r4 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r7 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r7, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r8, r6, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[@ANYBLOB="5b1861210c000000", @ANYRES16=0x0, @ANYBLOB="100026bd7000fbdbdf253200000008000300", @ANYRES32=r10, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000000) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000480)={&(0x7f0000000400), 0xc, &(0x7f0000000440)={&(0x7f0000000700)={0x704, r1, 0x2, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x0, 0x4d}}}}, [@NL80211_ATTR_TX_RATES={0x1c8, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x100, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3a, 0x2, [{0x5, 0x3}, {0x0, 0x1}, {0x4, 0x5}, {0x1, 0x6}, {0x5, 0x3}, {0x0, 0x5}, {0x5, 0xa}, {0x6, 0xa}, {0x6, 0x2}, {0x4, 0x2}, {0x0, 0x9}, {0x1}, {0x0, 0x8}, {0x2, 0x8}, {0x5, 0xa}, {0x7, 0xa}, {0x0, 0xa}, {0x4, 0x2}, {0x0, 0x4}, {0x0, 0x4}, {0x4, 0x1}, {0x1, 0x5}, {0x4}, {0x4, 0x7}, {0x0, 0x8}, {0x1, 0x6}, {0x1, 0x6}, {0x4, 0x9}, {0x2}, {0x0, 0x4}, {0x2, 0x6}, {0x2, 0x7}, {0x5, 0x8}, {0x1, 0x3}, {0x1, 0x9}, {0x4, 0x4}, {0x1, 0x9}, {0x2, 0x9}, {0x3, 0x8}, {0x2, 0x6}, {0x6, 0xa}, {0x1}, {0x6}, {0x1, 0x8}, {0x2, 0xa}, {0x4, 0x3}, {0x0, 0x9}, {0x6}, {0x1, 0x4}, {0x7}, {0x4, 0x7}, {0x5, 0x1c}, {0x7, 0x8}, {0x5, 0x3}]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x36, 0x16, 0x3, 0x63, 0x4, 0x36, 0x3, 0x12, 0x16, 0x0, 0xf, 0x4, 0x6, 0x18, 0x24, 0x1, 0x12, 0x24]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x9, 0x0, 0x16, 0x30, 0x36, 0x9, 0xb, 0x30, 0x60, 0x1, 0x6c, 0x6, 0xc, 0x60, 0x5, 0x30, 0xc, 0x3, 0xc, 0x60, 0x60, 0x1, 0x24, 0x60, 0x12, 0x1, 0x36, 0x2]}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x1, 0x5}, {0x4}, {0x6, 0x9}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x2}, {0x4, 0x3}, {0x5}, {0x0, 0x2}, {0x1, 0x9}, {0x1, 0x4}, {0x3}, {0x7, 0x4}, {0x6, 0x1}, {0x4, 0x2}, {0x3, 0xa}, {0x1, 0x7}, {0x0, 0x5}, {0x0, 0x9}, {0x7, 0xa}, {0x1}, {0x6, 0xa}, {0x7, 0x4}, {0x4, 0x6}, {0x4, 0x4}, {0x0, 0x7}, {0x3, 0xa}, {0x1, 0x5}, {0x1, 0x5}, {0x6, 0x9}, {0x6, 0x9}, {0x5, 0x5}, {0x6, 0xa}, {0x3, 0x1}, {0x2, 0x4}, {0x0, 0x1}, {0x1, 0x3}, {0x6, 0x5}, {0x0, 0x1}, {0x4, 0x2}, {0x3, 0x6}, {0x4, 0xa}, {0x0, 0x5}, {0x6, 0x2}, {0x1, 0x2}, {0x4, 0x4}, {0x1, 0x3}, {0x1, 0x5}, {0x3, 0x6}, {0x5, 0x7}, {0x7, 0x9}, {0x7, 0xa}, {0x0, 0x3}, {0x4, 0x7}, {0x4, 0x7}, {0x4, 0x4}, {0x4, 0x8}, {0x0, 0x9}, {0x1, 0x1a}, {0x4}, {0x7, 0x5}, {0x1, 0x4}, {0x6, 0x5}, {0x5, 0x3}, {0x1}, {0x6, 0x1}, {0x1, 0x1}, {0x4, 0x5}, {0x6, 0x1}, {0x1, 0x6}, {0x6, 0x5}, {0x3, 0x2}, {0x6, 0x9}, {0x5, 0x5}]}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x1, 0x4}, {0x5, 0x9}, {0x4}, {0x1, 0x8}, {0x4, 0x5}, {0x6, 0x9}, {0x1, 0x5}, {0x4, 0x6}, {0x0, 0x8}, {0x7, 0x4}, {0x0, 0x2}, {}, {0x1, 0x5}, {0x6, 0x8}, {0x3, 0x9}, {0x3, 0x8}, {0x1, 0x5}, {0x1, 0x3}, {0x4, 0x6}, {0x5, 0x3}, {0x5, 0x8}, {0x2, 0x5}, {0x5, 0x4}, {0x0, 0x8}, {0x5, 0x9}, {0x0, 0x9}, {0x3, 0x8}, {0x7, 0x5}, {0x2, 0x1}, {0x1, 0x5}, {0x6, 0x4}, {0x0, 0xa}, {0x0, 0x7}, {0x1}, {0x1, 0x3}, {0x4, 0x5}, {0x6, 0x5}, {0x4, 0xa}, {0x6, 0x6}, {0x0, 0x6}, {0x5, 0x5}, {0x6, 0x7}, {0x1, 0x1}, {0x0, 0x5}, {0x0, 0x8}, {0x0, 0x6}, {0x0, 0x4}, {0x7, 0xa}, {0x2, 0x4}]}]}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x6, 0x1}, {0x7}, {0x0, 0xa}, {0x0, 0x9}, {0x4, 0x2}, {0x1, 0xa}, {0x6, 0x1}, {0x3}, {0x5, 0x2}, {0x5, 0x5}, {0x3}, {0x1, 0x6}, {0x1, 0x6}, {0x7, 0x7}, {0x0, 0x6}, {0x1, 0xa}, {0x1}, {0x3, 0x8}, {0x2, 0xa}, {0x4, 0x6}, {0x2, 0x3}, {0x1, 0x5}, {0x4, 0xa}, {0x0, 0xa}, {0x5, 0x1}, {0x0, 0x3}, {0x2, 0xa}, {0x0, 0x9}, {0x0, 0x1}, {0x1}, {0x5}, {0x4, 0xa}, {0x2, 0x2}, {0x6, 0x8}, {0x7, 0x5}, {0x0, 0x1}, {0x3, 0x9}, {0x3, 0x5}, {0x5}, {0x1, 0x1}, {0x6, 0x6}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0x4}, {0x3, 0x1}, {0x0, 0x8}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x1a, 0x2, 0x6c, 0x60, 0x24, 0x30, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9c, 0xfffb, 0x7, 0x0, 0x2, 0x40, 0x3, 0x7]}}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x27, 0x2, [{0x7, 0x6}, {0x6, 0x1}, {0x7, 0xa}, {0x2}, {0x7, 0x6}, {0x6, 0x6}, {0x2, 0x7}, {0x0, 0x4}, {0x2, 0x8}, {0x7, 0x5}, {0x3, 0x8}, {0x6}, {0x2, 0x2}, {0x1}, {0x3, 0x8}, {0x3, 0x9}, {0x7, 0x1}, {0x4, 0x1}, {0x6, 0x8}, {0x5, 0x8}, {0x5, 0x8}, {0x3, 0x6}, {0x7, 0x5}, {0x6, 0x1}, {0x7, 0x4}, {0x3, 0xa}, {0x6, 0x7}, {0x7, 0x5}, {0x3, 0x3}, {0x2, 0x4}, {0x5, 0x4}, {0x2}, {0x1, 0x3}, {0x6}, {0x0, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x4, 0x9, 0x80, 0xf800, 0x5, 0x1, 0x6]}}]}]}, @NL80211_ATTR_TX_RATES={0xd0, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0x5, 0x30, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x9, 0x7f, 0x4, 0x0, 0x3, 0x1, 0x562]}}]}, @NL80211_BAND_2GHZ={0x84, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x0, 0x101, 0x0, 0x6, 0x6, 0x4, 0xa27]}}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x7, 0x1}, {0x6, 0x2}, {0x7, 0x1}, {0x3, 0x14}, {0x4, 0x2}, {0x7, 0x4}, {0x1, 0x3}, {0x4, 0x3}, {0x4}, {}, {0x6}, {0x2, 0x8}, {}, {0x7, 0x4}, {0x5, 0x8}, {0x0, 0x5}, {0x7, 0xa}, {0x7, 0x5}, {0x7, 0x6}, {0x5, 0x1}, {0x6, 0x9}, {0x6, 0x6}, {0x1}, {0x7, 0xa}, {}, {0x0, 0xa}, {0x2, 0x1}, {0x7}, {0x1, 0x9}, {0x7, 0x9}, {0x2, 0xa}, {0x5, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x60, 0xb, 0x6c, 0x60, 0x1b, 0xb, 0x48, 0x4, 0x2, 0x3, 0x16, 0x6, 0x48, 0x18, 0x16, 0x2, 0x48, 0x6, 0x2, 0x0, 0x5, 0x5]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x3, 0x3}, {0x3, 0x7}, {0x1, 0x9}, {0x5, 0x4}, {0x0, 0x7}, {0x4, 0x5}, {0x3, 0x7}, {0x5, 0x4}, {}, {0x4}, {0x3, 0x8}, {0x4, 0x9}, {0x4, 0x9}, {0x1, 0x9}, {0x0, 0x2}, {0x3, 0x8}, {0x6, 0xa}, {0x0, 0x3}, {0x7, 0x6}, {0x3, 0x6}, {0x3, 0x7}]}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x23, 0x2, [{0x1, 0x9}, {0x1, 0x2}, {0x6, 0x4}, {0x1, 0x8}, {0x5, 0x1}, {0x6}, {0x2, 0x5}, {0x0, 0x6}, {0x0, 0x2}, {0x4, 0x1}, {0x3, 0xa}, {0x5, 0x9}, {0x1}, {0x4, 0x9}, {0x0, 0x4}, {0x7, 0xa}, {0x7, 0x7}, {0x1, 0x5}, {0x6}, {0x3, 0x2}, {0x0, 0x6}, {0x1, 0x4}, {0x1, 0x2}, {0x2, 0x6}, {0x7, 0x9}, {0x0, 0x3}, {0x0, 0x6}, {0x7, 0xa}, {0x0, 0x5}, {0x7, 0x6}, {0x5, 0x2}]}]}]}, @NL80211_ATTR_TX_RATES={0x4}, @NL80211_ATTR_TX_RATES={0x4}, @NL80211_ATTR_TX_RATES={0x14c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x90, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3b, 0x2, [{0x3, 0x4}, {0x2, 0x7}, {0x0, 0x5}, {0x1, 0x7}, {0x0, 0x1}, {0x4, 0x4}, {0x7, 0x6}, {0x0, 0x6}, {0x6, 0x6}, {0x7, 0x7}, {0x6, 0x7}, {0x6, 0x8}, {0x6, 0x9}, {0x5, 0xa}, {0x0, 0x9}, {0x1, 0x6}, {0x0, 0x4}, {0x0, 0x1}, {0x7, 0x2}, {0x2, 0x3}, {0x4, 0x4}, {0x4, 0x2}, {0x5, 0x9}, {0x3, 0x2}, {0x0, 0x3}, {0x0, 0x7}, {0x0, 0x1}, {0x7, 0xa}, {0x3, 0x1}, {0x3, 0x6}, {0x6, 0xa}, {0x3, 0x1}, {0x0, 0x6}, {0x0, 0x3}, {0x2, 0xa}, {0x5, 0x2}, {0x2, 0x7}, {0x5, 0x6}, {0x4, 0x8}, {0x4, 0x9}, {0x5, 0x3}, {0x0, 0x1}, {0x4, 0x7}, {0x0, 0x2}, {0x0, 0x3}, {0x7, 0x8}, {0x1, 0x2}, {0x2, 0x9}, {0x3, 0xa}, {0x0, 0xa}, {0x1, 0x1}, {0x4, 0x5}, {0x1, 0x9}, {0x2, 0x3}, {0x1, 0x9}]}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x6, 0x8}, {0x7, 0x7}, {0x0, 0x1}, {0x4, 0x5}, {0x4, 0x3}, {0x3, 0x7}, {0x1, 0x2}, {0x6, 0x3}, {0x4, 0x7}, {0x2, 0x8}, {0x7, 0x1}, {0x1, 0x7}, {0x0, 0x3}, {0x1, 0x2}, {0x3}, {0x5, 0x4}, {0x1, 0x9}, {0x1}, {0x1}, {0x3, 0x6}, {0x0, 0x2}, {0x4, 0x7}, {0x0, 0x9}, {0x1, 0xa}, {0x0, 0x7}, {0x3, 0x4}, {0x1, 0x8}, {0x6, 0x9}, {0x6, 0x2}, {0x4, 0x8}, {0x7, 0x6}, {0x1, 0x8}, {0x6, 0x7}, {0x0, 0x9}, {0x7, 0x1}, {0x1}, {0x0, 0x2}, {0x1, 0x7}, {0x2, 0x1}, {0x1, 0x7}, {0x1, 0x3}, {0x0, 0x5}, {0x0, 0x1}, {0x1, 0x9}, {0x7, 0x3}, {0x5, 0x7}, {0x4, 0x4}, {0x1, 0x8}, {0x1, 0x3}, {0x7, 0x3}, {0x3, 0xa}, {0x5, 0x7}, {0x0, 0x5}, {0x0, 0x4}, {0x5, 0x2}, {0x6, 0x3}, {0x5, 0x1}, {0x2, 0x5}, {0x0, 0x1}, {0x4, 0x2}, {0x4, 0x7}, {0x7, 0x7}, {0x0, 0x4}, {0x1, 0x9}, {0x3, 0x7}, {0x6, 0x7}, {0x1, 0x8}, {0x1, 0x6}, {0x0, 0x7}, {0x1, 0x6}, {0x2, 0x3}, {0x7}, {0x1}, {0x6, 0x9}, {0x5, 0x9}]}]}, @NL80211_BAND_6GHZ={0x88, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x30, 0x4, 0x1b, 0x36, 0x60, 0x60, 0x24, 0x5, 0x2, 0x60]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x3, 0x36, 0x24, 0x2, 0x6c, 0xb, 0xb, 0xc, 0x1, 0x24, 0x6c, 0x7e, 0x1b, 0x48, 0x5, 0x1, 0x18, 0x74d4528e0322d1ee, 0x12]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x7, 0x2, 0x200, 0x0, 0x40, 0x20, 0x9]}}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x0, 0x7}, {0x0, 0x1}, {0x3, 0x4}, {0x7, 0x7}, {0x3, 0x1}, {0x4, 0x5}, {0x0, 0x7}, {0x7, 0x3}, {0x7, 0x5}, {0x6, 0xa}, {0x2, 0xa}, {0x0, 0x2}, {0x7, 0x1}, {0x4, 0xa}, {0x1, 0x2}, {0x1, 0x8}, {0x1}, {0x0, 0x6}, {0x2, 0x1}, {0x0, 0x4}, {0x6, 0x1}, {0x2, 0x7}, {0x1, 0x6}, {0x4, 0x3}, {0x4, 0x1}, {0x5, 0x3}, {0x1}, {0x4, 0x5}, {0x6, 0x3}, {0x5, 0x3}, {0x3, 0x8}, {0x5}, {0x0, 0xa}, {0x7, 0x1}, {0x5, 0x5}, {0x4, 0x5}, {0x3, 0x2}, {0x6, 0x2}, {0x0, 0x2}, {0x1, 0x4}, {0x1, 0x7}, {0x2}, {0x0, 0x3}, {0x7, 0x9}, {0x5, 0x7}, {0x7, 0x4}, {0x2, 0x5}, {0x0, 0x5}, {0x4, 0x3}, {0x0, 0x3}, {0x4, 0x4}, {0x0, 0x1}]}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x8, 0x1, [0x16, 0x2, 0x16, 0x12]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x1b, 0x4, 0x9, 0x6c, 0x2, 0x30, 0x48, 0x36, 0x1b, 0x2, 0x1, 0x3, 0xb, 0x18, 0x0, 0x16, 0x6, 0x60, 0x4, 0x48, 0xb]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0xfc, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x30, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x16, 0x36, 0x9, 0x0, 0x24, 0xb, 0x18, 0x4, 0x60, 0x48, 0x1b, 0x30, 0x36, 0x30, 0x18, 0x5, 0x2]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x4, 0x4, 0x78, 0x20, 0x4, 0x1000, 0x80]}}]}, @NL80211_BAND_2GHZ={0xc8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x6c, 0x12, 0xb, 0x6, 0x12, 0x9, 0x2, 0x5, 0x30, 0x2, 0x1, 0x6c, 0x4, 0x5, 0x48, 0x18, 0x5, 0x18, 0x30, 0x4, 0x24, 0xb, 0x4, 0x12, 0x36, 0x3, 0x1]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x3, 0x24, 0x9, 0x60, 0x30, 0x30, 0xc, 0x9, 0x12, 0x16, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3f, 0x4, 0x0, 0x5, 0x8001, 0x5, 0x8, 0x8000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3f, 0x4, 0x2, 0x9, 0x4, 0x0, 0x0, 0x7f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x2, 0x100, 0x0, 0x0, 0x6, 0x81, 0xfff]}}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x4, 0x9}, {0x3, 0x4}, {0x4, 0x4}, {0x7, 0x3}, {0x0, 0x5}, {0x3, 0x6}, {0x5, 0x8}, {0x7, 0x4}, {0x0, 0x4}, {0x1}, {0x4, 0x7}, {0x6}, {0x3}, {0x7, 0x2}, {0x0, 0xa}, {0x0, 0x5}, {0x2, 0x6}, {0x6, 0xa}]}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x3, 0xa}, {0x2, 0x8}, {0x7, 0x7}, {0x1, 0xa}, {0x0, 0x7}, {0x7, 0x4}, {0x1, 0x5}, {0x0, 0x1}, {0x1, 0x2}, {0x3, 0x5}, {0x6, 0x8}, {0x6, 0x8}, {}, {0x4, 0x3}, {0x2, 0x5}, {0x4, 0x6}, {0x1}, {0x4, 0x7}, {0x2, 0x9}, {0x6}, {0x6, 0x2}, {0x5, 0x4}, {0x4, 0x5}, {0x3, 0xa}, {0x0, 0x7}, {0x6, 0x5}, {0x6, 0xa}, {0x1, 0x4}, {0x4, 0x3}, {0x3}, {0x4, 0x2}, {0x3, 0x6}, {0x0, 0x3}, {0x0, 0x6}, {0x5, 0x1}, {0x7, 0x4}, {0x6}, {0x7, 0x3}, {0x1, 0x7}, {0x4, 0x8}, {0x3, 0x4}, {0x5, 0x6}, {0x6, 0x9}, {0x3, 0x2}, {0x3, 0x9}, {0x0, 0x7}, {0x0, 0x7}, {}, {0x4, 0x3}, {0x3}, {0x3, 0x9}, {0x6, 0x8}, {0x3, 0x4}, {0x5, 0x1}, {0x2, 0x4}, {0x5, 0x6}, {0x6, 0xa}]}]}]}, @NL80211_ATTR_TX_RATES={0x1f4, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xf8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7fff, 0x6, 0xbc6, 0x2, 0x5, 0x0, 0xdb24]}}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x2, 0x8}, {0x4, 0x1}, {0x5, 0x3}, {0x0, 0x3}, {0x1, 0x7}, {0x7}, {0x3, 0x1}, {0x7}, {0x6, 0x9}, {0x0, 0x1}, {0x3, 0x4}, {0x0, 0x2}, {0x7, 0x2}, {0x2, 0x7}, {0x0, 0x6}, {0x5, 0x6}, {0x7, 0x8}, {0x5, 0xa}, {0x5, 0x1}, {0x2, 0xa}, {0x4, 0x6}, {0x2, 0xa}, {0x5, 0x6}, {0x3, 0x6}, {0x1}, {0x0, 0x6}, {0x5, 0x6}, {0x1, 0x3}, {0x0, 0x3}, {0x3, 0x5}, {0x1, 0x2}, {0x3, 0x8}, {0x1, 0x2}, {0x3, 0x4}, {0x1, 0xa}, {0x3, 0x7}, {0x5}, {0x6, 0x2}, {0x5}, {0x2, 0x2}, {0x3, 0x8}, {0x3, 0x2}, {0x2, 0x5}, {}, {0x1}, {0x7, 0x9}, {0x5, 0x5}, {0x1, 0x2}, {0x0, 0x4}, {0x4, 0x6}, {0x1, 0x1}, {0x1, 0x5}, {0x5, 0x5}, {0x4, 0x9}, {0x7, 0x1}, {0x5, 0x4}, {0x4, 0x4}, {0x7, 0x1}, {0x5, 0x7}, {0x4, 0x7}, {0x1, 0x6}, {0x2, 0x1}]}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x0, 0x4}, {0x1, 0x3}, {0x6, 0x9}, {0x0, 0x6}, {0x3, 0x8}, {0x4, 0x8}, {0x4, 0x1}, {0x3}, {0x0, 0x3}, {0x1, 0xa}, {0x2, 0xa}, {0x2, 0x8}, {0x3, 0x3}, {0x7, 0x2}, {0x0, 0x6}, {0x7, 0x8}, {0x1, 0x3}, {0x6, 0x2}, {0x7}]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x3, 0x24, 0x6, 0x6, 0x36, 0x5, 0xb, 0x3, 0x60, 0x18, 0x6, 0x24, 0x3, 0x4, 0x3, 0xb, 0x2, 0x3, 0x78, 0x60, 0x4, 0x4, 0x12, 0xc, 0x4]}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x3, 0x4}, {0x2, 0x4}, {0x6, 0x4}, {0x3, 0x5}, {0x1, 0x9}, {0x3, 0x9}, {0x5, 0x8}, {0x5, 0x7}, {0x7, 0x2}, {0x4, 0x4}]}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x6}, {0x0, 0x4}, {0x7, 0x2}, {0x6, 0x8}, {0x2, 0x8}, {0x0, 0x4}, {0x2, 0x6}, {0x5, 0xa}, {0x3, 0x6}, {0x2}, {0x2, 0x8}, {0x6, 0xe}, {0x1, 0x5}, {}, {0x7, 0x8}, {}, {0x2, 0x2}, {0x6, 0x5}, {0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x8001, 0x1f, 0xfffd, 0x7f, 0x40, 0x0, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x5, 0x6, 0x64f, 0x7, 0x4, 0x9, 0x280c]}}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x2, 0x5}, {0x2, 0x7}, {0x3, 0x4}, {0x7, 0x1}, {0x4, 0x5}, {0x1, 0x1}, {0x0, 0x2}, {0x2, 0x9}, {0x1, 0xa}, {0x4, 0x9}, {0x7, 0x6}, {0x0, 0x6}, {0x0, 0x7}]}]}, @NL80211_BAND_60GHZ={0xf8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x2fe, 0x0, 0x3ff, 0x4, 0x400, 0x200, 0x5a7b]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x1, 0x4, 0x6, 0xedb3, 0xffff, 0x1, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x2, 0x12, 0x6c, 0x48, 0x9, 0x36, 0x0, 0x60, 0x36, 0x30, 0x3, 0x36, 0xb]}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x4, 0x7}, {0x6, 0x3}, {0x2, 0x9}, {0x5, 0x8}, {0x7, 0xa}, {0x6, 0x3}, {0x3, 0x9}, {0x0, 0x8}, {0x1, 0x3}, {0x2, 0x4}, {0x1, 0x5}, {0x7, 0x8}, {0x6, 0x6}, {0x3, 0x2}, {0x2, 0x9}, {0x7}, {0x4, 0x5}, {0x0, 0x2}, {0x3, 0x7}, {0x7, 0x5}, {0x4, 0x8}, {0x1, 0xa}, {0x0, 0x3}, {0x1}, {0x2, 0x1c}, {0x0, 0x6}, {0x0, 0x3}, {0x1, 0x15}, {0x5, 0x8}, {0x3, 0x8}, {0x3, 0x2}, {0x0, 0x8}, {0x3}, {0x1, 0xd}, {0x3, 0x8}, {0x1, 0x9}, {0x7, 0xa}, {0x1, 0x3}, {0x4, 0x4}, {0x7, 0x2}, {0x2, 0x3}, {0x1}]}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x5, 0xa}, {0x2, 0x1}, {0x1, 0x3}, {0x1, 0x1}, {0x0, 0x3}, {0x2, 0x7}, {0x5, 0x4}, {0x1, 0x2}, {0x5, 0x3}, {0x7, 0x1}, {0x0, 0x3}, {0x5, 0x2}, {0x1, 0x6}, {0x5, 0x8}, {0x1}, {0x1, 0x8}, {0x2, 0x9}, {0x0, 0x5}, {0x1, 0x3}, {0x1, 0x7}, {0x5, 0x5}, {0x0, 0x6}, {0x4, 0x4}, {0x6}, {0x4, 0x4}, {0x5, 0x7}, {0x0, 0x3}, {0x0, 0x4}, {0x1, 0x5}, {0x1, 0x7}, {0x5, 0x6}, {0x1, 0x7}, {0x1}, {0x0, 0x8}, {0x5, 0x8}, {0x2, 0x3}, {0x2, 0x3}, {0x1, 0xa}, {}, {0x2, 0x3}, {0x1, 0x5}, {0x4, 0x9}, {0x1, 0x1}, {0x7, 0x7}, {0x6, 0x2}, {0x2, 0x4}, {0x6, 0xa}, {0x1, 0x2}, {0x2, 0x4}, {0x5, 0x7}, {0x1, 0x7}, {0x4, 0x7}, {0x4, 0xa}, {0x1, 0x7}, {0x6, 0x4}, {0x6, 0x2}, {0x4, 0x2}, {0x0, 0x1}]}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x2, 0x7}, {0x1, 0x6}, {0x7, 0x4}]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0xb, 0x2, 0x4, 0x9, 0x36, 0x3, 0x9, 0x12, 0x24, 0x4, 0x60, 0x4, 0x16, 0x60, 0xc, 0x60, 0x9, 0x2, 0x1d, 0x12, 0x2e6c7c90a3343239, 0xc, 0x9, 0x5, 0x1, 0x2]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x1, 0x6c, 0x16, 0x12, 0x4, 0x3, 0x1b, 0x24, 0x16, 0x18, 0xc, 0x3, 0x48, 0x3, 0x6, 0x0, 0x24, 0x36, 0xb, 0x6c]}]}]}]}, 0x704}, 0x1, 0x0, 0x0, 0x40}, 0x4014) syz_io_uring_setup(0x5816, &(0x7f0000000280)={0x0, 0x84fa, 0x8, 0x0, 0x33d, 0x0, r4}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000300), &(0x7f0000000340)) io_uring_enter(r4, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:12:47 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0xffffff7f, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 23:12:47 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5801000f1a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:12:47 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x805}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = dup(0xffffffffffffffff) ftruncate(r5, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r5, 0x21ad, 0x7a31, 0x3, &(0x7f0000000040)={[0x400]}, 0x8) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 2805.811407] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2805.837403] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 23:12:47 executing program 2: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000001c0)) [ 2805.878824] FAULT_INJECTION: forcing a failure. [ 2805.878824] name failslab, interval 1, probability 0, space 0, times 0 [ 2805.880918] CPU: 0 PID: 13012 Comm: syz-executor.6 Not tainted 5.10.216 #1 [ 2805.882019] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2805.883234] Call Trace: [ 2805.883641] dump_stack+0x107/0x167 [ 2805.884190] should_fail.cold+0x5/0xa [ 2805.884755] ? create_object.isra.0+0x3a/0xa20 [ 2805.885454] should_failslab+0x5/0x20 [ 2805.886020] kmem_cache_alloc+0x5b/0x310 [ 2805.886643] create_object.isra.0+0x3a/0xa20 [ 2805.887294] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2805.888056] kmem_cache_alloc+0x159/0x310 [ 2805.888683] __d_alloc+0x2a/0x990 [ 2805.889212] ? ktime_get_coarse_real_ts64+0x15a/0x190 [ 2805.889977] ? ktime_get_coarse_real_ts64+0xfd/0x190 [ 2805.890736] d_alloc_pseudo+0x19/0x70 [ 2805.891301] alloc_file_pseudo+0xce/0x250 [ 2805.891912] ? alloc_file+0x5a0/0x5a0 [ 2805.892481] ? do_raw_spin_unlock+0x4f/0x220 [ 2805.893153] ioctx_alloc+0x53f/0x1e60 [ 2805.893736] ? aio_poll_complete_work+0xa00/0xa00 [ 2805.894460] __x64_sys_io_setup+0xc4/0x1f0 [ 2805.895092] do_syscall_64+0x33/0x40 [ 2805.895644] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2805.896401] RIP: 0033:0x7f300c1a9b19 [ 2805.896957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2805.899644] RSP: 002b:00007f300971f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 2805.900763] RAX: ffffffffffffffda RBX: 00007f300c2bcf60 RCX: 00007f300c1a9b19 [ 2805.901815] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000002d47 [ 2805.902851] RBP: 00007f300971f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2805.903901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2805.904947] R13: 00007ffdcc09d2af R14: 00007f300971f300 R15: 0000000000022000 23:12:47 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0xffffff9e, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 23:12:47 executing program 7: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:12:47 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100101a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:12:47 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100f01a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:12:47 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = dup(0xffffffffffffffff) ftruncate(r5, 0x66c) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:12:47 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0xfffffffffffffe51}, {&(0x7f0000002a80)=""/102400}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x2e}, {&(0x7f00000002c0)=""/237}, {&(0x7f0000000100)=""/3, 0x37}], 0x7, 0x0) io_setup(0x2d47, &(0x7f0000000000)) (fail_nth: 19) 23:12:47 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487f49f8000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0xf5d, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r4, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB], 0x100}}, 0x0) unshare(0x48020200) [ 2806.078622] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2806.090380] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2806.157944] FAULT_INJECTION: forcing a failure. [ 2806.157944] name failslab, interval 1, probability 0, space 0, times 0 [ 2806.159243] CPU: 1 PID: 13038 Comm: syz-executor.6 Not tainted 5.10.216 #1 [ 2806.159873] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2806.160790] Call Trace: [ 2806.161107] dump_stack+0x107/0x167 [ 2806.161404] should_fail.cold+0x5/0xa [ 2806.161711] ? __alloc_file+0x21/0x320 [ 2806.162171] should_failslab+0x5/0x20 [ 2806.162471] kmem_cache_alloc+0x5b/0x310 [ 2806.162911] __alloc_file+0x21/0x320 [ 2806.163343] alloc_empty_file+0x6d/0x170 [ 2806.163731] alloc_file+0x5e/0x5a0 [ 2806.164006] alloc_file_pseudo+0x16a/0x250 [ 2806.164353] ? alloc_file+0x5a0/0x5a0 [ 2806.164787] ? do_raw_spin_unlock+0x4f/0x220 [ 2806.165140] ioctx_alloc+0x53f/0x1e60 [ 2806.165571] ? aio_poll_complete_work+0xa00/0xa00 [ 2806.166154] __x64_sys_io_setup+0xc4/0x1f0 [ 2806.166496] do_syscall_64+0x33/0x40 [ 2806.166804] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2806.167347] RIP: 0033:0x7f300c1a9b19 [ 2806.167634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2806.169441] RSP: 002b:00007f300971f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 2806.170016] RAX: ffffffffffffffda RBX: 00007f300c2bcf60 RCX: 00007f300c1a9b19 [ 2806.170610] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000002d47 [ 2806.171299] RBP: 00007f300971f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2806.172058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2806.172732] R13: 00007ffdcc09d2af R14: 00007f300971f300 R15: 0000000000022000 23:12:48 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100111a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:12:48 executing program 7: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x100010, r0, 0x8000000) syz_io_uring_submit(r4, r2, &(0x7f0000000040)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) perf_event_open(&(0x7f0000001d80)={0x4, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x6}}, 0x0, 0xfffffffbffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r5, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 2806.201505] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 23:13:02 executing program 2: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x5, 0x0, 0x0) syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) syz_io_uring_submit(r4, r6, &(0x7f0000000240)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0x4, 0x7, 0x0, 0x7, 0x1, 0x1}, 0x748c) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) sendmsg$nl_generic(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001800210c000000000000000002000000080000000000000008000700", @ANYRES32=0xee01, @ANYBLOB="1212c9690075512952b93c8f94de51bf1d9199256ebe58c1fcbf761fe808000000bc57dba537fd4986b793bf9ba745f2889a2f354d6635b903aa9f19f83169294a4bc670735f6e53595c36452269ef0023c7955d757c2c1d89cdec972ee3bdea3ba33fe078468a3aca9bfea6"], 0x24}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r8, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) sendto$packet(r9, &(0x7f00000001c0)="93027480d98c", 0x6, 0x20040000, &(0x7f0000000200)={0x11, 0x19, 0x0, 0x1, 0x4, 0x6, @remote}, 0x14) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:13:02 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100000f0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:13:02 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487f49f8000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0xf5d, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r4, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRES16=r2, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) 23:13:02 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487f49f8000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0xf5d, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r4, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB], 0x100}}, 0x0) unshare(0x48020200) 23:13:02 executing program 3: syz_usb_connect$uac1(0x3, 0xea, &(0x7f0000000380)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd8, 0x3, 0x1, 0x80, 0x30, 0xff, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x81, 0xff}, [@processing_unit={0x8, 0x24, 0x7, 0x5, 0x1, 0x0, "8e"}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x203, 0x2, 0x2, 0x776, 0x46, 0x2}, @extension_unit={0xb, 0x24, 0x8, 0x5, 0x7fff, 0x80, "5ead9795"}, @extension_unit={0x8, 0x24, 0x8, 0x6, 0x2, 0x74, "98"}, @processing_unit={0xc, 0x24, 0x7, 0x1, 0x2, 0x79, "97d662656b"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x7fff, 0x8, 0x5, "ac4abbf2b006083080"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0xcf, 0x3, 0x1f, 0x10, "efdd422325da"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3f7, 0x5, 0x7, 0x80, {0x7, 0x25, 0x1, 0x80, 0x9, 0xfbae}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x3, 0x1, 0x40, "cd63"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x40, 0x4, 0x9, 0x0, "9c", "ee"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x5, 0x3, 0x40, "f7ab3efe9a2ae807"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x1, 0x3, 0xe1, {0x7, 0x25, 0x1, 0x1, 0x0, 0x6}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x201, 0x2, 0x50, 0x3, 0x10, 0x7}, 0x3c, &(0x7f0000000480)={0x5, 0xf, 0x3c, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x3, 0x7, 0x1}, @wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x8, 0x4, 0x1, 0x5}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "b9810b37867c407d9695f12b3198d633"}, @wireless={0xb, 0x10, 0x1, 0x0, 0x8, 0x1f, 0xf7, 0x1f, 0x81}]}, 0x1, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x201d}}]}) r0 = getpgid(0x0) sched_getaffinity(r0, 0x8, &(0x7f0000000080)) setpgid(r0, 0xffffffffffffffff) r1 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r4 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = dup(0xffffffffffffffff) ftruncate(r6, 0x0) sendfile(r6, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) r7 = accept4$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x29, 0x8, 0x7f, 0x8000, 0x54, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, 0x80, 0x1, 0xff, 0x1}}) bind$packet(r7, &(0x7f00000002c0)={0x11, 0x18, r8, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, 0x14) io_uring_enter(r1, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:13:02 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100481a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:13:02 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0xfffffffffffffe51}, {&(0x7f0000002a80)=""/102400}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x2e}, {&(0x7f00000002c0)=""/237}, {&(0x7f0000000100)=""/3, 0x37}], 0x7, 0x0) io_setup(0x2d47, &(0x7f0000000000)) (fail_nth: 20) 23:13:02 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0xfffffff0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) [ 2820.201312] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=15 sclass=netlink_xfrm_socket pid=13061 comm=syz-executor.1 [ 2820.209978] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2820.212279] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2820.212742] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2820.222680] FAULT_INJECTION: forcing a failure. [ 2820.222680] name failslab, interval 1, probability 0, space 0, times 0 [ 2820.223913] CPU: 1 PID: 13067 Comm: syz-executor.6 Not tainted 5.10.216 #1 [ 2820.224587] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2820.225415] Call Trace: [ 2820.225704] dump_stack+0x107/0x167 [ 2820.226201] should_fail.cold+0x5/0xa [ 2820.226578] ? create_object.isra.0+0x3a/0xa20 [ 2820.227026] should_failslab+0x5/0x20 [ 2820.227400] kmem_cache_alloc+0x5b/0x310 [ 2820.227800] create_object.isra.0+0x3a/0xa20 [ 2820.228230] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2820.228730] kmem_cache_alloc+0x159/0x310 [ 2820.229155] __alloc_file+0x21/0x320 [ 2820.229530] alloc_empty_file+0x6d/0x170 [ 2820.229930] alloc_file+0x5e/0x5a0 [ 2820.230280] alloc_file_pseudo+0x16a/0x250 [ 2820.230691] ? alloc_file+0x5a0/0x5a0 [ 2820.231048] ? do_raw_spin_unlock+0x4f/0x220 [ 2820.231487] ioctx_alloc+0x53f/0x1e60 [ 2820.231870] ? aio_poll_complete_work+0xa00/0xa00 [ 2820.232345] __x64_sys_io_setup+0xc4/0x1f0 [ 2820.232756] do_syscall_64+0x33/0x40 [ 2820.233120] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2820.233637] RIP: 0033:0x7f300c1a9b19 [ 2820.234008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2820.235640] RSP: 002b:00007f300971f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 2820.236391] RAX: ffffffffffffffda RBX: 00007f300c2bcf60 RCX: 00007f300c1a9b19 [ 2820.237047] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000002d47 [ 2820.237749] RBP: 00007f300971f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2820.238387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2820.239078] R13: 00007ffdcc09d2af R14: 00007f300971f300 R15: 0000000000022000 [ 2820.245163] udc-core: couldn't find an available UDC or it's busy [ 2820.246401] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 2820.258994] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. 23:13:02 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58010000110001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:13:02 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5801004c1a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:13:02 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0xffffffff, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) [ 2820.361442] netlink: 304 bytes leftover after parsing attributes in process `syz-executor.1'. 23:13:02 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487f49f8000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0xf5d, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r4, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x0) 23:13:02 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58010000120001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:13:02 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0xfffffffffffffe51}, {&(0x7f0000002a80)=""/102400}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x2e}, {&(0x7f00000002c0)=""/237}, {&(0x7f0000000100)=""/3, 0x37}], 0x7, 0x0) io_setup(0x2d47, &(0x7f0000000000)) (fail_nth: 21) 23:13:02 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58010000160001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:13:02 executing program 2: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x24000000}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x10, r0, 0x8000000) r6 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) preadv2(r3, &(0x7f0000000480)=[{&(0x7f0000000340)=""/75, 0x4b}, {&(0x7f00000001c0)}, {&(0x7f0000000240)=""/43, 0x2b}, {&(0x7f00000003c0)=""/151, 0x97}], 0x4, 0x80, 0x7fffffff, 0x8) dup2(r6, r9) sendmsg$nl_generic(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x7, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r8, &(0x7f0000000040)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r10, 0x0, 0x0, 0x8001, 0x2, 0x0, {0x0, r11}}, 0x1000) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x101) syz_io_uring_submit(r4, r2, &(0x7f00000001c0)=@IORING_OP_FADVISE={0x18, 0x4, 0x0, @fd=r10, 0x100000000, 0x0, 0xfffffffc, 0x1, 0x1}, 0x23) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 2820.512480] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2820.577310] FAULT_INJECTION: forcing a failure. [ 2820.577310] name failslab, interval 1, probability 0, space 0, times 0 [ 2820.579502] CPU: 0 PID: 13084 Comm: syz-executor.6 Not tainted 5.10.216 #1 [ 2820.580659] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2820.581949] Call Trace: [ 2820.582377] dump_stack+0x107/0x167 [ 2820.582948] should_fail.cold+0x5/0xa [ 2820.583545] ? security_file_alloc+0x34/0x170 [ 2820.584251] should_failslab+0x5/0x20 [ 2820.584845] kmem_cache_alloc+0x5b/0x310 [ 2820.585488] security_file_alloc+0x34/0x170 [ 2820.586165] __alloc_file+0xb7/0x320 [ 2820.586742] alloc_empty_file+0x6d/0x170 [ 2820.587372] alloc_file+0x5e/0x5a0 [ 2820.587924] alloc_file_pseudo+0x16a/0x250 [ 2820.588579] ? alloc_file+0x5a0/0x5a0 [ 2820.589188] ? do_raw_spin_unlock+0x4f/0x220 [ 2820.589892] ioctx_alloc+0x53f/0x1e60 [ 2820.590505] ? aio_poll_complete_work+0xa00/0xa00 [ 2820.591267] __x64_sys_io_setup+0xc4/0x1f0 [ 2820.591931] do_syscall_64+0x33/0x40 [ 2820.592511] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2820.593312] RIP: 0033:0x7f300c1a9b19 [ 2820.593901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2820.596744] RSP: 002b:00007f300971f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 2820.597932] RAX: ffffffffffffffda RBX: 00007f300c2bcf60 RCX: 00007f300c1a9b19 [ 2820.599034] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000002d47 [ 2820.600142] RBP: 00007f300971f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2820.601256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2820.602360] R13: 00007ffdcc09d2af R14: 00007f300971f300 R15: 0000000000022000 [ 2820.612857] netlink: 304 bytes leftover after parsing attributes in process `syz-executor.1'. 23:13:02 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100681a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) [ 2820.616702] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.7'. [ 2820.622830] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2820.655715] netlink: 304 bytes leftover after parsing attributes in process `syz-executor.1'. 23:13:02 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58010000130001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) [ 2820.859697] udc-core: couldn't find an available UDC or it's busy [ 2820.860271] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 23:13:16 executing program 7: ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x30f5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x14f}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x2a}, 0x7}) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x7, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x10, r6, 0x8000000) r7 = fcntl$dupfd(r4, 0x0, r4) sendmsg$nl_generic(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000001c80210c000000000000000002000000080040000000000008000700", @ANYRES32=0xee01, @ANYBLOB], 0x24}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r7, 0xc0189377, &(0x7f0000000300)=ANY=[@ANYBLOB="0118000000e8410fc4b949c31e741b5b15d855eccdb38e98946a52b88ac80bce943a50c82a7d71268582cb269fed000000334f815a059d20000000000000008a4937c9ceeb00"/84, @ANYRES32=r0, @ANYBLOB="020000003f0000002e2f66696c653000"]) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000) syz_io_uring_submit(r8, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001) io_uring_enter(r1, 0x6762, 0x0, 0x0, 0x0, 0x0) 23:13:16 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="0f0000001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 23:13:16 executing program 2: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x5, 0x0, 0x0) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x406340, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000300)='\x00', 0x0, r5) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, {0x0, r6}}, 0x101) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_ASYNC_CANCEL={0xe, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r6}}, 0x3ff) r7 = signalfd4(r5, &(0x7f0000000200)={[0x453d]}, 0x8, 0x80800) openat(r7, &(0x7f0000000240)='./file0\x00', 0x200, 0x4) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r2, &(0x7f0000000280)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r8}}, 0x74c) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x2000}, 0x4) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:13:16 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487f49f8000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0xf5d, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r4, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x0) 23:13:16 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0xfffffffffffffe51}, {&(0x7f0000002a80)=""/102400}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x2e}, {&(0x7f00000002c0)=""/237}, {&(0x7f0000000100)=""/3, 0x37}], 0x7, 0x0) io_setup(0x2d47, &(0x7f0000000000)) (fail_nth: 22) 23:13:16 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58010000140001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:13:16 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5801006c1a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:13:16 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x0, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r5 = io_uring_setup(0x5204, &(0x7f0000000100)) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000007, 0x40010, r5, 0x10000000) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r6, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x3, 0x0, 0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x20, 0x4000, 0x0, {0x0, r7}}, 0xffffffc1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {r3}}, './file0\x00'}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0xa, 0x0, r7) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) sendmsg$nl_generic(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001800210c000000000000000002000000080000000000000008000700", @ANYRES32=0xee01, @ANYBLOB="99020391fd0a8ab3ddb5dce853a90c53f23c1b9d3eba14a64bd5366f5cfd05bf2409b4abd6cc4f3a9b1e99f5873e40e4d4b0a3cb2d6841fdcc39443a154321b8c5fc2eb87b227ac7d758534d41644599a1a8749d039e4cc0b73532f4740626178463993e59936bd3bbb9e9c9502db8a5f8e591"], 0x24}}, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff5dd, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0x10, r10, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r11 = dup(0xffffffffffffffff) ftruncate(r11, 0x0) sendfile(r11, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 2834.793263] __nla_validate_parse: 2 callbacks suppressed [ 2834.793275] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2834.806338] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2834.815519] FAULT_INJECTION: forcing a failure. [ 2834.815519] name failslab, interval 1, probability 0, space 0, times 0 [ 2834.817439] CPU: 0 PID: 13119 Comm: syz-executor.6 Not tainted 5.10.216 #1 [ 2834.818467] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2834.819694] Call Trace: [ 2834.820098] dump_stack+0x107/0x167 [ 2834.820656] should_fail.cold+0x5/0xa [ 2834.821240] ? create_object.isra.0+0x3a/0xa20 [ 2834.821927] should_failslab+0x5/0x20 [ 2834.822509] kmem_cache_alloc+0x5b/0x310 [ 2834.823117] ? percpu_ref_put_many.constprop.0+0x4e/0x110 [ 2834.823934] create_object.isra.0+0x3a/0xa20 [ 2834.824593] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2834.825374] kmem_cache_alloc+0x159/0x310 [ 2834.826012] security_file_alloc+0x34/0x170 [ 2834.826667] __alloc_file+0xb7/0x320 [ 2834.827225] alloc_empty_file+0x6d/0x170 [ 2834.827833] alloc_file+0x5e/0x5a0 [ 2834.827854] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32796 sclass=netlink_route_socket pid=13117 comm=syz-executor.7 [ 2834.830147] alloc_file_pseudo+0x16a/0x250 [ 2834.830767] ? alloc_file+0x5a0/0x5a0 [ 2834.831347] ? do_raw_spin_unlock+0x4f/0x220 [ 2834.832008] ioctx_alloc+0x53f/0x1e60 [ 2834.832598] ? aio_poll_complete_work+0xa00/0xa00 [ 2834.833335] __x64_sys_io_setup+0xc4/0x1f0 [ 2834.833976] do_syscall_64+0x33/0x40 [ 2834.834544] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2834.835300] RIP: 0033:0x7f300c1a9b19 [ 2834.835855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2834.838585] RSP: 002b:00007f300971f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 2834.839715] RAX: ffffffffffffffda RBX: 00007f300c2bcf60 RCX: 00007f300c1a9b19 [ 2834.840768] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000002d47 [ 2834.841831] RBP: 00007f300971f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2834.842894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2834.843947] R13: 00007ffdcc09d2af R14: 00007f300971f300 R15: 0000000000022000 23:13:16 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0xfffffffffffffe51}, {&(0x7f0000002a80)=""/102400}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x2e}, {&(0x7f00000002c0)=""/237}, {&(0x7f0000000100)=""/3, 0x37}], 0x7, 0x0) io_setup(0x2d47, &(0x7f0000000000)) (fail_nth: 23) 23:13:16 executing program 3: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r0 = syz_io_uring_setup(0x62bd, &(0x7f0000000080)={0x0, 0x1, 0x7327889234284d4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r5 = io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r5, 0x93c, 0xb59b, 0x0, &(0x7f00000001c0)={[0x8001]}, 0x8) r6 = dup(0xffffffffffffffff) ftruncate(r6, 0x0) sendfile(r6, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:13:16 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100741a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:13:16 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="f00000001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 23:13:16 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58010000150001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:13:16 executing program 2: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x87, 0x6000}, 0x3) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000300), 0x70140, 0x0) lseek(r5, 0x80, 0x1) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:13:16 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487f49f8000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0xf5d, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r4, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x0) [ 2835.034914] FAULT_INJECTION: forcing a failure. [ 2835.034914] name failslab, interval 1, probability 0, space 0, times 0 [ 2835.037281] CPU: 1 PID: 13135 Comm: syz-executor.6 Not tainted 5.10.216 #1 [ 2835.038313] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2835.039804] Call Trace: [ 2835.040256] dump_stack+0x107/0x167 [ 2835.040783] should_fail.cold+0x5/0xa [ 2835.041375] ? ioctx_alloc+0x1344/0x1e60 [ 2835.042052] should_failslab+0x5/0x20 [ 2835.042804] __kmalloc+0x72/0x390 [ 2835.043400] ioctx_alloc+0x1344/0x1e60 [ 2835.043976] ? aio_poll_complete_work+0xa00/0xa00 [ 2835.044698] __x64_sys_io_setup+0xc4/0x1f0 [ 2835.045429] do_syscall_64+0x33/0x40 [ 2835.045970] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2835.046873] RIP: 0033:0x7f300c1a9b19 [ 2835.047581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2835.050202] RSP: 002b:00007f300971f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 2835.051288] RAX: ffffffffffffffda RBX: 00007f300c2bcf60 RCX: 00007f300c1a9b19 [ 2835.052307] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000002d47 [ 2835.053323] RBP: 00007f300971f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2835.054354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2835.055371] R13: 00007ffdcc09d2af R14: 00007f300971f300 R15: 0000000000022000 [ 2835.100399] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2835.160328] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.1'. 23:13:17 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = dup(0xffffffffffffffff) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) sendmsg$nl_generic(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x7, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x100010, r7, 0x0) ftruncate(r5, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 2835.197675] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2835.624121] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32796 sclass=netlink_route_socket pid=13165 comm=syz-executor.7 23:13:33 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="070100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 23:13:33 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0xfffffffffffffe51}, {&(0x7f0000002a80)=""/102400}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x2e}, {&(0x7f00000002c0)=""/237}, {&(0x7f0000000100)=""/3, 0x37}], 0x7, 0x0) io_setup(0x2d47, &(0x7f0000000000)) (fail_nth: 24) 23:13:33 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000240)=@md0, &(0x7f0000000340)='./file0\x00', &(0x7f00000003c0)='iso9660\x00', 0x2030000, &(0x7f0000000400)='\x00') perf_event_open(&(0x7f0000001d80)={0x3, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000004c0)=[0x0, &(0x7f0000000440)='-!*-\'\x00', &(0x7f0000000480)=',+-\x00'], &(0x7f00000005c0)=[&(0x7f0000000500)='/dev/snd/timer\x00', &(0x7f0000000540)='-:\x00', &(0x7f0000000580)='/dev/snd/timer\x00'], 0x1000) r0 = epoll_create(0x8000) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_READ=@pass_buffer={0x16, 0x1, 0x0, @fd=r0, 0x9, &(0x7f0000000140)=""/26, 0x1a, 0x4, 0x1}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x1}, 0x8) mount$9p_unix(&(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x1001000, &(0x7f0000000680)=ANY=[@ANYBLOB="9c45cb289520a000000000000003ff4477258c59b47e45f5af7c6cc58be2912302a30a941821400c62f07f0d7da90830e4106ca54d64133ef17d282b6c60cfc0d7e9809d843becbf9f45447d1d03292cc66d4f40da3d4f18f164c340d9f2e3cb1be7a1e79c"]) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x20, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000180)=@sco={0x1f, @none}}, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000200)={0x11}) 23:13:33 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5801007a1a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:13:33 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x1, &(0x7f0000000040)={0x77359400}, 0x1, 0x1}, 0x80000001) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = dup(0xffffffffffffffff) ftruncate(r5, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:13:33 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58010000160001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:13:33 executing program 2: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\b\x00\a\x00'/32, @ANYRES32=0xee01, @ANYBLOB], 0x24}}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000002, 0x810, r5, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:13:33 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487f49f8000000"], 0x30}}, 0x0) (fail_nth: 1) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0xf5d, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r4, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) [ 2851.293441] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2851.325451] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.4'. [ 2851.336699] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2851.344931] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13182 comm=syz-executor.2 [ 2851.361107] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2851.368788] FAULT_INJECTION: forcing a failure. [ 2851.368788] name failslab, interval 1, probability 0, space 0, times 0 [ 2851.370928] CPU: 1 PID: 13179 Comm: syz-executor.6 Not tainted 5.10.216 #1 [ 2851.371948] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2851.373121] Call Trace: [ 2851.373510] dump_stack+0x107/0x167 [ 2851.374050] should_fail.cold+0x5/0xa [ 2851.374608] ? create_object.isra.0+0x3a/0xa20 [ 2851.375272] should_failslab+0x5/0x20 [ 2851.375828] kmem_cache_alloc+0x5b/0x310 [ 2851.376434] create_object.isra.0+0x3a/0xa20 [ 2851.377070] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2851.377818] __kmalloc+0x16e/0x390 [ 2851.378340] ioctx_alloc+0x1344/0x1e60 [ 2851.378922] ? aio_poll_complete_work+0xa00/0xa00 [ 2851.379631] __x64_sys_io_setup+0xc4/0x1f0 [ 2851.380242] do_syscall_64+0x33/0x40 [ 2851.380785] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2851.381519] RIP: 0033:0x7f300c1a9b19 [ 2851.382071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2851.384677] RSP: 002b:00007f300971f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 2851.385768] RAX: ffffffffffffffda RBX: 00007f300c2bcf60 RCX: 00007f300c1a9b19 [ 2851.386785] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000002d47 [ 2851.387800] RBP: 00007f300971f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2851.388942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2851.390198] R13: 00007ffdcc09d2af R14: 00007f300971f300 R15: 0000000000022000 23:13:33 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487f49f8000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0xf5d, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r4, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) [ 2851.425113] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13182 comm=syz-executor.2 23:13:33 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58010000280001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:13:33 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="600100001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 23:13:33 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58010000170001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) [ 2851.493562] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 23:13:33 executing program 2: mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x2000000000000000}, 0x11010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = pkey_alloc(0x0, 0x0) r1 = pkey_alloc(0x0, 0x5) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, r1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, r0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x3) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000004, 0xffffffffffffffff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x45800) readv(0xffffffffffffffff, &(0x7f0000000280), 0x0) pkey_mprotect(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0xffffffffffffffff) sigaltstack(&(0x7f0000ffa000/0x1000)=nil, 0x0) r2 = creat(&(0x7f0000000000)='./file1\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8800000) dup2(r2, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, r0) 23:13:33 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0xfffffffffffffe51}, {&(0x7f0000002a80)=""/102400}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x2e}, {&(0x7f00000002c0)=""/237}, {&(0x7f0000000100)=""/3, 0x37}], 0x7, 0x0) io_setup(0x2d47, &(0x7f0000000000)) (fail_nth: 25) 23:13:33 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = dup(0xffffffffffffffff) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8001}, 0x4) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) sendmsg$inet(r7, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x4c088) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000080)={0x2, 0x8000}, 0x4) sendmmsg$inet6(r7, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="ff892e62f47adbd8f887ff042f23fbeb245b74ba3fc29cc3958f9a6cbe73a42613cc133fe515a06f70d99f54eaad8b553b3ef12b4db6c508c7ac810b1b384a0a8bec274a6952ffa18e289340bce7ada7287c3ee1fc5799c4fb9d426b380eb50ff6de87b67f0e59fe69ca3127810eaa30a016d901adbdb6e3c176c9a4d0067a42c0e8fae068c972321b8acc301b3062c8ceea1c6c873f581f9ef12699842c70925353b140d2c5d947c4bb6e5fc6a60bff44e9d1514b634926b5ab87af1e72154429cd5b95f34f3842942d4192eeb4d0a7fdf4d631", 0xd4}, {&(0x7f0000001540)="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", 0x4ed}], 0x2}}], 0x1, 0x0) ftruncate(r5, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 2851.631917] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2851.636524] netlink: 324 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2851.650132] netlink: 324 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2851.656634] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. 23:13:33 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58010000180001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:13:33 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="c00200001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) [ 2851.745854] FAULT_INJECTION: forcing a failure. [ 2851.745854] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2851.747937] CPU: 0 PID: 13203 Comm: syz-executor.6 Not tainted 5.10.216 #1 [ 2851.748981] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2851.750228] Call Trace: [ 2851.750633] dump_stack+0x107/0x167 [ 2851.751190] should_fail.cold+0x5/0xa [ 2851.751775] __alloc_pages_nodemask+0x182/0x600 [ 2851.752496] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2851.753410] ? find_get_entry+0x2c8/0x740 [ 2851.754061] alloc_pages_current+0x187/0x280 [ 2851.754734] __page_cache_alloc+0x2d2/0x360 [ 2851.755403] pagecache_get_page+0x2c7/0xc80 [ 2851.756062] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2851.756832] ioctx_alloc+0x6cd/0x1e60 [ 2851.757435] ? aio_poll_complete_work+0xa00/0xa00 [ 2851.758191] __x64_sys_io_setup+0xc4/0x1f0 [ 2851.758827] do_syscall_64+0x33/0x40 [ 2851.759403] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2851.760176] RIP: 0033:0x7f300c1a9b19 [ 2851.760743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2851.763506] RSP: 002b:00007f300971f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 2851.764648] RAX: ffffffffffffffda RBX: 00007f300c2bcf60 RCX: 00007f300c1a9b19 [ 2851.765722] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000002d47 [ 2851.766785] RBP: 00007f300971f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2851.767841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2851.768896] R13: 00007ffdcc09d2af R14: 00007f300971f300 R15: 0000000000022000 23:13:33 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58010000400001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) [ 2851.839980] EXT4-fs (sda): re-mounted. Opts: (null) [ 2851.851770] EXT4-fs (sda): re-mounted. Opts: (null) [ 2851.912774] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2851.915854] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=64 sclass=netlink_xfrm_socket pid=13218 comm=syz-executor.0 [ 2852.059967] syz-executor.3 (13207) used greatest stack depth: 23488 bytes left 23:13:48 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487f49f8000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0xf5d, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r4, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) 23:13:48 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r5 = io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = dup(0xffffffffffffffff) syz_io_uring_setup(0x7a2, &(0x7f00000001c0)={0x0, 0x39a9, 0x20, 0x2, 0x2a8, 0x0, r5}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000240)) ftruncate(r6, 0x0) sendfile(r6, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:13:48 executing program 2: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffb, 0x8001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendfile(r0, r1, 0x0, 0x6) io_uring_enter(0xffffffffffffffff, 0x5c33, 0x0, 0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r3 = syz_open_dev$hidraw(&(0x7f0000000040), 0xfffffffffffffff7, 0x40000) write(r3, &(0x7f0000000080)="c5", 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x810, r2, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x7, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) open_by_handle_at(r5, &(0x7f0000000000)=@ocfs2_parent={0x18, 0x2, {{0x3648}, {0x0, 0x0, 0x1}}}, 0x10202) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000004, 0x100010, 0xffffffffffffffff, 0x0) 23:13:48 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58010000190001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:13:48 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="c00e00001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 23:13:48 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58010000600001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:13:48 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000780)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f00000003c0)={0x348, 0x0, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'sit0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip_vti0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK={0x90, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}]}, @TIPC_NLA_BEARER={0x134, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @rand_addr=0x64010102}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @empty}}, {0x14, 0x2, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x26}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x4, @ipv4={'\x00', '\xff\xff', @empty}, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xf2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, '\x00', 0x27}, 0x9}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK={0x78, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x5, @rand_addr=' \x01\x00', 0x9}}, {0x14, 0x2, @in={0x2, 0x4e22, @rand_addr=0x64010102}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}]}]}, 0x348}, 0x1, 0x0, 0x0, 0x20040004}, 0x90) perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) io_submit(r2, 0x1, &(0x7f00000008c0)=[&(0x7f0000000200)={0x0, 0x0, 0x5, 0x0, 0x0, r1, 0x0}]) io_pgetevents(r2, 0x0, 0x0, 0x0, &(0x7f00000007c0)={0x0, 0x3938700}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(r3, 0x0, r3) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = getuid() sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x100, 0x0, 0x0, @u32=0x5}, @typed={0x8, 0x7, 0x0, 0x0, @uid=r6}]}, 0x24}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) sendmsg$nl_generic(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x7, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) io_submit(r2, 0x2, &(0x7f0000000200)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0xe, 0x6, r3, &(0x7f0000000000)="265842e361101333fad21b67b61cc0ed6f0aebb1ab5705b2fd0dcf7af8db4726d557d26732ae6a6e47684fa16082ced63d17354912635835c41f0e7d9907ca02fec30c0489f70a43925ec46e6e5d4d52ffb2f685a8d7c95dfc7b7cb2e836a314a5d9a4bf6228ef84dbd516f33ed05cf575f558e51a95eeabf2ab0f9ffe5a83015a4dfa8c74cea48c4c450bf04749", 0x8e, 0xfff, 0x0, 0x3}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x7, r5, &(0x7f0000000100)="8fe1e28a16670a3de8a6b578bbfcbf1db9ec73a1a9e444babd4f44955a889d3e3a4964dd1b100a58c48efde4f83abf82e8f86d73635260e915892f0de6f358731eafd280f90c45cad348012bdb33631ba7466bebcf9b63e98074ed275192a79235c7a16bc4058f4314a0582e0a6330fd0ef55763e47df88f94725d212e216c707193bc77390c4fa2df8e8c", 0x8b, 0x24800, 0x0, 0x1, r8}]) clone3(&(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 23:13:48 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0xfffffffffffffe51}, {&(0x7f0000002a80)=""/102400}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x2e}, {&(0x7f00000002c0)=""/237}, {&(0x7f0000000100)=""/3, 0x37}], 0x7, 0x0) io_setup(0x2d47, &(0x7f0000000000)) (fail_nth: 26) [ 2866.680505] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2866.697994] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.1'. 23:13:48 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="e03f03001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) [ 2866.703902] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=96 sclass=netlink_xfrm_socket pid=13243 comm=syz-executor.0 [ 2866.710997] FAULT_INJECTION: forcing a failure. [ 2866.710997] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2866.713219] CPU: 0 PID: 13241 Comm: syz-executor.6 Not tainted 5.10.216 #1 [ 2866.714273] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2866.715638] Call Trace: [ 2866.715663] dump_stack+0x107/0x167 [ 2866.715684] should_fail.cold+0x5/0xa [ 2866.715710] __alloc_pages_nodemask+0x182/0x600 [ 2866.715735] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2866.715761] ? find_get_entry+0x2c8/0x740 [ 2866.715775] ? lru_cache_add+0x45c/0x800 [ 2866.715805] alloc_pages_current+0x187/0x280 [ 2866.715827] __page_cache_alloc+0x2d2/0x360 [ 2866.715853] pagecache_get_page+0x2c7/0xc80 [ 2866.715882] ioctx_alloc+0x6cd/0x1e60 [ 2866.715918] ? aio_poll_complete_work+0xa00/0xa00 [ 2866.715952] __x64_sys_io_setup+0xc4/0x1f0 [ 2866.715971] do_syscall_64+0x33/0x40 [ 2866.715989] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2866.716002] RIP: 0033:0x7f300c1a9b19 [ 2866.716020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2866.716030] RSP: 002b:00007f300971f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 2866.716051] RAX: ffffffffffffffda RBX: 00007f300c2bcf60 RCX: 00007f300c1a9b19 [ 2866.716062] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000002d47 [ 2866.716073] RBP: 00007f300971f1d0 R08: 0000000000000000 R09: 0000000000000000 23:13:48 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYBLOB="00000000001b08000000000000000000"]) r5 = socket$netlink(0x10, 0x3, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000240)=0x7, 0x4) r6 = fcntl$dupfd(r5, 0x0, r5) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001800210c000000000000000002000000080000000000000008000700", @ANYRES32=0xee01, @ANYBLOB="8a96e786829aef4c9f1c7a078dd89fa19f0c3e0adf826c4d735fe70c643aafbb1e4e81c897fd3ddab1d59235b6a8d3973f9c1485a0c6dec4260339a8e071a3b8c33bf3b484682d954a512b9e6472d1fd4b58c1d03048c28b022336c8936d3b8ebe6810d89a96c21ac053970f94fad7"], 0x24}}, 0x0) io_uring_enter(r6, 0x58ad, 0x6ca, 0x3, &(0x7f0000000200)={[0x8]}, 0x8) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f00000001c0)=ANY=[@ANYBLOB="000000000000150000000000", @ANYRES32=r3, @ANYBLOB="03000000000000002e2f66696c653000"]) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x78b5, &(0x7f0000000100)={0x0, 0xfffffffd, 0x4, 0x0, 0x25f}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r8 = dup(0xffffffffffffffff) ftruncate(r8, 0x0) sendfile(r8, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 2866.716083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2866.716095] R13: 00007ffdcc09d2af R14: 00007f300971f300 R15: 0000000000022000 [ 2866.726256] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.1'. 23:13:48 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100000f0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:13:48 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100021a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) [ 2866.727891] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=96 sclass=netlink_xfrm_socket pid=13247 comm=syz-executor.0 23:13:48 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0xfffffffffffffe51}, {&(0x7f0000002a80)=""/102400}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x2e}, {&(0x7f00000002c0)=""/237}, {&(0x7f0000000100)=""/3, 0x37}], 0x7, 0x0) io_setup(0x2d47, &(0x7f0000000000)) (fail_nth: 27) [ 2866.892815] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=15 sclass=netlink_xfrm_socket pid=13261 comm=syz-executor.0 [ 2866.908652] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=15 sclass=netlink_xfrm_socket pid=13264 comm=syz-executor.0 [ 2866.915154] FAULT_INJECTION: forcing a failure. [ 2866.915154] name failslab, interval 1, probability 0, space 0, times 0 [ 2866.917188] CPU: 0 PID: 13263 Comm: syz-executor.6 Not tainted 5.10.216 #1 [ 2866.918239] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2866.919491] Call Trace: [ 2866.919901] dump_stack+0x107/0x167 [ 2866.920457] should_fail.cold+0x5/0xa [ 2866.921036] ? xas_alloc+0x336/0x440 [ 2866.921606] should_failslab+0x5/0x20 [ 2866.922193] kmem_cache_alloc+0x5b/0x310 [ 2866.922809] ? SOFTIRQ_verbose+0x10/0x10 [ 2866.923435] xas_alloc+0x336/0x440 [ 2866.923982] xas_create+0x60f/0x10d0 [ 2866.924578] xas_store+0x8c/0x1c40 [ 2866.925123] ? xas_find_conflict+0x4b5/0xa70 [ 2866.925817] __add_to_page_cache_locked+0x708/0xc80 [ 2866.926584] ? file_write_and_wait_range+0x130/0x130 [ 2866.927366] ? memcg_drain_all_list_lrus+0x720/0x720 [ 2866.928138] ? find_get_entry+0x2c8/0x740 [ 2866.928771] ? lru_cache_add+0x45c/0x800 [ 2866.929403] add_to_page_cache_lru+0xe6/0x2e0 [ 2866.930101] ? add_to_page_cache_locked+0x40/0x40 [ 2866.930833] ? __page_cache_alloc+0x10d/0x360 [ 2866.931528] pagecache_get_page+0x38b/0xc80 [ 2866.932195] ioctx_alloc+0x6cd/0x1e60 [ 2866.932796] ? aio_poll_complete_work+0xa00/0xa00 [ 2866.933543] __x64_sys_io_setup+0xc4/0x1f0 [ 2866.934201] do_syscall_64+0x33/0x40 [ 2866.934771] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2866.935555] RIP: 0033:0x7f300c1a9b19 [ 2866.936118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2866.938896] RSP: 002b:00007f300971f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 2866.940050] RAX: ffffffffffffffda RBX: 00007f300c2bcf60 RCX: 00007f300c1a9b19 [ 2866.941140] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000002d47 [ 2866.942232] RBP: 00007f300971f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2866.943309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2866.944378] R13: 00007ffdcc09d2af R14: 00007f300971f300 R15: 0000000000022000 23:14:03 executing program 2: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = dup(0xffffffffffffffff) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000001500)={0x0, 0x8001}, 0x4) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) sendmsg$inet(r7, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x4c088) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000080)={0x2, 0x8000}, 0x4) sendmmsg$inet6(r7, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="ff892e62f47adbd8f887ff042f23fbeb245b74ba3fc29cc3958f9a6cbe73a42613cc133fe515a06f70d99f54eaad8b553b3ef12b4db6c508c7ac810b1b384a0a8bec274a6952ffa18e289340bce7ada7287c3ee1fc5799c4fb9d426b380eb50ff6de87b67f0e59fe69ca3127810eaa30a016d901adbdb6e3c176c9a4d0067a42c0e8fae068c972321b8acc301b3062c8ceea1c6c873f581f9ef12699842c70925353b140d2c5d947c4bb6e5fc6a60bff44e9d1514b634926b5ab87af1e72154429cd5b95f34f3842942d4192eeb4d0a7fdf4d631", 0xd4}, {&(0x7f0000001540)="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", 0x4ed}], 0x2}}], 0x1, 0x0) ftruncate(r5, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:14:03 executing program 7: r0 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f00000002c0)=0x9, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000004c40)='./file1\x00', 0x84e00, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) syncfs(r2) r3 = dup(0xffffffffffffffff) r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='oom_score_adj\x00') lseek(r5, 0xffffffffffff7fff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r5) openat$incfs(r5, &(0x7f0000000280)='.log\x00', 0x204404, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)={0x38, r7, 0x201, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_to_bond\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, r7, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x2d}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88f8}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x200}]}, 0x44}, 0x1, 0x0, 0x0, 0x8051}, 0x4000) r9 = creat(&(0x7f0000000040)='./file0\x00', 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}, 0x0, 0x0, 0x1002, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syncfs(r9) [ 2882.077453] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 23:14:03 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0xfffffffffffffe51}, {&(0x7f0000002a80)=""/102400}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x2e}, {&(0x7f00000002c0)=""/237}, {&(0x7f0000000100)=""/3, 0x37}], 0x7, 0x0) io_setup(0x2d47, &(0x7f0000000000)) (fail_nth: 28) 23:14:03 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58010000100001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:14:03 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100031a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:14:03 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5201, &(0x7f0000000100)={0x0, 0x0, 0x2}) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) sendmsg$nl_generic(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x7, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) io_uring_register$IORING_REGISTER_FILES(r6, 0x2, &(0x7f0000000040)=[r3], 0x1) r7 = dup(0xffffffffffffffff) ftruncate(r7, 0x0) sendfile(r7, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:14:03 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487f49f8000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0xf5d, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r4, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) 23:14:03 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100201a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) [ 2882.092465] FAULT_INJECTION: forcing a failure. [ 2882.092465] name failslab, interval 1, probability 0, space 0, times 0 [ 2882.094152] CPU: 0 PID: 13280 Comm: syz-executor.6 Not tainted 5.10.216 #1 [ 2882.095157] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2882.096374] Call Trace: [ 2882.096784] dump_stack+0x107/0x167 [ 2882.097334] should_fail.cold+0x5/0xa [ 2882.097911] ? __memcg_kmem_charge+0x68/0x140 [ 2882.098580] ? create_object.isra.0+0x3a/0xa20 [ 2882.099272] should_failslab+0x5/0x20 [ 2882.099841] kmem_cache_alloc+0x5b/0x310 [ 2882.100451] create_object.isra.0+0x3a/0xa20 [ 2882.101109] ? __kasan_kmalloc.constprop.0+0xc9/0xd0 [ 2882.101873] kmem_cache_alloc+0x159/0x310 [ 2882.102517] xas_alloc+0x336/0x440 [ 2882.103051] xas_create+0x60f/0x10d0 [ 2882.103619] xas_store+0x8c/0x1c40 [ 2882.104153] ? xas_find_conflict+0x4b5/0xa70 [ 2882.104820] __add_to_page_cache_locked+0x708/0xc80 [ 2882.105577] ? file_write_and_wait_range+0x130/0x130 [ 2882.106335] ? memcg_drain_all_list_lrus+0x720/0x720 [ 2882.107093] ? find_get_entry+0x2c8/0x740 [ 2882.107721] ? lru_cache_add+0x45c/0x800 [ 2882.108336] add_to_page_cache_lru+0xe6/0x2e0 [ 2882.109008] ? add_to_page_cache_locked+0x40/0x40 [ 2882.109723] ? __page_cache_alloc+0x10d/0x360 [ 2882.110401] pagecache_get_page+0x38b/0xc80 [ 2882.111047] ioctx_alloc+0x6cd/0x1e60 [ 2882.111627] ? aio_poll_complete_work+0xa00/0xa00 [ 2882.112350] __x64_sys_io_setup+0xc4/0x1f0 [ 2882.112973] do_syscall_64+0x33/0x40 [ 2882.113530] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2882.114286] RIP: 0033:0x7f300c1a9b19 [ 2882.114843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2882.117518] RSP: 002b:00007f300971f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 2882.118689] RAX: ffffffffffffffda RBX: 00007f300c2bcf60 RCX: 00007f300c1a9b19 [ 2882.119779] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000002d47 [ 2882.120853] RBP: 00007f300971f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2882.121946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2882.123027] R13: 00007ffdcc09d2af R14: 00007f300971f300 R15: 0000000000022000 [ 2882.133580] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 23:14:04 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100041a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:14:04 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="00f0ff7f1a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 23:14:04 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58010000110001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) [ 2882.338984] netlink: 304 bytes leftover after parsing attributes in process `syz-executor.0'. 23:14:04 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0xfffffffffffffe51}, {&(0x7f0000002a80)=""/102400}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x2e}, {&(0x7f00000002c0)=""/237}, {&(0x7f0000000100)=""/3, 0x37}], 0x7, 0x0) io_setup(0x2d47, &(0x7f0000000000)) (fail_nth: 29) 23:14:04 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0xd}, &(0x7f0000000280)='./file0\x00', 0x18}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) creat(&(0x7f00000002c0)='./file2\x00', 0x0) pipe(0x0) getsockname(0xffffffffffffffff, &(0x7f0000000100)=@alg, 0x0) syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e", 0x8}, {0x0}], 0x0, &(0x7f0000000240)=ANY=[]) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0x40040}, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet6(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="3bb31d6a", 0x4}], 0x1, &(0x7f0000000440)=[@rthdrdstopts={{0x30, 0x29, 0x37, {0x88, 0x2, '\x00', [@pad1, @generic={0x40}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x2}, @pad1]}}}], 0x30}, 0x0) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000040)={@mcast1, @ipv4={'\x00', '\xff\xff', @local}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfab, 0x8}) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xfff) r4 = creat(0x0, 0x0) dup3(0xffffffffffffffff, r4, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) 23:14:04 executing program 2: r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="20000000000100000c000000d40000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef010001000000d7f4655f000000000000000001000000000000000b00000000020000280200000284", 0x62, 0x400}, {&(0x7f0000010400)="030000000400000005000000d4000f", 0xf, 0x800}, {&(0x7f0000000500)="ffffffffff070000000000000000000000000000000000000000000000000080ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x402, 0xc00}, {&(0x7f0000010e00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x1600}], 0x0, &(0x7f00000003c0)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xc0) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, 0x3f7, 0x20, 0x70bd25, 0x25dfdbfd, {0x7, 0xd, './file0', './file0/file0'}, [""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x24012005) write(r2, &(0x7f0000000240)="01", 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0) socket$nl_audit(0x10, 0x3, 0x9) poll(&(0x7f0000000140), 0x0, 0x6) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) mq_timedsend(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x20, &(0x7f00000001c0)={r4, r5+60000000}) r6 = openat(0xffffffffffffff9c, &(0x7f0000001340)='./file1\x00', 0x0, 0x0) copy_file_range(r6, 0x0, r3, &(0x7f0000000280)=0x10000, 0xc3a, 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000002c0), 0x0, 0x0, 0x1) fcntl$setstatus(r6, 0x4, 0x400) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x10000000) mq_open(0x0, 0x0, 0x0, 0x0) syz_mount_image$nfs4(&(0x7f0000000140), &(0x7f0000000300)='./file0/file0\x00', 0xe9b5, 0x5, &(0x7f0000000a80)=[{&(0x7f0000000340)="9d3737fe4a6443131a652e0d4271de03c1d3d6910a5fcb26a602f7951c20e7569cbc32de6529e7a8768a07b7254d4ef16d40", 0x32}, {&(0x7f0000000380)="478cd463d690cbe45d9734761f3fd1545a9744ebbfcf0b1e8529da452c1de5688d9bd2a8ac4429e44cd9ea9eb8505742d768a37d57ce53c9bfe74ae33ead2629f26f464a01a1c03716858aa4a9b96ac2e731e56ce4b59e6b1690866c", 0x5c}, {&(0x7f0000000400)="03ffbfc318f090cc95ce5f47a35fcab55358d9650ec77d3f0d4aaa3dca5f4ed04b88dd214ff084973f4f2c96c0d10aa484fc347d9da07a8256ee3a72e378bd589e7b1f11179583c32e61b83d99db0d9628d221797b6a6d0211f2ed23a325c62140dc5b6b95c974d2af613cd00c2d4c2cf71f9d0b4edb201fd8ecdb6385865a6159d286c80d5470fcd59453ef39cb796022f8f3934dcd1a662f22cf34b998f3d8fd0be2ea2a9fec520f98112783504a463ac95b043dbe6d07077f3008bc9e3369c062b36cd59319dbd29a958954e870c64e6419f2c9f96147ed44a50f698efdb0e7fb85c74227ef3871be54168602de70565d95", 0xf3, 0x7}, {&(0x7f0000000940)="fad8adf272cf7069a9117b3ef6b609e0d8d7904b29c2dd74afb7572370eb75aaeaa9bcbcdffe6c21f4feb53fd6c8bdc6a2a3af192867f70908616707d122df4a185a8f6fb6d64fa3b02956a64175f07b8f5d29b71c950f7cb1238a0b422f5acc8ab831016e54d46c671a0adfd623814a4f57f485f583b0c499f99942736faaac7cd9", 0x82, 0x1}, {&(0x7f0000000a00)="f8a6593c3f06ff2f054bcdd26db78246fa5166b6e80e39623278a1ec09e9d4a9c23eafbecfcf1b08cda4a98679d6fa0a402f1c0bb9787ae1a233268c66fbf83b75bdb76b4a924a6eeaac76da9f65743fac25233b9dc13c8b4c7e8ce736bab5aefbd7c670d4ec1b9a704523fd36edf208630baedcc81cb05d13", 0x79, 0x2000000000000000}], 0x1000800, &(0x7f0000000b00)={[{'[#&'}, {'ext4\x00'}, {']:@[)$.\x9d,--'}, {'ext4\x00'}, {}, {'trusted.overlay.redirect\x00'}, {'ext4\x00'}, {}, {'ext4\x00'}], [{@uid_lt={'uid<', 0xee01}}]}) [ 2882.397605] netlink: 304 bytes leftover after parsing attributes in process `syz-executor.0'. 23:14:04 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r4, @in_args={0x2}}, './file0\x00'}) r5 = openat2(r4, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x200, 0x84, 0x1}, 0x18) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x110, r5, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r7 = dup(0xffffffffffffffff) ftruncate(r7, 0x0) sendfile(r7, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 2882.441466] FAULT_INJECTION: forcing a failure. [ 2882.441466] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2882.443629] CPU: 0 PID: 13311 Comm: syz-executor.6 Not tainted 5.10.216 #1 [ 2882.444698] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2882.446036] Call Trace: [ 2882.446570] dump_stack+0x107/0x167 [ 2882.447287] should_fail.cold+0x5/0xa [ 2882.448038] __alloc_pages_nodemask+0x182/0x600 [ 2882.448940] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2882.450105] ? find_get_entry+0x2c8/0x740 [ 2882.450732] ? lru_cache_add+0x45c/0x800 [ 2882.451376] alloc_pages_current+0x187/0x280 [ 2882.452060] __page_cache_alloc+0x2d2/0x360 [ 2882.452719] pagecache_get_page+0x2c7/0xc80 [ 2882.453412] ioctx_alloc+0x6cd/0x1e60 [ 2882.454036] ? aio_poll_complete_work+0xa00/0xa00 [ 2882.454791] __x64_sys_io_setup+0xc4/0x1f0 [ 2882.455446] do_syscall_64+0x33/0x40 [ 2882.456033] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2882.456822] RIP: 0033:0x7f300c1a9b19 [ 2882.457403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2882.460192] RSP: 002b:00007f300971f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 2882.461367] RAX: ffffffffffffffda RBX: 00007f300c2bcf60 RCX: 00007f300c1a9b19 [ 2882.462466] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000002d47 [ 2882.463566] RBP: 00007f300971f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2882.464660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2882.465745] R13: 00007ffdcc09d2af R14: 00007f300971f300 R15: 0000000000022000 [ 2882.475364] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2882.523569] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue 23:14:19 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58010000120001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:14:19 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="effdffff1a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 23:14:19 executing program 7: perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4305, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0xd}, &(0x7f0000000280)='./file0\x00', 0x18}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) creat(&(0x7f00000002c0)='./file2\x00', 0x0) pipe(0x0) getsockname(0xffffffffffffffff, &(0x7f0000000100)=@alg, 0x0) syz_mount_image$vfat(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e", 0x8}, {0x0}], 0x0, &(0x7f0000000240)=ANY=[]) openat2(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0x40040}, 0x18) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) sendmsg$inet6(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="3bb31d6a", 0x4}], 0x1, &(0x7f0000000440)=[@rthdrdstopts={{0x30, 0x29, 0x37, {0x88, 0x2, '\x00', [@pad1, @generic={0x40}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x2}, @pad1]}}}], 0x30}, 0x0) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000040)={@mcast1, @ipv4={'\x00', '\xff\xff', @local}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfab, 0x8}) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xfff) r4 = creat(0x0, 0x0) dup3(0xffffffffffffffff, r4, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) 23:14:19 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f00000006c0)={0x0, 0x51ba, 0x0, 0x4}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r3, 0x107, 0x8, &(0x7f00000003c0), &(0x7f0000000400)=0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x1, 0x2, &(0x7f0000000300)=[{&(0x7f00000001c0)="75889f09f6abb53c8bdcc6b96eb709867d6a57d1f5b6bdd7fb3f7dcf4c2aece9770b5e75f8860ce6a006d48cf40965dfc553f6db118b6a292567ec47b870e78545e7d7c470748032cf8cc16c2cea53a86aeb13c6687f5e", 0x57}, {&(0x7f0000000240)="b48e", 0x2}, {&(0x7f0000000280)="0d812b", 0x3}, {&(0x7f00000002c0)="9edacd49e107e6afa8d6446d814515345abb78304d8e54d206", 0x19}], 0x4, 0x4, 0x1, {0x3}}, 0x80000000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x7, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000680)=0x3, 0x4) syz_io_uring_setup(0x2d24, &(0x7f0000000440)={0x0, 0xd180, 0x8, 0x3, 0x257}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000004c0)=0x0, &(0x7f0000000500)) syz_io_uring_setup(0x12b9, &(0x7f0000000540)={0x0, 0xb5a2, 0x2, 0x1, 0xd7, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000005c0), &(0x7f0000000600)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000640)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x5, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}, 0x4) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r7 = io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r8 = dup(0xffffffffffffffff) ftruncate(r8, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r7, 0x8008f513, &(0x7f0000000040)) sendfile(r8, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:14:19 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0xfffffffffffffe51}, {&(0x7f0000002a80)=""/102400}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x2e}, {&(0x7f00000002c0)=""/237}, {&(0x7f0000000100)=""/3, 0x37}], 0x7, 0x0) io_setup(0x2d47, &(0x7f0000000000)) (fail_nth: 30) 23:14:19 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487f49f8000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0xf5d, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r4, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) 23:14:19 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) sendmsg$nl_generic(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x7, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r7, 0x6, 0x21, &(0x7f0000000000)="8069bbd3ab3b6bc523f5577941f58f8e", 0x10) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xf21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x39, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x4004804) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000000a347ae17d1c84c0648606772c9b0a8fab88f8dfa0805aca084dbc90883c86207e93f08a6b48d49", @ANYRES16=r3, @ANYRES64=r5, @ANYRES32=r1, @ANYBLOB], 0x24}}, 0x0) 23:14:19 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100051a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) [ 2897.341283] FAULT_INJECTION: forcing a failure. [ 2897.341283] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2897.342739] CPU: 0 PID: 13342 Comm: syz-executor.6 Not tainted 5.10.216 #1 [ 2897.343432] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2897.344259] Call Trace: [ 2897.344533] dump_stack+0x107/0x167 [ 2897.344898] should_fail.cold+0x5/0xa [ 2897.345288] __alloc_pages_nodemask+0x182/0x600 [ 2897.345753] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2897.346358] ? find_get_entry+0x2c8/0x740 [ 2897.346768] ? lru_cache_add+0x45c/0x800 [ 2897.347182] alloc_pages_current+0x187/0x280 [ 2897.347620] __page_cache_alloc+0x2d2/0x360 [ 2897.348058] pagecache_get_page+0x2c7/0xc80 [ 2897.348495] ioctx_alloc+0x6cd/0x1e60 [ 2897.348893] ? aio_poll_complete_work+0xa00/0xa00 [ 2897.349380] __x64_sys_io_setup+0xc4/0x1f0 [ 2897.349803] do_syscall_64+0x33/0x40 [ 2897.350181] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2897.350691] RIP: 0033:0x7f300c1a9b19 [ 2897.351071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2897.352871] RSP: 002b:00007f300971f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 2897.353630] RAX: ffffffffffffffda RBX: 00007f300c2bcf60 RCX: 00007f300c1a9b19 [ 2897.354339] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000002d47 [ 2897.355038] RBP: 00007f300971f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2897.355739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2897.356440] R13: 00007ffdcc09d2af R14: 00007f300971f300 R15: 0000000000022000 [ 2897.369487] netlink: 304 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2897.379938] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 23:14:19 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) finit_module(r1, 0x0, 0x2) mount$9p_fd(0x0, &(0x7f0000000380)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000000)) 23:14:19 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0xfffffffffffffe51}, {&(0x7f0000002a80)=""/102400}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x2e}, {&(0x7f00000002c0)=""/237}, {&(0x7f0000000100)=""/3, 0x37}], 0x7, 0x0) io_setup(0x2d47, &(0x7f0000000000)) (fail_nth: 31) 23:14:19 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100061a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) [ 2897.474943] FAULT_INJECTION: forcing a failure. [ 2897.474943] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2897.476283] CPU: 0 PID: 13361 Comm: syz-executor.6 Not tainted 5.10.216 #1 [ 2897.476934] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2897.477721] Call Trace: [ 2897.477982] dump_stack+0x107/0x167 [ 2897.478334] should_fail.cold+0x5/0xa [ 2897.478700] __alloc_pages_nodemask+0x182/0x600 [ 2897.479144] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2897.479731] ? find_get_entry+0x2c8/0x740 [ 2897.480133] ? lru_cache_add+0x45c/0x800 [ 2897.480530] alloc_pages_current+0x187/0x280 [ 2897.480953] __page_cache_alloc+0x2d2/0x360 [ 2897.481373] pagecache_get_page+0x2c7/0xc80 [ 2897.481785] ioctx_alloc+0x6cd/0x1e60 [ 2897.482169] ? aio_poll_complete_work+0xa00/0xa00 [ 2897.482640] __x64_sys_io_setup+0xc4/0x1f0 [ 2897.483044] do_syscall_64+0x33/0x40 [ 2897.483401] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2897.483884] RIP: 0033:0x7f300c1a9b19 [ 2897.484243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2897.485946] RSP: 002b:00007f300971f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 2897.486675] RAX: ffffffffffffffda RBX: 00007f300c2bcf60 RCX: 00007f300c1a9b19 [ 2897.487348] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000002d47 [ 2897.488017] RBP: 00007f300971f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2897.488685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2897.489359] R13: 00007ffdcc09d2af R14: 00007f300971f300 R15: 0000000000022000 23:14:19 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58010000130001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) [ 2897.559553] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2897.586499] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2897.641317] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 23:14:34 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487f49f8000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0xf5d, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r4, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) 23:14:34 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100071a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:14:34 executing program 2: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470000000f801", 0x17}, {0x0, 0x0, 0x1000a00}], 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r0 = socket$netlink(0x10, 0x3, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x2c}}, 0x0) r2 = syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x727c, 0x6, &(0x7f0000001640)=[{&(0x7f00000003c0)="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", 0x1000, 0x9}, {&(0x7f00000013c0)="ea918e0336d998d93d7cd231279c04c720cdd9578bdc5be35a090744cc6daf1341593fb6ab40052c3740f00c3400f7e3a71fc7c1a3ce1f435b95d2fd6c887722df87a234975fc5ceb9beef6aa04ede27b64013c59b12fc3cdddab1dcb6c43eeccac38d58f646c14393ed77a4a58ecd8f369f5675720e62d98d0290c19fe1261c09aca999fca9a249283eb9ad0ea1ed01c4aae2d905043110b7201fd8d53fda3eb86c690cb5d23737299362072fb65ae6ab6927", 0xb3, 0x73b}, {&(0x7f0000001480)="c1d2c3d67368eb03419bc9257a1d8b3014e39176667edcd4204b62d40edfa3effd76d8192017b9f5630f93d465d701a24c6310b2ac62c61d25bd9982c9a625518df1d286a9041ba5c37a35c4e55d5ff598c75806e72088fff5b3f7a6094ca85935841acfc1d77bcb781e4f822a7b51b85ae785c826352fb1679fc8f8ef5acf4e2498dbdf0fe6cda56c1a4bfe179cfb", 0x8f, 0x7fffffff}, {&(0x7f0000001540), 0x0, 0x1}, {&(0x7f0000001580)="ac197b47c3079b4e93f2cd1f6ffc19bbc3a6d06d2f4132d0b32ccfddb63a717549fa4efb7116876ab4162bccb2d72c6f1f68c564c526f09ede1dea12cfbec53da2dff0e38eba4a2a819138c3", 0x4c, 0x401}, {&(0x7f0000001600)="b0d3c93323a32768549d2247add9e455fcbd7bea211ba7264bc4daa1", 0x1c}], 0x810080, &(0x7f0000001780)=ANY=[@ANYBLOB="73686f72746e616d653d6da3e165642c696f636861727365743d2300000000000001ff035f686173682c6650770f706f776e65723caf17395b5d8c48946a89a7ac0e01aebed99806d954a02896f7fdfa07d3c3380351910189b47c", @ANYRESDEC, @ANYBLOB=',\x00']) mkdirat(r2, &(0x7f0000005700)='./file0\x00', 0x1c1) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x105142, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x100000001) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x24000, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/tty/drivers\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = memfd_create(&(0x7f00000000c0)='-&\x00', 0x1) sync_file_range(r6, 0x10001, 0x100000000, 0x0) sendfile(r3, r5, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000014000001800b4195663f4a5b5cb5764abc58611553ec12165b99d1fb1b7c7b0f2ee039c4f13f436fee3ad6ef35ed723dcbd6aa4b1d5cc56287c225310d1cbee7d4d5ccaa349a0cabdc7437427c70dc2cbfd834e139962af38502e8c4b07cc471c3775e6bb2bf2cf9567207b3d0494d9295ccb124ff03ac8ebedbb", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) 23:14:34 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0xfffffffffffffe51}, {&(0x7f0000002a80)=""/102400}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x2e}, {&(0x7f00000002c0)=""/237}, {&(0x7f0000000100)=""/3, 0x37}], 0x7, 0x0) io_setup(0x2d47, &(0x7f0000000000)) (fail_nth: 32) 23:14:34 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580200001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 23:14:34 executing program 7: openat(0xffffffffffffff9c, 0x0, 0x200001, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$inet(0x2, 0x1, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_int(r0, 0x0, 0x22, &(0x7f0000000100), 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x0, 0xce5}) fcntl$lock(r1, 0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) sendto$inet(r1, &(0x7f0000000380)="975c105e268962fe5d946a6a906b9d10705baf3cfa76f84640ad7f2f0147e08b1f3881ba88895a8dbd30d5883333eec2e71cffe33bcf1284df2d8282355e389aaf69b3f30baa8633fed36d886239114e7ae3ffd3813b3a95f95a8f069b1c50b482c8967d7ab22f5f59e08b19a91a8406b4099362b3d64ddbb1cd72e58f1add89592872306af4cd8f3ef4b52f50f623e268a56855b3994d721e917cbeb42e5b87747b0f3c0a5ccc1a2b0b36454e8b0f55fa336ec06560560ef487b01ac75a05e41bf09578530f2f4bd84d948cd1ed03d605b684291586f6614f46aaec8273934a8bfc3059780b09edb2e767aab65cad942a19dd91e8fca2dc644c57242029ee0350cf4a74b7c092e12864864821d9308ad6ba49d63b3777f6e3985de4b2b03dd63e7489f0f3818aa56081bd493fef1c7c0655779201595b54c4685f90ced2cf6405b70344150043b1db92321783e66a2ba4321912eb9ac65e23ca30a238cb41cb0b380bb8bea1869f0f5587c95c64e1c97dc12d58e9eb11d02d5e5f041c7ea5d812867e5c719676727806691e595b1cd81949207e571055c12ec1d07cafa4939fa632990195681767263a4be15802542e99e12b275c5f49d705cee01b5748b2682c89e7aa3d2a48b82998eaa03e2f77e2dcea3895a01349c9e98e89e4b4bfb54449c27ad28f96baed52ada492a77678a8287712982b9389b8e9e7db50d4dc90f46b25628bcff0704112234bcae7aa1498adb23c4ca1bbcee2d2c26fe62acf3c3f0b6ae36ee58f5dead2c0241fd6af89e1b79bd9fa7543d33b95fe681d5ccd92ce10faea9161354e303ba2b5b65a4d9956852a49370791c5807f8df04e7adfd60287b491409c4e9923f28d35c10ed5dcb226ba74052fb7e8c64d8e8488113cef0001fe7bb5e24478cf0002e692370b408cf5116ab92c831a55a0fa899f7d91f6cc42cd3d2c28dd4354959b4932b6c1f20d82a5061b3cd0fd11c1b640e7fda9b6d6f6305ea6da8cbfa2b790e78936db4e6771c0eb9b818a05f9859b7e79ba1cb8d10b4e1ba28a6ea388bd9fbed9dbd8a21de9b2172e6bdc08d97ecf6b59c002feec2338b41df5f7aeb4c4202d29dbe4318b27d9e6c7eb25fe65c9c33e1225ed8f3088432a8f5bd007a730664f40d32ea642f69094f9f5dcf1ad317caca79269f914dee7f551057f318622fda91f7a0962bce7ee8bd38d0311b27d92c6d5e04851ea26d09f01f89a73eee406d61127ab6aacbdd18acc7713447dbc5072e7714cac1a26b0aa6787b95c49470ad8c3782db9f55579917c0f3d983d375f92b56507704643f8567fba6f35f6e7d3120c86e8bd9aff5cdf28c6ee3c661fc63e81fef78dfd458d5ec4bdc3700c66497f9c4bdf73349823894891eb5cec0117940407dbb361edf01c5d31f7fd7e00eebad8d5d7f4d21b2bcc72b2df2fd1498d1b6e7e6e77485083b3ad9683432e14c9b1c45b143198ce4f60107d3eceb383a43b84718e4c5e140e8424f233dd28feb3637d429dcf6b1ac0d9cba3a59af136ba4b03008972ef047062248fafc9445bd50f541d0a12228cf18020e58f371b6efd4e7efc0afdcde249795bc4fe4524d6c85dad80f5e0ff9c621c41bdc67d46b054ec01e164ea7517a0406f5cd5fe173de16f4896fb2e63b6ffaa20ab5bf4f247b02834900afbc9ef400bf2b15d6ed4e0ec16ec03fe5ef5718d305e1180efb584d7218dec5cea444e919c7c775f122ff454874c57daa9b3b8b9938d7ba589bd9bebd290d93adf743313d96b8c0aba5ceee8a9cc104867a97357aa48e04c4d9e78898e386acba4379f5857f550f534c56d92c0d130707cf9ee569fef7d939405e455b0ae6e12eb27c82df53a9c3ce186436b2e725fc0f5be1e00aa05aff82d63c37c2d1d99fa6edbba35626339462d5790f49426dba2a65ca11b9ecd0098894814c72fcf561bf7365a400f75189444fc3b9b2729622e9625a7c8116481c3640fe714db829a0f256943c7f17811c56eadacff94c02f87a6e005ab99354c4e833094ea8802b2900f0c4bab51b09fdde117eff1d0a23ef2c6e3b77b1498f6c30feb66a6c2f63454e984c6108e28f8846ed4bb5be949385609a816d95d148fbbdcce7f673cf99803f4cf6363211a47d8eed1c874ae4abe933035eec490e8a82548f2bc819d0fd4808faba1c9d764b8164335718b9614202766a4937f811ee48c5c538bab14bec8bd6ec2864c1a5cb2eea0fb4e64f2fc8ee147834a52758626f928e39dd870364d1321e3ae3a5ddbfdac762d517e5403f58ecd8a0686a71542691776e5ab62129453ebf7df54c8345144c79e12c58b8ae488b3c585ba518cb4e647c7a1771f99b8af8caa342bed03985eeb62c34a921d1f6a7b3f291c92951dabb6a467f703944aa276aa5167d028e41593de06a33ea60cc5b29cfdcbcc363fd7f84f143d6fccad3cc0a82d30d6d9973ce7e5b3c45442eb155485e6e2514bee75ca1e28a85ccaae23cb20485649bae98ed31aafefb0d3f4c667aace0e83cd753bca3682f0a93f54b95c2076f9b7424517f928ded26da00e32760038d128e8e4a7cbc80d931882710b6cb43530fbf87ef7bb50a712f86b997270277c1ad996013cac3ce620f5cc366e567a9723bd0191e05617cb47a5817eb5bc943b58833e284a4aefb7e0b6bfcf99c56ce25e7cf80b762e8509a67d9283114cd94d7e4446c8e64aacf3c374f99dcfaf7cf27af4eec8966d8b33cfe97f59ad6daaabde319cfbc5c1afdef1682b188e4535758c7fccdb4b034698fb1ede37f1fe18c5ef35d0c16e5ea7a5357395c104fb0cdd0c40e4ca83d434eb3c67d2fa446267713e95589cfb4ccffa8f46ef52107e974dd85b63105d23771ebd698c515403d1cce28b95096cbe670438f1626304d3b2561fbe23aa5753ba285293e7321a9d149c8a92ad06540260cfa0c8a2f5f7b63d11c7fa206d537c8623f6dd51d87ab3828e93448bb45bc53ab8e40c916f8e41d48a9d34206ef00e74b0956ab35f67a3443f270b6627dad3129869577a020d615e5e12bd3b546b7fbc7a4ef5d7e6353e58eb647c618467cab9301d65464ff1d3d32568dbf73468e19810e6bf02dbe553f9cf68011be8f1790b64a30537927b911ce508ba2e4871f2132d33f55db9e5184cbc1da1c235f3c1e9f2fb0db23123e8de6d8d248715880c706c30bf571d75ca80c72f98f5cb124b75ab0ad5208187ef96935e422db6875d0f198cac665acd50a8b4e06d790fc7018b6f2152b32ec8fe54399c0b70ab9c4bc40b42defe2716a0d07d2256fefba3a767f8971f4124f2c3cb45736329e9ee3ab62424e3b4b8497d9d206212e8963871a42f7fc08b74a49bfcd8d74d2e198775752a68b70057d73810e20d6baa5c3927906559d4be6dbc88193df669517d2002b1e5060a65ac790d993087fba2e31f338c4f93d066e253ea7388e65cfa5840b872cc2989feb8c0184fedffffdd34e0a4c8b906b2f670315fea1d8c6a93fb3e0845520a2584ec4f10cc756947e2799360aaf4e3f2c4f77f52faaa3915ac396478ca8f6f8e90c37efd365db1d3ec6d5f340033e02a5d27ccf2bcfbbc1d618b389e7e4495892fceef319a75c5fa3df278373c0182b8c5f49f02c53433ac48c4120d99868dff89a42de0c3446f6dccde0943f0f97ed7a00223237eddbe072182cfd892a360691a85875a340adbcb002435bd34456a1335c437e1ca757bc62346bab08f62980b11df787667de646c569bd8ef79ad1bcb1b042b898f30a1311601aff34fe3f94106d90bd024a4cfa370a58080d252aea9ff5c63b61f602aa868f55fa657822ce4a9e096d57806cd7111551e7b7056d8baf88cfa95a3ed22206dcd4255555d24b9115d13769e1229f3916dce51a1afa98427914dad6fde32a49b4ef94fdbf8e9bad9fa35d73d5e279a9a14031da9e8f4b5de829751229e38a908554ef844e6f2e206427bc6c125fdd70552054402224acc1caa5f0c16a32ff443afe58c6470f6df71ab0cecbee3d6f6e23c86fcff95944031ad8c0c4d5168f68354eb7aaf21b9d5f516cca4eaad76b4d333cd44849d7980eba1751dee924c0882888245d7c0f2d06d0215df95abe3f5d5ea47451fb1b44b3ad9ddccaf04e9d418f3e69dfabc8b19f331a5fb07b287a02cbaa817ebe7023b66f99cd6169708f98d5ee037a4f635626149da00d68173133fa16704d5d742b7584e7c92ae5054fb8b98ca94a5d80dd912d0c50b78b058cc7da6f5d3bbae32e326cde52db4957c7a70b1708036a7b90f31a09fe7def6dad588bb82859f6fc94f9d2ce4a96024bb21f3dacc75ead271f36e9f9be63f229e15dde9f917b14a98e95337a266e34e8f90d3445b4a960d47cfb96cbb2b8180ea126dd71090804862bbd7f1fd0797f7f8833046b4518b6f242504afaac369ff245463e288ecad904c17fdc108899fa6cbd73f0cd14c891a26a84edbd20f92b38d89fbfabfbf475979b7c50d05db14c9572cb9e8f8e1ccadb13def67baa1111f72b6b32236d79779942b1b165423d9c6b9a822fb923abb4b511cc1ed54d0e0f162081ec31b147c0f0a6b27992ba57652479759f951f7666de25497d0c4e37012bcab9764884441c0a429de3d59553b1ae16fcd2d9a44b6b4ef38bc319e09d28338ec20f13242d3e551b86c9456be48089e43cbe861da08cc53733033025db02d96cc7712553dccc38d6a8068343ed361430ce3203e4f74d604aa4667ae40780c4120fea195fcf940916e60071a2a0ab42485616627ec896a033cb50dc93a66be92939733645d39802502a89b01cd61a2a82da9b2dacdd2a072525a7887caae9c7ed12a4450d46ed4e64352aee7e9b2c2a7d039e187232f3e38eb62d1fac4beeac03a683fe4f87661eee2eb7c7408f27915f50a9f9ce5f8514e8942e8ba3fd04f7a8cdbef4017d735cb3cbd360a42632cfae491a009f2d56fe0776e3d78c1505a471d81a03f71a81ab81d2e759d74e85ae7d59e7d018300cdda975a83396107c2ba0e297644852bb8f055325908b5a1db7dc64a0028d7390948b30246952c40bb1bdee432ed37b14b84acc1adc6b0ad0429216542a6fb16da9c9f3a4674acef2c2ec0b2d8f3fafda6b92b772c9562d5f586b2d26e22cca4b24fc20e00eef821e489ad40e4ecc65b52baa0689ab6295e22e0856d63a94e30ab7393a2448141ef00b78616a3c98c186b8ac68afcde6b193d2d5115868fe7e1b5a3a0af0dd968699dd415a74972086c92f910dc5fd991bbb76df0801d9170679a86f292953fdd0817ce79d7938b4a7545684c4a4a725ae69b27ba98ad3bc931fedd1a1790459df5f0b6f6df505f504b4e27a58574188c8aa78600067a810b1e5958a885e916af935a119af7d55598fc94f9f6adafa71228c06adc09bcb100d07cd5b142862ae8a703e49b896615a5e64374704c2deb0c7e885275d7352a54a5949f1b7d869037c36ab0c086ee86e7bbba037adc949bafc6d19bfced4c1ca9afecdf765d163667e60ee2a6a404b1f5b1f56bbc5765bf3600c0285496a2bef492afc5ebd46bf86657f5ef5798c3a17511bd15f4fcd68355a2330c9ba655f33e631c15d02d383d57775b5e2bf3aa828927732404a7c938e41d8e23357cce36fb726fceaf1da59a40504e4a0524e57bcaf08c9d2f8e9462a17fb045782cb2605eebe898c2c4d21520f7646c52ffe881aa9d184230c8ff7af85f9dc1f0d866748f8e843989777f38d7774be2ef40ea72f86c0c3c4324f9f10928a94f1b3a93ba4ee94b1d3bde68ee7861a34d46cb4ad388359cb992e74dc98d15", 0x1000, 0x40010, &(0x7f0000000080)={0x2, 0x4e23, @private=0xa010102}, 0x10) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="30000000010402d6afd3a8b200e5a0458ef703697354573a0200000000000800000cb01f3100000608e904010008100340000000000a0002000000000100cdade9000000"], 0x30}}, 0x4044880) fallocate(r2, 0x78, 0x9, 0xc000) unshare(0x48020200) 23:14:34 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58010000140001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:14:34 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet6_tcp_int(r4, 0x6, 0x22, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = accept4$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000240)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000480)={'vxcan1\x00', 0x0}) sendmsg$inet6(r5, &(0x7f0000000640)={&(0x7f00000002c0)={0xa, 0x4e21, 0x37c1, @local}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000300)="34474eecbcefb28351d44d4d830653b2d5b5dbece922ecd2e4b9cbf473242f0fad52eb78ecdb49c76514d184d1d2167e738b8aa525492969dcde060411c13a50acee5a428d70f300b1245aea55be5b9c69b1aee8", 0x54}, {&(0x7f0000000380)="75459c611266e2b0467a95afca7fe547eb8ac41a652364aed30ee1c8a58e84ef4f9c52ec0341881e4e282f1f5ae3eb2c6027cdf31e9d171c1520d736d114eb92d4aebf387fdd1806a4c9a18ebba530a5c7b2d8685c44868fc3018bc2642d10bcb19665942ad43ba2d49e96c3d9615320b5f5684f64c617955c219a12d956d634133f54b06138c4e3e8ecc5d44862b41e731edfea42429d7a928097db8949a687d592f9b3", 0xa4}], 0x2, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="000000001400000000000000290000000800000004000000000000001400000000000000290000003e0000000400000000000000"], 0x160}, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x8c, 0x0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x200080a0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r7, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r8 = dup(0xffffffffffffffff) ftruncate(r8, 0x0) sendfile(r8, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 2912.824218] FAULT_INJECTION: forcing a failure. [ 2912.824218] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2912.825487] CPU: 1 PID: 13383 Comm: syz-executor.6 Not tainted 5.10.216 #1 [ 2912.826142] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2912.826889] Call Trace: [ 2912.827156] dump_stack+0x107/0x167 [ 2912.827512] should_fail.cold+0x5/0xa [ 2912.827883] __alloc_pages_nodemask+0x182/0x600 [ 2912.828333] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2912.828913] ? find_get_entry+0x2c8/0x740 [ 2912.829309] ? lru_cache_add+0x45c/0x800 [ 2912.829709] alloc_pages_current+0x187/0x280 [ 2912.830135] __page_cache_alloc+0x2d2/0x360 [ 2912.830577] pagecache_get_page+0x2c7/0xc80 [ 2912.831005] ioctx_alloc+0x6cd/0x1e60 [ 2912.831368] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2912.831380] ? aio_poll_complete_work+0xa00/0xa00 [ 2912.831405] __x64_sys_io_setup+0xc4/0x1f0 [ 2912.833521] do_syscall_64+0x33/0x40 [ 2912.833876] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2912.834347] RIP: 0033:0x7f300c1a9b19 [ 2912.834707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2912.836435] RSP: 002b:00007f300971f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 2912.837115] RAX: ffffffffffffffda RBX: 00007f300c2bcf60 RCX: 00007f300c1a9b19 [ 2912.837794] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000002d47 [ 2912.838436] RBP: 00007f300971f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2912.839104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2912.839734] R13: 00007ffdcc09d2af R14: 00007f300971f300 R15: 0000000000022000 [ 2912.864866] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.0'. 23:14:34 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0xfffffffffffffe51}, {&(0x7f0000002a80)=""/102400}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x2e}, {&(0x7f00000002c0)=""/237}, {&(0x7f0000000100)=""/3, 0x37}], 0x7, 0x0) io_setup(0x2d47, &(0x7f0000000000)) (fail_nth: 33) 23:14:34 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58010000150001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:14:34 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100081a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) [ 2912.973723] FAULT_INJECTION: forcing a failure. [ 2912.973723] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2912.975742] CPU: 0 PID: 13402 Comm: syz-executor.6 Not tainted 5.10.216 #1 [ 2912.976787] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2912.978028] Call Trace: [ 2912.978448] dump_stack+0x107/0x167 [ 2912.979014] should_fail.cold+0x5/0xa [ 2912.979604] __alloc_pages_nodemask+0x182/0x600 [ 2912.980318] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2912.981228] ? find_get_entry+0x2c8/0x740 [ 2912.981850] ? lru_cache_add+0x45c/0x800 [ 2912.982483] alloc_pages_current+0x187/0x280 [ 2912.983160] __page_cache_alloc+0x2d2/0x360 [ 2912.983822] pagecache_get_page+0x2c7/0xc80 [ 2912.984486] ioctx_alloc+0x6cd/0x1e60 [ 2912.985087] ? aio_poll_complete_work+0xa00/0xa00 [ 2912.985836] __x64_sys_io_setup+0xc4/0x1f0 [ 2912.986483] do_syscall_64+0x33/0x40 [ 2912.987056] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2912.987833] RIP: 0033:0x7f300c1a9b19 [ 2912.988401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2912.991158] RSP: 002b:00007f300971f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 2912.992298] RAX: ffffffffffffffda RBX: 00007f300c2bcf60 RCX: 00007f300c1a9b19 [ 2912.993363] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000002d47 [ 2912.994435] RBP: 00007f300971f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2912.995501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2912.996565] R13: 00007ffdcc09d2af R14: 00007f300971f300 R15: 0000000000022000 23:14:34 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100091a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) [ 2913.041297] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2913.047489] netlink: 264 bytes leftover after parsing attributes in process `syz-executor.0'. 23:14:34 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580800001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 23:14:35 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0xfffffffffffffe51}, {&(0x7f0000002a80)=""/102400}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x2e}, {&(0x7f00000002c0)=""/237}, {&(0x7f0000000100)=""/3, 0x37}], 0x7, 0x0) io_setup(0x2d47, &(0x7f0000000000)) (fail_nth: 34) 23:14:35 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58010000160001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) [ 2913.191958] FAULT_INJECTION: forcing a failure. [ 2913.191958] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2913.193089] CPU: 1 PID: 13423 Comm: syz-executor.6 Not tainted 5.10.216 #1 [ 2913.193800] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2913.194494] Call Trace: [ 2913.194812] dump_stack+0x107/0x167 [ 2913.195232] should_fail.cold+0x5/0xa [ 2913.195637] __alloc_pages_nodemask+0x182/0x600 [ 2913.196020] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2913.196532] ? find_get_entry+0x2c8/0x740 [ 2913.196940] ? lru_cache_add+0x45c/0x800 [ 2913.197266] alloc_pages_current+0x187/0x280 [ 2913.197624] __page_cache_alloc+0x2d2/0x360 [ 2913.197976] pagecache_get_page+0x2c7/0xc80 [ 2913.198321] ioctx_alloc+0x6cd/0x1e60 [ 2913.198636] ? aio_poll_complete_work+0xa00/0xa00 [ 2913.199036] __x64_sys_io_setup+0xc4/0x1f0 [ 2913.199359] do_syscall_64+0x33/0x40 [ 2913.199663] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2913.200059] RIP: 0033:0x7f300c1a9b19 [ 2913.200359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2913.201722] RSP: 002b:00007f300971f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 2913.202462] RAX: ffffffffffffffda RBX: 00007f300c2bcf60 RCX: 00007f300c1a9b19 [ 2913.203027] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000002d47 [ 2913.203617] RBP: 00007f300971f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2913.204502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2913.205078] R13: 00007ffdcc09d2af R14: 00007f300971f300 R15: 0000000000022000 23:14:35 executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r0, 0x8, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x26000004}, 0x81) r1 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r4 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = dup(0xffffffffffffffff) ftruncate(r6, 0x0) sendfile(r6, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r1, 0x58ab, 0x0, 0x3, 0x0, 0x0) r7 = pidfd_getfd(r6, r4, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r7, &(0x7f0000000b80)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="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", @ANYRES16=r8, @ANYBLOB="04002cbd7000fddbdf250e00000008000300", @ANYRES32=r9, @ANYBLOB="04002a0026002a00760604802a0020007e1549020908021100000102000000db000000060000000301a50000c1000f0068040500ff072d1a08001aff7f000000000000480003000500000000087c28000008bd06080211000001030189828e407f2009000000080211000001010000000802110000011f000000d02200000a000802110000010500000005ffffffffffff010000000108021100000009000000050802110000010800000000080211000000890b000004ffffffffffff0900000005ffffffffffffc5040000010802110000010400000001ffffffffffff0800000004ffffffffffff0000010000000080010f0037be85064e084028c2ca36a6b66b8e4fbc7be544a91b2c6b0b54683325a7d44be90de1f64cc64a8e245b3eef8b854232a6a914759423df6001ac14a3ccaec55ebbabe488d67185ffc8e4ec9bf13b88fa7fb40a2604190b77ebbc777f0dbb61b467e0a679d296a212a2f2f444b0f96f010260b9021304b6c766013d4fbf21626b123c0907a4d696e80409693560aee160f3c92d042533f549bed69a16ab4ff8ee1b2e66c013ad9a0453311c67ed28a087774804e71c613e1190bd0304d51660ff7e158405050802110000010400000004000000050000007206030303030303dd9badd9a6d14f3a95f1a06e0dbf108938894cb32d3d5d4c60b8aa8452219882f8d5aac552fcecbb96a78501e0d7576422587f44d121e8ddf05b643bc251314f66dc0f0f8537c825fcbe8450fb60dfbeb177aa1360c70bbefc0979f448246274a5581794a2a3421f9329db9891574251945b393a8ce3837f3f338984bfe563624ed1840ecdbeed419434949289cbad163bb0d1235ee997c1851a39836574000f0082414201ab030000000802110000000600000008021100000032b0f74c0100000003040802110000010500000005ffffffffffff9e30f90f0008021100000101000000822b46400105000000ffffffffffff01000000ffffffffffff00000100cd4f00000105ffffffffffff0600000088030e0080181f0008021100000008021100000078d7427389dd3e0000000000000000006400890001010b030188054820740645270f9afa54f86366220ebbc1a4fc17b488ab18dd17a56dfb3ac65c1b78777f7a341d48bd72bc7bb874aac52050302fef7babb62cbd8efff0f3766294574b60c5cc8a3d0d250300b1093c040109083f2d1a008004000000000000000005003f0013000000000306000000007107000006010004407606010808000900dd0716a39599b8e2f3ddd0391948bb4c5587f7f726c9e6f4fd5da3c9e775f0cca8033931ab471276c5f452563e1e99b0f4dcfe91b9fd9a3bd225a661c26fc8c83d9ac0895ca84ac76716a0f0c3739a73d3a63fedc21da3f6fb6cc4ae96995f8a3a9e99e00a2949714510af8ccf1f616dcdf797ad5808e60a7360c5bd491a8224c50ca82e70c04988027226f3a294a3eebdf9eefae3c8429ba278ba72af7efba20ade155388c1dfd882c8ed9b74b3fe789e293a13aa95d1d2d18c81c49f4e502edba914119c4ca0e5719720e0fbb9904bd50203a6662af15c6b0f31dd5b0b2002ecd3037b478c7470b18f9970f0a0f09fc02f322d5c08cdcb6c188ee5388568b640ebfb5f2307ec262d5cf2f5864e8f05e259171f76fd88ee9bd90af30f2e2cb8af78bc2a7831927452fa7a95ea39c8b1f1237b5fe2a9c493dd18381bb9e356031d9267543467390207ab9cab38bfd9a957e0dda5d2e345f5af1e2d45a22b97438414d1b79d4bf4cf2bd1a554212f37b54d68b6412788eb7dabc6967c7de6447711e27550a37d2fdb7e31f4e0a374f63c98a91b777645907216e618f738460859b3c76e054faff4679a4de57ba3e9cc5063c8ea055823bcc6b4b21b3702c61451acceac82168dfc8bcaf0a0092ce6a4eb8fa1a00245bba5b89baf68c6411f52537df61de03c4bb023b63456a3dfd509b4d8e151943eb755bdd0dd18a8cb99e502f161d38ff939200d016c1843db289278d8f8aeddc3972107b50feffc1361218b892b99920b0459a88026fc7b1564cebd1f1bcb8d5b83a761e626c5c692f9c70e8a79ea34626477897bbf60ebf91bd7198513cea8dc8b00467a3843d57c3ff099bdec7dac937f0ef8d9799b2a228e6a4dfbc5b5faeebeb6a0c271fc25696860957b2d061bdb41bcca5f46705ae5d6300f7cb122c923919eedfabc1d3d347f9841f4e3de8ce681358a808ccade85f51cd16a6401bc73a2fe33ad70b54183ad5b8d125b4b68d34996d3148904fa5ec1a9b4b4b6f67653bad4e4e9007f0037a981052f5357833b0d4d364539b882b40622d3adbdeb5d3c9ac02a1606a4f1328423cea4d206ac9097c234a41b7bfec05b519a3a2ec478de1fb65d6693db9801e5f100bac74c7de697a8c398cd99b3a028e84e030dd6c586f6c42723175745564df002273afb04cf808694093e252e935e679645da19859d731d2706324aa3dfb9e27f8d3a07f56854a1da0308c0dffc3f7ad78442030425d1cf2d020d32c7c62382969f62d023b862220105819b609804060201808c10d2001ca070b9b0d32626a0194ed3cd5825030068408c107f0a16fca1d920372cb93147cc7acd233c040040b805000000"], 0x774}, 0x1, 0x0, 0x0, 0x80}, 0x4040001) [ 2913.304416] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2913.308609] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2913.319151] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.0'. 23:14:35 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5801000a1a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:14:35 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0xfffffffffffffe51}, {&(0x7f0000002a80)=""/102400}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x2e}, {&(0x7f00000002c0)=""/237}, {&(0x7f0000000100)=""/3, 0x37}], 0x7, 0x0) io_setup(0x2d47, &(0x7f0000000000)) (fail_nth: 35) [ 2913.352689] FAULT_INJECTION: forcing a failure. [ 2913.352689] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2913.353728] CPU: 1 PID: 13437 Comm: syz-executor.6 Not tainted 5.10.216 #1 [ 2913.354275] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2913.354881] Call Trace: [ 2913.355098] dump_stack+0x107/0x167 [ 2913.355391] should_fail.cold+0x5/0xa [ 2913.355698] __alloc_pages_nodemask+0x182/0x600 [ 2913.356072] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2913.356552] ? find_get_entry+0x2c8/0x740 [ 2913.356878] ? lru_cache_add+0x45c/0x800 [ 2913.357194] alloc_pages_current+0x187/0x280 [ 2913.357542] __page_cache_alloc+0x2d2/0x360 [ 2913.357867] pagecache_get_page+0x2c7/0xc80 [ 2913.358218] ioctx_alloc+0x6cd/0x1e60 [ 2913.358516] ? aio_poll_complete_work+0xa00/0xa00 [ 2913.358907] __x64_sys_io_setup+0xc4/0x1f0 [ 2913.359240] do_syscall_64+0x33/0x40 [ 2913.359515] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2913.359916] RIP: 0033:0x7f300c1a9b19 [ 2913.360210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2913.361638] RSP: 002b:00007f300971f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 2913.362196] RAX: ffffffffffffffda RBX: 00007f300c2bcf60 RCX: 00007f300c1a9b19 [ 2913.362758] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000002d47 [ 2913.363316] RBP: 00007f300971f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2913.363873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2913.364431] R13: 00007ffdcc09d2af R14: 00007f300971f300 R15: 0000000000022000 23:14:35 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x5, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487f49f8000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0xf5d, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r4, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) 23:14:35 executing program 2: r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0x1cbb43, 0x0) ioctl$DVD_READ_STRUCT(r0, 0x5392, &(0x7f0000000ec0)=@copyright={0xa}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80000, 0x90) flistxattr(r1, &(0x7f0000000040)=""/56, 0x38) 23:14:35 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580900001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) [ 2913.404570] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2913.498172] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 23:14:49 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58010000170001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:14:49 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5801000b1a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:14:49 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0xfffffffffffffe51}, {&(0x7f0000002a80)=""/102400}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x2e}, {&(0x7f00000002c0)=""/237}, {&(0x7f0000000100)=""/3, 0x37}], 0x7, 0x0) io_setup(0x2d47, &(0x7f0000000000)) (fail_nth: 36) 23:14:49 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r5 = dup3(r3, 0xffffffffffffffff, 0x80000) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x6, 0x7f, 0x1, 0x20, 0x0, @private0, @remote, 0x7, 0x8000, 0x5c2, 0x3}}) bind$packet(r5, &(0x7f0000000480)={0x11, 0x1, r6, 0x1, 0x8, 0x6, @multicast}, 0x14) io_uring_setup(0x5204, &(0x7f0000000100)) r7 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = fsmount(r5, 0x1, 0x72) setsockopt$packet_int(r8, 0x107, 0x12, &(0x7f0000000040)=0x1, 0x4) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r9 = dup(0xffffffffffffffff) ftruncate(r9, 0x0) sendfile(r9, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) ioctl$AUTOFS_IOC_EXPIRE(r7, 0x810c9365, &(0x7f00000001c0)={{0x68}, 0x100, './file0\x00'}) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:14:49 executing program 7: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x74, 0x2, 0x1, 0x5, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}]}, @CTA_PROTOINFO={0x28, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x24, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x8}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x0, 0x1}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x3, 0xd5}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x81}]}}, @CTA_SEQ_ADJ_ORIG={0x24, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x20}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x10008084}, 0x40851) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x3f7, 0x1, 0x70bd25, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x44800) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open_by_handle_at(r1, &(0x7f0000000000)=@ceph_nfs_confh={0x10, 0x2, {0xb}}, 0x42a080) 23:14:49 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="581000001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 23:14:49 executing program 2: syz_open_procfs(0x0, &(0x7f0000000040)='cpuset\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="200000004000000003000000300000000f000000000000000200000002000000008000200080000020000000dcf4655fdcf4655f0100ffff53ef010001000000dbf4655f000000000100000001000000000000000b00000000020000280200000284", 0x62, 0x400}], 0x0, &(0x7f0000013a00)) [ 2927.206385] EXT4-fs (loop2): ea_inode feature is not supported for Hurd 23:14:49 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x6, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487f49f8000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0xf5d, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r4, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) 23:14:49 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5801000f1a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) [ 2927.226385] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2927.240728] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2927.250581] FAULT_INJECTION: forcing a failure. [ 2927.250581] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2927.252539] CPU: 1 PID: 13471 Comm: syz-executor.6 Not tainted 5.10.216 #1 [ 2927.253562] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2927.254943] Call Trace: [ 2927.255410] dump_stack+0x107/0x167 [ 2927.255955] should_fail.cold+0x5/0xa [ 2927.256519] __alloc_pages_nodemask+0x182/0x600 [ 2927.257207] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2927.258090] ? find_get_entry+0x2c8/0x740 [ 2927.258706] ? lru_cache_add+0x45c/0x800 [ 2927.259312] alloc_pages_current+0x187/0x280 [ 2927.259961] __page_cache_alloc+0x2d2/0x360 [ 2927.260581] pagecache_get_page+0x2c7/0xc80 [ 2927.261227] ioctx_alloc+0x6cd/0x1e60 [ 2927.261804] ? aio_poll_complete_work+0xa00/0xa00 [ 2927.262529] __x64_sys_io_setup+0xc4/0x1f0 [ 2927.263151] do_syscall_64+0x33/0x40 [ 2927.263700] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2927.264446] RIP: 0033:0x7f300c1a9b19 [ 2927.264992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2927.267654] RSP: 002b:00007f300971f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 2927.268766] RAX: ffffffffffffffda RBX: 00007f300c2bcf60 RCX: 00007f300c1a9b19 [ 2927.269805] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000002d47 [ 2927.270851] RBP: 00007f300971f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2927.271884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2927.272916] R13: 00007ffdcc09d2af R14: 00007f300971f300 R15: 0000000000022000 23:14:49 executing program 7: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58010000160001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:14:49 executing program 2: r0 = openat(0xffffffffffffff9c, 0x0, 0x640683, 0x0) pwritev2(r0, 0x0, 0x0, 0x1, 0xff, 0x1e) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x20]}, 0x8, 0x800) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r1, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x9, &(0x7f00000007c0)=[{&(0x7f00000000c0)="7c442b23ac0174aa08c90ff4663614dff942b0143d0f83ac712f894cfba8a9b70d64bcc81a927020a3652634e47151d00286d31b178400fa48d2a61f490a2e37b25055a8a07a2b4f509e4e0035959bd529", 0x51, 0x9}, {&(0x7f0000000280)="7b6d28651f8665dac45ab25d6e2a8dbbafc9ace01c160b758a1ca1c615df571f8bec59a6bf6057740d78a422e71acfd6928e6ae9e7748e6df99f466be476e56517ae27474efe80fb5c0b506a053887d1809abdae503796aed604088a11e0da7f222b904f90c659bbb0da236dcbb05cec182a9e493e5752a5c8f9400ff98239fd9fa846b08150f6777695c90e1cbd", 0x8e, 0x4a0}, {&(0x7f0000000340)="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", 0xfe, 0x400}, {&(0x7f0000000200)="fcfa3a980a046fcfac6f43049af4c42ff9eac6f4ef61052a7385f58560a3dc670ee5", 0x22, 0x9}, {&(0x7f0000000440)="9d35b4a40f594b39858b764ee6efc4b82bcb841af62ae8fe354efaa03b7b32556f1fc35727184814e8bd276fb41872577d9a256c6c2249bf31614732f4803a2701cabbbb8dcd6733c8277928293c7de37ba884bd", 0x54, 0x4}, {&(0x7f00000004c0)="8aecb6fddf8e702e73cd9205d95d5e76486544026e097cd44ae51d2897f8689a6db6e30fed21e0837ae00d1cb056a15cc16a8c2fbf043aed7f36bed91e4b26ddf57f0f361ba69e4426d01113ac17e8a609c54a1fc09edd7f9d51d3d21cde1124497cef993e5b0780cf3feb601c835cda66b3004249efe63bb17a2d61eb782670aac1e7d3e3bb8b5acdb574bba297b8e8e8419a1ea6b177cd167bcf4352257a1684b5bbc0db4da8625010ffc9803884644205", 0xb2, 0x4}, {&(0x7f0000000580)="274856eae1cb3bf79edc663b4ef5daa1d7fc2cef7ccca119f8d879b3a1302027edf5687270b6cebd91a6af7e2cfca2ed361be239d30a6ce47007364668ecc74d97cf74e1f0be064b459ac2d227b8a8946c511a7c629248cb386c8c240b5bf25b5386f3c45ce06ebdfc955b10126f41d3f124694d615d477d56619fad85306cdc370b0c34341794845e55c627308455793901dbe284db69ea3b5139eb82ffd9660c05094aed7cdd993c30cdc779", 0xad, 0x1}, {&(0x7f0000000980)="9603bdd820b7c12319356e619c9fa3b2790f32cbc04a323b8f0b4e9bfc1d0c5f634e1f19061833bfca7330de25b2c3f76884662791771d5a5f39e949c90bc1fccfaf96aea9e79d233836cd7fda9bf4bb71b7c2d71755d50c4b1be18da9fa1255123e8ea3ce258da12b1672c78bf9f8262914d7a589c885e8f6a6cb15ec1dee533964a530c3bc1a3473b15c46c99e2ac754d7b89e", 0x94, 0x1}, {&(0x7f0000000700)="d6a6e208f96d660ced3a0a53ee9eabd29ebf545050cb5d3283466ac2fc44ceb319749c9adc82835023d56fecd9ab37dcaef63ae49aafa88f3cfd9089a17841ecf9a99e3fd55cae3fbdc1db3941cfb54280889f3d2776376556a13930c85bb173a6f912df66a864c443de3e9ed7444d1c24b9f237f1fd317173bc2fa5e2039cb04f6fb850fa54d5d19d58f00937757c8b85", 0x91, 0x3f}], 0x1040802, &(0x7f00000008c0)={[{@rodir}, {@shortname_lower}, {@numtail}, {@shortname_win95}], [{@fsname={'fsname', 0x3d, '/dev/vcsu\x00'}}, {@euid_gt={'euid>', r1}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@hash}, {@obj_type={'obj_type', 0x3d, '/dev/loop-control\x00'}}, {@pcr={'pcr', 0x3d, 0x12}}]}) openat$vcsu(0xffffffffffffff9c, &(0x7f00000001c0), 0x24000, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ftruncate(r2, 0x9) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) futimesat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240)={{0x0, 0x2710}}) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_ADD(r3, 0x4c80, 0x0) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) 23:14:49 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58010000180001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) [ 2927.369951] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.7'. 23:14:49 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100101a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:14:49 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="581900001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) [ 2927.417597] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.0'. 23:14:49 executing program 3: r0 = io_uring_setup(0x383c, &(0x7f00000001c0)={0x0, 0xd0e5, 0x20, 0x2, 0x8b}) r1 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0x3, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r4 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r4, 0x0, 0x0}, 0x0) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r5, r3, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r6 = dup(0xffffffffffffffff) ftruncate(r6, 0x0) sendfile(r6, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) io_uring_enter(r1, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 2927.544602] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 23:15:03 executing program 7: r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone3(&(0x7f00000008c0)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = getpgrp(0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xfe, 0x2, 0x20, 0x3, 0x0, 0x2, 0x4005, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x1, 0x6}, 0x1, 0x1, 0x8, 0x1, 0xd023, 0x1, 0x8, 0x0, 0x1, 0x0, 0x9}, r1, 0x0, r0, 0x2) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_adj\x00') write$cgroup_int(r2, &(0x7f0000000040), 0x12) r3 = fcntl$getown(r2, 0x9) pidfd_open(r3, 0x0) 23:15:03 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = dup(0xffffffffffffffff) ftruncate(r5, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:15:03 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100111a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) [ 2941.179844] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.0'. 23:15:03 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x7, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487f49f8000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0xf5d, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r4, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) 23:15:03 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0xfffffffffffffe51}, {&(0x7f0000002a80)=""/102400}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x2e}, {&(0x7f00000002c0)=""/237}, {&(0x7f0000000100)=""/3, 0x37}], 0x7, 0x0) io_setup(0x2d47, &(0x7f0000000000)) (fail_nth: 37) 23:15:03 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58010000190001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) [ 2941.192723] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2941.197247] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 23:15:03 executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x46e2, 0x0) r1 = perf_event_open(&(0x7f0000001d80)={0x1, 0xfffffffffffffe60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x7139}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="ea2f43a242cd9b543dec6d592f80f9d8465a0fed6330e16f9b341a9f268c2f52e47043aed55a84f33f6f049d4e40be5383050c3c7ab1a47aab49452c703326a0c781bcaa105d19591bab17736eae8f91a97c82cd1d6638109a9bc897aea29d644fe48f0a3ab4276cd8d1f02d72898a46c6b4bbabb67485cc409c096962acea7e505c9905ef820f9d4bbf34e32e73c9086b4d67fcd31f12accb17d4838baafea6a7d2122ad33cb860a8f8249cb88187c1fabc81897e0fab1e5f9f9b19f8d28591ec01f4a3660fad633388", @ANYBLOB="7c9fe20c234c23fd18304ec3a73702000000203d431d707a6b67aec2293d6fe9094aa2d235e1edce3892104e69bec56d56172300"/65], 0x98a) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001e00)={0x1234, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @nested={0x1215, 0x7e, 0x0, 0x1, [@generic="e63ecd2e1f7397e04b9dd1c66eec530eda62db1e71037cf63bf666923c82165d31345844", @generic="278f27e670865dd2140344608c891c0f304ab4d8202d841db59f8591409a684fee8b65704ab5db4493452ad559ff75f3e2ec308ba6dc38e78b9e6e072ac4a374c65679", @generic="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", @typed={0x8, 0x6f, 0x0, 0x0, @ipv4=@loopback}, @generic="3404ab214b3e60e3c50fa502dcfaa5df675035da5c7576c518d88773cce5e8d9eb822a752a11b81a955dd077e8e158a93c2e65a90906770ce288e54cd190313066f28a756002c8d9251ce05deb346583a614648ddf30e9c85fc864eb529155a6175125b0f13ec531a1a5b8", @generic="4cbe0bfe695abaf46f8383079695679493c4eae462090207b78905c43bec033e786c42498b56aa20998f7015e64c81347683df33e2ab12e8617e85745f8265226a1a6b0a59a351c0c2619445c5054ef0e1589ec17a4a2841aaa963992eaaaee06a7d3f99b67918fa140e34b8d8f82ec2f16603eab2ad042e43ed54ebae2378fb", @generic="000b18dac0c4f786e307ff242e5c74a037b96e66a35bae2435b9d7e61b335b2610d886d42d837b2a1a5128d2b37b3932e3f069afcfe0efa200c59ee6f98d9daab326b360c677e3a247ec4b4ab19c61667f2a3b06c2600d5e9265ebce3fe9bd38cb2725e81bf429c4108bef3e0e0b6604463f274517118c6db27ac5c0a66ae1c1477232226839192493b2d71487d8b452d1ba377f4e2a103b8aa2654c81abb9e32db1fc48fc3d9ce8f8c7ce1aab8f155b5e807d54486971"]}]}, 0x1234}}, 0x0) dup2(r0, 0xffffffffffffffff) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000080)={0x0, 0xfdfdffff, 0x0, 0x0, '\x00', [{}, {0x800, 0x0, 0x400000000000000, 0x0, 0x0, 0x4}]}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000001) flock(0xffffffffffffffff, 0x4) splice(r1, &(0x7f0000001140)=0x100000000, 0xffffffffffffffff, &(0x7f0000001180)=0x8, 0x1, 0x4) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) write(r3, &(0x7f0000000180)="dd8975d9d2eb389518e6d5ece8f722e079e9ec8f10122e84986aee763238801c24194552756d", 0x26) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f00000010c0)='-*{^]%:\x00', &(0x7f0000001100)='./file1\x00', r3) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x161001, 0x0) getdents64(r4, &(0x7f0000001400)=""/53, 0x35) fcntl$getown(0xffffffffffffffff, 0x9) r5 = openat(r4, &(0x7f00000011c0)='./file0\x00', 0x2a040, 0x2) openat(r5, &(0x7f00000001c0)='./file1\x00', 0x10000, 0xc0) dup2(0xffffffffffffffff, r4) unshare(0x48020200) 23:15:03 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="582500001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) [ 2941.231950] syz-executor.7 (13528): /proc/13528/oom_adj is deprecated, please use /proc/13528/oom_score_adj instead. 23:15:03 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58010000280001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) [ 2941.246449] FAULT_INJECTION: forcing a failure. [ 2941.246449] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2941.248420] CPU: 1 PID: 13527 Comm: syz-executor.6 Not tainted 5.10.216 #1 [ 2941.249417] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2941.250611] Call Trace: [ 2941.250998] dump_stack+0x107/0x167 [ 2941.251530] should_fail.cold+0x5/0xa [ 2941.252087] __alloc_pages_nodemask+0x182/0x600 [ 2941.252765] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2941.253634] ? find_get_entry+0x2c8/0x740 [ 2941.254231] ? lru_cache_add+0x45c/0x800 [ 2941.254833] alloc_pages_current+0x187/0x280 [ 2941.255480] __page_cache_alloc+0x2d2/0x360 [ 2941.256117] pagecache_get_page+0x2c7/0xc80 [ 2941.256746] ioctx_alloc+0x6cd/0x1e60 [ 2941.257327] ? aio_poll_complete_work+0xa00/0xa00 [ 2941.258042] __x64_sys_io_setup+0xc4/0x1f0 [ 2941.258659] do_syscall_64+0x33/0x40 [ 2941.259200] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2941.259946] RIP: 0033:0x7f300c1a9b19 [ 2941.260489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2941.263124] RSP: 002b:00007f300971f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 2941.264222] RAX: ffffffffffffffda RBX: 00007f300c2bcf60 RCX: 00007f300c1a9b19 [ 2941.265239] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000002d47 [ 2941.266254] RBP: 00007f300971f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2941.267292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2941.268319] R13: 00007ffdcc09d2af R14: 00007f300971f300 R15: 0000000000022000 23:15:03 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="586000001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) [ 2941.288681] netlink: 324 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2941.299469] netlink: 324 bytes leftover after parsing attributes in process `syz-executor.0'. 23:15:03 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100481a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:15:03 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58010000600001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:15:03 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x353}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = dup(0xffffffffffffffff) r6 = openat(r5, &(0x7f0000000280)='./file0\x00', 0x0, 0x20) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f00000002c0)={0x2, 0x8000}, 0x4) syz_io_uring_setup(0x2018, &(0x7f00000001c0)={0x0, 0xbc83, 0x16, 0x3, 0x291, 0x0, r5}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000040), &(0x7f0000000240)) r7 = syz_open_dev$rtc(&(0x7f0000000300), 0x20, 0x8000) dup(r7) ftruncate(r5, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:15:03 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580102001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) [ 2941.385272] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 23:15:03 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0xfffffffffffffe51}, {&(0x7f0000002a80)=""/102400}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x2e}, {&(0x7f00000002c0)=""/237}, {&(0x7f0000000100)=""/3, 0x37}], 0x7, 0x0) io_setup(0x2d47, &(0x7f0000000000)) (fail_nth: 38) [ 2941.410527] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=96 sclass=netlink_xfrm_socket pid=13551 comm=syz-executor.0 [ 2941.505618] FAULT_INJECTION: forcing a failure. [ 2941.505618] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2941.507649] CPU: 1 PID: 13558 Comm: syz-executor.6 Not tainted 5.10.216 #1 [ 2941.508635] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2941.509800] Call Trace: [ 2941.510187] dump_stack+0x107/0x167 [ 2941.510720] should_fail.cold+0x5/0xa [ 2941.511272] __alloc_pages_nodemask+0x182/0x600 [ 2941.511936] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2941.512798] ? find_get_entry+0x2c8/0x740 [ 2941.513390] ? lru_cache_add+0x45c/0x800 [ 2941.513987] alloc_pages_current+0x187/0x280 [ 2941.514612] __page_cache_alloc+0x2d2/0x360 [ 2941.515244] pagecache_get_page+0x2c7/0xc80 [ 2941.515871] ioctx_alloc+0x6cd/0x1e60 [ 2941.516436] ? aio_poll_complete_work+0xa00/0xa00 [ 2941.517137] __x64_sys_io_setup+0xc4/0x1f0 [ 2941.517748] do_syscall_64+0x33/0x40 [ 2941.518282] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2941.519028] RIP: 0033:0x7f300c1a9b19 [ 2941.519558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2941.522154] RSP: 002b:00007f300971f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 2941.523247] RAX: ffffffffffffffda RBX: 00007f300c2bcf60 RCX: 00007f300c1a9b19 [ 2941.524259] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000002d47 [ 2941.525274] RBP: 00007f300971f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2941.526287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2941.527308] R13: 00007ffdcc09d2af R14: 00007f300971f300 R15: 0000000000022000 23:15:16 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0xfffffffffffffe51}, {&(0x7f0000002a80)=""/102400}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x2e}, {&(0x7f00000002c0)=""/237}, {&(0x7f0000000100)=""/3, 0x37}], 0x7, 0x0) io_setup(0x2d47, &(0x7f0000000000)) (fail_nth: 39) 23:15:16 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5801004c1a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:15:16 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000001, 0x8010, r0, 0x8000000) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = dup(0xffffffffffffffff) ftruncate(r5, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:15:16 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580103001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 23:15:16 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x8, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487f49f8000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0xf5d, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r4, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) 23:15:16 executing program 2: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, @perf_config_ext={0x0, 0x425988bf}, 0x0, 0x4d1, 0x0, 0x5, 0x200, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={0x0}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000140)=0x7f, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) r3 = fcntl$dupfd(r2, 0x0, r2) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x12}}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0xcf, 0xffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffde0}, 0x1c) sendmsg$inet6(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000bc0)='+', 0x1fc0}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) write(0xffffffffffffffff, &(0x7f0000000400)="071e9f7358ec922343d9806f7c2147c81e6890a8016fb53a5ffc493750405ca0111cc8069cb8ebd8c8564cc6aff4e3631e4eb8ebf43b0e3a61bb5878257df934ab1c2df75a49f4d39cf7effe02c00c95f02860e70800"/97, 0x574f9a1587427bae) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') readv(r4, &(0x7f0000001600), 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000180)={r1, 0x2, 0xffffffffffffffff, 0x2, 0x80000}) r5 = syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f00000014c0)='./file0/file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x173000, 0x0) r6 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x100000, &(0x7f0000000300)=ANY=[@ANYRES32=r4, @ANYRESOCT, @ANYRESHEX, @ANYRESDEC, @ANYRES64=r5, @ANYRES32=r1]) unshare(0x48020200) pidfd_getfd(r3, r6, 0x0) 23:15:16 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0400000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) [ 2955.141841] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2955.142550] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1050 sclass=netlink_xfrm_socket pid=13576 comm=syz-executor.0 [ 2955.165093] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1050 sclass=netlink_xfrm_socket pid=13579 comm=syz-executor.0 [ 2955.166816] FAULT_INJECTION: forcing a failure. [ 2955.166816] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2955.168786] CPU: 1 PID: 13571 Comm: syz-executor.6 Not tainted 5.10.216 #1 [ 2955.169799] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2955.171018] Call Trace: [ 2955.171418] dump_stack+0x107/0x167 [ 2955.171961] should_fail.cold+0x5/0xa [ 2955.172541] __alloc_pages_nodemask+0x182/0x600 [ 2955.173235] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2955.174123] ? find_get_entry+0x2c8/0x740 [ 2955.174732] ? lru_cache_add+0x45c/0x800 [ 2955.175349] alloc_pages_current+0x187/0x280 [ 2955.175997] __page_cache_alloc+0x2d2/0x360 [ 2955.176643] pagecache_get_page+0x2c7/0xc80 [ 2955.177293] ioctx_alloc+0x6cd/0x1e60 [ 2955.177869] ? aio_poll_complete_work+0xa00/0xa00 [ 2955.178587] __x64_sys_io_setup+0xc4/0x1f0 [ 2955.179243] do_syscall_64+0x33/0x40 [ 2955.179793] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2955.180576] RIP: 0033:0x7f300c1a9b19 [ 2955.181123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2955.183802] RSP: 002b:00007f300971f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 2955.184919] RAX: ffffffffffffffda RBX: 00007f300c2bcf60 RCX: 00007f300c1a9b19 [ 2955.185953] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000002d47 [ 2955.187015] RBP: 00007f300971f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2955.188047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2955.189078] R13: 00007ffdcc09d2af R14: 00007f300971f300 R15: 0000000000022000 23:15:17 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580104001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 23:15:17 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0201000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:15:17 executing program 7: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, r0, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffff8001, 0x60}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffff}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1ffc00}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x100}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x41}, 0x80) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000001e00)={0x1a3c, r0, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7ff, 0xf}}}}, [@NL80211_ATTR_TID_CONFIG={0x3c, 0x11d, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x200}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x20}]}]}, @NL80211_ATTR_TID_CONFIG={0x8e4, 0x11d, 0x0, 0x1, [{0x114, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffffffffba70}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe7}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf4, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x88, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x12, 0x6c, 0x48, 0x24, 0x4, 0x18, 0x12, 0x24, 0x1, 0xc, 0x28, 0x60, 0x1b, 0x16, 0xb, 0x9, 0x2, 0x5, 0x36, 0x24, 0x0, 0x30, 0x78, 0x9]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x9, 0x0, 0x175, 0x0, 0x0, 0x7fff, 0x6]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x7, 0x4}, {0x3, 0x8}, {0x7, 0xa}, {0x4, 0x2}, {0x1, 0x5}, {0x1, 0x4}, {0x3, 0xa}, {0x0, 0x6}, {0x3, 0x4}, {0x4, 0x1}, {0x2, 0x8}, {0x2, 0x1}, {0x4, 0x4}, {0x0, 0x7}, {0x6, 0x7}, {0x3}, {0x6, 0x3}, {0x4, 0x6}, {0x0, 0xa}, {0x3, 0x9}, {0x5, 0x5}, {0x3, 0x1}, {0x2, 0x3}, {0x5, 0xa}, {0x6, 0xa}, {0x2, 0x7}, {0x6, 0x1}, {0x5, 0x7}, {0x1, 0x1}, {0x6, 0x4}, {0x3, 0x7}, {0x3, 0x7}, {0x2, 0x3}, {0x1, 0x2}, {0x7, 0x8}, {0x0, 0x3}, {0x3, 0x4}, {0x7, 0x6}, {0x3, 0x2}, {0x6, 0x5}, {0x0, 0x9}, {0x7, 0x8}, {0x4, 0x3}, {0x0, 0xa}, {0x6, 0x3}, {0x6, 0xa}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x16, 0xc, 0x60, 0x48, 0x36, 0x12, 0x3, 0x1b, 0x36, 0x18, 0x6f, 0x60, 0x36, 0x1b, 0x36, 0x16, 0x24, 0x48, 0x18, 0x1, 0xb, 0x2, 0x3, 0x48, 0x9, 0x24, 0x36]}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x2, 0x3}, {0x2}, {0x4, 0x7}, {0x6, 0x3}, {0x4, 0x7}, {0x4}, {0x2, 0x1}, {0x1, 0x5}, {0x0, 0x2}, {0x5, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x12, 0x16, 0xc9726ed3a7cab26, 0x36, 0x4, 0x3, 0xb, 0x30, 0x1, 0x24, 0x30, 0x2, 0x24, 0x16]}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x7, 0x9}, {0x6, 0x6}, {0x1}, {0x0, 0x6}, {0x6, 0xa}, {0x4, 0x2}, {0x0, 0x9}, {0x4, 0x1}, {0x4, 0xa}, {0x1, 0xa}, {0x1, 0x4}]}]}]}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8000}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa9}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xffff}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x430, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x94}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1f4, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0xfffd, 0x5, 0x4, 0x2, 0x1, 0x0, 0x2]}}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x0, 0x7}, {0x5}, {0x4, 0x4}, {0x1, 0x7}, {0x1, 0x4}, {0x6, 0x2}, {0x6, 0x7}, {0x4, 0x1}, {}, {0x6, 0x8}, {0x0, 0x7}, {0x3, 0x3}, {0x6, 0x7}, {0x1, 0x2}, {0x1, 0x1}, {0x0, 0x5}, {0x6, 0x7}, {0x1, 0x3}, {0x1, 0x4}, {0x7, 0x3}, {0x7, 0x4}, {0x0, 0x8}, {0x5, 0x9}, {0x6, 0x5}]}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x3, 0x2}, {0x1, 0x3}, {0x6, 0x9}, {0x4, 0x5}, {0x3, 0x9}, {0x6, 0x7}, {0x3, 0x7}, {0x1, 0xa}]}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x1, 0x6}, {0x6, 0x9}, {0x4, 0xa}, {0x1, 0x6}, {0x4, 0x6}, {0x7, 0x1}, {0x1, 0x2}, {0x0, 0x5}, {0x3, 0x7}, {0x7, 0x9}, {0x1, 0x8}, {0x5, 0x8}, {0x4, 0x4}, {0x3, 0x8}, {0x5, 0x7}, {0x5, 0x4}, {0x4, 0x8}, {0x1, 0x9}, {0x6, 0x3}, {0x7, 0x6}, {0x6, 0x1}, {0x1, 0x7}, {0x1, 0x7}, {0x2, 0x7}, {0x0, 0x7}, {0x6, 0x1}, {}, {0x0, 0x1}, {0x6, 0x8}, {0x2, 0x8}, {0x7, 0x9}, {0x6, 0x5}, {0x2, 0x6}, {0x0, 0x9}, {0x5, 0x9}, {0x4, 0xa}, {0x6, 0x8}, {0x2, 0x3}, {0x1, 0x3}, {0x4, 0x1}, {0x5, 0x8}, {0x0, 0x5}, {0x6, 0x7}, {0x0, 0x5}, {}, {0x4, 0x5}, {0x4, 0x7}, {0x2, 0x8}, {0x4, 0x7}, {0x6, 0x7}, {0x0, 0x2}, {0x6, 0x5}, {0x6, 0x1}, {0x0, 0x6}, {0x3, 0x4}, {0x2, 0x1}, {0x7, 0x2}, {0x1, 0x4}, {0x4, 0x3}, {0x5, 0x1}, {0x5, 0x4}, {0x6, 0x9}, {0x0, 0x8}, {0x2, 0x3}, {0x0, 0x5}, {0x5}, {0x6, 0x7}, {0x2, 0x8}]}]}, @NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x12, 0x5, 0x2b, 0x12, 0x3, 0x48, 0x60, 0xb, 0x6, 0x0, 0xc, 0xc, 0x2, 0x24, 0x18, 0xc, 0x12, 0x9, 0x36, 0x3e, 0x3, 0x5, 0x18, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x1, 0x9, 0x1, 0x1e9a, 0x8, 0x6, 0x3]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x6, 0xc, 0x22, 0x6, 0xc, 0x1, 0x60, 0x12, 0x48, 0x6c, 0x36, 0x4, 0x48, 0x36, 0x0]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x4, 0x9}, {0x4, 0x7}, {0x2, 0x6}, {0x4, 0x9}, {}, {0x6, 0x9}, {0x0, 0xa}, {0x7, 0x3}, {0x7, 0x9}, {0x5, 0x2}, {0x7, 0x5}, {0x4, 0x5}, {0x2, 0x6}, {0x7, 0x1}, {0x5, 0x7}, {0x7, 0x3}, {0x7, 0x8}, {0x2, 0x6}, {0x2, 0x3}, {0x5, 0x4}, {0x5, 0x9}, {0x7, 0x2}, {0x0, 0x5}, {0x5, 0x3}, {0x0, 0x8}, {0x3, 0x9}, {0x6, 0x5}, {0x0, 0x6}, {0x1, 0x4}, {0x5, 0x8}, {0x2, 0x3}, {0x5, 0x8}]}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x7ff, 0x7, 0x3, 0x1ff, 0x1, 0xff, 0xd4b]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3, 0x81, 0x4, 0xfff7, 0x1, 0x7ff, 0x5]}}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8000, 0x7, 0x7, 0x8001, 0x7, 0x8001, 0x7fff]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x60, 0xb, 0xc, 0x5c9eda4003c3e5d6, 0x1b, 0xc, 0x6, 0x6, 0x30, 0xb, 0x12, 0x1, 0x5, 0x24, 0x1, 0x12, 0x1]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x4, 0x100, 0x3, 0xfc00, 0x5, 0x1f, 0x1000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x9, 0x5, 0x3ff, 0x5, 0x1, 0x6, 0xa77]}}]}, @NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x45, 0x2, [{0x7, 0x5}, {0x3, 0x6}, {0x0, 0x6}, {0x0, 0x6}, {0x7, 0x9}, {0x5}, {0x6, 0xa}, {0x7, 0x1}, {}, {0x5, 0x9}, {0x0, 0xa}, {0x7, 0x8}, {0x7, 0x7}, {0x1, 0x6}, {0x3, 0x4}, {0x7, 0x3}, {0x4, 0x6}, {0x2, 0x6}, {0x5, 0x5}, {0x6, 0x6}, {0x3}, {0x7, 0x9}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x4}, {0x6, 0x1}, {0x7, 0x4}, {0x3}, {0x5, 0x5}, {0x5, 0x9}, {0x5, 0xa}, {0x0, 0x1}, {0x4, 0xa}, {0x3, 0x1}, {0x6, 0x2}, {0x7, 0x5}, {0x1, 0x2}, {0x2, 0xa}, {0x7, 0x9}, {0x1, 0x7}, {0x1, 0x7}, {0x7, 0x5}, {0x7, 0x1}, {0x0, 0x5}, {0x4, 0xa}, {0x4, 0x9}, {0x1, 0xa}, {0x0, 0x5}, {0x4, 0x6}, {0x5, 0x1}, {0x0, 0x9}, {0x1, 0x5}, {0x4, 0x9}, {0x1, 0xd}, {0x0, 0x6}, {0x0, 0x4}, {0x4, 0x2}, {0x5, 0x7}, {0x1, 0x8}, {0x1, 0xa}, {0x0, 0x4}, {0x1, 0x2}, {0x0, 0x5}, {0x4, 0x6}, {0x7, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x6, 0x1, 0x4, 0x20, 0x9, 0x1ff, 0x1]}}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x208, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x4, 0x1f, 0x101, 0x8, 0x1, 0xf000, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x4, 0x0, 0xc440, 0x5, 0xe119, 0x6, 0x3]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x0, 0x3, 0x3f, 0x4, 0x3, 0x6, 0x16, 0xb, 0x3, 0x6c, 0x4, 0x24, 0x12, 0xc, 0x9, 0xd9ffcbb8f75cf681]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x93, 0x400, 0x89f1, 0x9, 0x849, 0x5, 0x1, 0x3]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x9, 0x12, 0x18, 0x2, 0x16, 0x48, 0x36, 0x1b, 0x6c, 0x6, 0x60, 0x1, 0x1, 0x36, 0x48, 0x9, 0x24, 0x1b, 0x12, 0x36, 0x24, 0x6c, 0x2, 0x16, 0xc, 0x4, 0x12]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xffff, 0x9, 0x80, 0x8, 0xf6bc, 0x84, 0x3f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd59a, 0x9, 0x1, 0x8, 0x2, 0xff85, 0x1ff, 0x6cd]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x33, 0x2, [{0x1, 0x1}, {0x3, 0x6}, {0x6, 0xa}, {0x0, 0x5}, {0x4, 0x4}, {0x1, 0x3}, {0x3, 0x1}, {0x0, 0x9}, {0x6}, {0x1, 0x3}, {0x0, 0x7}, {0x3, 0x6}, {0x3, 0x4}, {0x6, 0x2}, {0x4, 0x4}, {0x3, 0x9}, {0x1, 0x8}, {0x1, 0x3}, {0x7, 0x8}, {0x6, 0x2}, {0x2, 0x8}, {0x0, 0x3}, {0x6, 0x4}, {0x2}, {0x0, 0x1}, {0x6, 0xa}, {0x0, 0x1}, {0x5, 0x5}, {0x2, 0xa}, {}, {0x2, 0x9}, {0x0, 0x4}, {0x5, 0x4}, {0x7, 0x4}, {0x7, 0x8}, {0x6, 0x6}, {0x3, 0x1}, {0x2, 0x8}, {0x6, 0x2}, {0x3, 0x3}, {0x1, 0x1}, {0x0, 0x8}, {0x7, 0x8}, {0x7, 0x9}, {0x0, 0xa}, {0x4, 0x8}, {0x2, 0x8}]}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4000, 0xfffa, 0x951b, 0x9, 0x6, 0x800, 0x4, 0x7]}}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x6, 0x6}, {0x7, 0x3}, {0x1, 0x6}, {0x3, 0x9}, {0x6}, {0x3, 0x4}, {0x7, 0x8}, {0x1, 0x6}, {0x3, 0x5}, {0x1, 0x6}, {0x5, 0x8}, {0x0, 0x2}, {0x3, 0x7}, {0x5, 0x5}, {0x1, 0x9}, {0x3, 0x6}, {0x4, 0x4}, {0x0, 0x2}, {0x1, 0x9}, {0x5, 0xa}, {0x2, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x9, 0x3, 0x4, 0x3, 0x800, 0x126c, 0x2]}}]}, @NL80211_BAND_2GHZ={0xd0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3dd, 0xeaf, 0x8, 0x1, 0x0, 0x8000, 0x1f, 0x9]}}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x3, 0x1}, {0x6, 0x4}, {0x2, 0x2}, {0x6, 0x9}, {0x1}, {0x6, 0x8}, {0x6, 0xa}, {}, {0x2, 0x8}, {0x5, 0x7}, {0x0, 0x4}, {0x6, 0x6}, {0x5, 0x9}, {0x5, 0x4}, {0x0, 0x9}, {0x7, 0x2}, {0x3}, {0x7, 0x7}, {0x7, 0x5}, {0x1, 0x2}, {0x3, 0x7}, {0x1, 0x2}, {0x7, 0x6}, {0x0, 0x6}, {0x6, 0x9}, {0x6}, {0x1, 0x7}, {0x2, 0x4}, {0x6}, {0x3, 0x3}, {0x6, 0x5}, {0x4, 0x7}, {0x1}, {0x1, 0x6}, {0x5, 0x9}, {0x0, 0xa}, {0x7, 0x6}, {0x0, 0x1}, {0x0, 0x4}, {}, {0x2, 0x1}, {0x0, 0x9}, {0x7, 0x5}, {0x7, 0x2}, {0x0, 0x7}, {0x3, 0x9}, {0x3}, {0x2, 0x8}, {0x1, 0x9}, {}, {0x3, 0xa}, {0x6, 0x7}, {0x6, 0x8}, {0x2, 0xa}, {0x4, 0x9}, {0x5, 0x4}, {0x0, 0x2}, {0x7, 0x8}, {0x3}, {0x4}, {0x7, 0xa}, {0x0, 0x9}, {0x3, 0x7}, {0x1, 0x9}, {0x6, 0x2}, {0x6, 0x4}, {0x6, 0x8}, {0x6, 0x3}, {0x0, 0x6}]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x6c, 0xb, 0x60, 0x30, 0x1b, 0x18, 0x68, 0x5, 0x1b, 0x6c, 0x4, 0x60, 0x36, 0x60, 0xc, 0x4, 0x36, 0x9, 0x1b, 0x18, 0xc, 0x2, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3f, 0x5, 0x5, 0x9, 0x4, 0x5, 0x3, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x0, 0xb7ef, 0x2, 0xf2e, 0x100, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x12, 0x82, 0xffff, 0x0, 0x0, 0x3, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x80, 0xc9b, 0x7, 0x4, 0xfff8, 0x200, 0x5]}}]}]}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xcc}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf1}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xaa}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7f}]}, {0x204, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x9c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x2, 0x2e, 0x5, 0xb, 0x48, 0x1b, 0x1b, 0x2, 0x6c, 0x1c, 0xc, 0x2, 0x16, 0x36, 0x48, 0xc, 0x5, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x6, 0x1}, {0x1, 0x9}, {0x4, 0x2}, {0x0, 0x1}, {0x7, 0x1}, {0x0, 0x9}, {0x0, 0x4}, {0x0, 0x2}, {0x2, 0xa}, {0x5, 0x6}, {0x5}, {0x3, 0x3}, {0x6, 0x8}, {0x7, 0x8}, {}, {0x0, 0x3}, {0x3}, {0x3, 0x7}, {0x2, 0x8}, {0x5, 0x9}, {0x3}, {0x5, 0x3}, {0x1, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3ff, 0xfff8, 0xd1, 0x3, 0x7ff, 0x7, 0x100, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x80, 0x6, 0x81, 0x401, 0x0, 0x1, 0x2fe, 0xef5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xfffd, 0x101, 0x4, 0x1, 0x0, 0x3, 0x9]}}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8000}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x114, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x4, 0x2, 0x36, 0x4, 0x12, 0x2, 0xb, 0x60, 0x36]}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x7, 0x6}, {0x0, 0x9}, {0x1, 0x4}, {0x6, 0x8}, {0x5, 0x6}, {0x5}, {0x4, 0xa}, {0x1, 0x8}, {0x3, 0x2}, {0x0, 0x5}, {0x1, 0x3}, {0x3, 0x2}, {0x0, 0x3}, {0x1, 0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x6}, {0x0, 0x1}, {0x4, 0x3}, {0x6, 0x6}, {0x7}, {0x2, 0x6}, {0x3, 0x7}, {0x5, 0x8}, {0x0, 0x4}, {0x0, 0x1}, {0x0, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1, 0x5, 0xb32, 0x7, 0x7ff, 0x70b, 0x2]}}]}, @NL80211_BAND_2GHZ={0x78, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x5, 0x0, 0x12, 0x6a, 0x16, 0x1, 0x16, 0x6c, 0x6, 0x16, 0x3, 0x9, 0xb, 0x9, 0x30, 0x30]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x18, 0x6c, 0x24, 0x6c, 0x30, 0xc, 0x18, 0x9, 0x9, 0xc, 0x4, 0x6, 0x1, 0x5, 0x4, 0x24, 0x48, 0x24, 0x1, 0x3, 0xb, 0x36, 0x61]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x881, 0x8, 0x0, 0x3, 0x4, 0xfff, 0x5]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x6c, 0x60, 0x60, 0x30, 0x5, 0x48, 0x48, 0x1, 0x18]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x24, 0x5, 0x16, 0x9, 0x30, 0xb, 0x48, 0x1, 0x3, 0x5, 0x1b, 0x2, 0x18, 0x24, 0x6, 0x2, 0xc, 0x6, 0x4, 0x6c, 0x5]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x48, 0x18, 0x60, 0xc, 0xb, 0x8d, 0x12, 0x3, 0x18, 0x12, 0x12]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x24, 0x4, 0x5, 0x4, 0x1b, 0x4, 0xb, 0x36, 0x16, 0x3, 0x12, 0x2, 0x48, 0x24, 0x24, 0x0, 0x5, 0x60, 0x30, 0xc, 0x5, 0x6]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x80000001}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100000001}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2b}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x86}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x71}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}]}, {0x9c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x8c, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9e8a, 0x0, 0x80, 0x0, 0x3, 0x1, 0x2, 0x5]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x5, 0x0, 0x2, 0x24, 0x6c, 0x12, 0x3, 0x5, 0x16, 0x5, 0x12, 0x2, 0x9]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x98aa2e570a8e840, 0x3, 0x0, 0x1, 0x1, 0x1b, 0x12, 0x30, 0xb, 0xc, 0x30, 0x1b, 0x6c, 0x2, 0x24, 0xe, 0x18, 0x60, 0x60, 0x36, 0x5, 0x2]}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x31, 0x2, [{0x6, 0x6}, {0x7, 0x5}, {0x3, 0xa}, {0x6, 0x4}, {0x1, 0x9}, {0x0, 0xa}, {0x6, 0x1}, {0x0, 0x3}, {0x6, 0x4}, {0x0, 0x6}, {0x5, 0x5}, {}, {0x7, 0x8}, {0x6, 0x9}, {0x6, 0x4}, {0x4, 0x3}, {0x1, 0x7}, {0x2, 0x7}, {0x1, 0x8}, {0x6, 0xa}, {0x0, 0x3}, {0x3, 0x5}, {0x2, 0x8}, {0x1, 0xa}, {0x1, 0xa}, {0x1, 0x1}, {0x3, 0x5}, {}, {0x4, 0x9}, {0x2, 0x3}, {0x0, 0x2}, {0x1, 0x6}, {0x6, 0x8}, {0x6, 0x3}, {0x6, 0x9}, {0x6, 0x4}, {0x6, 0x5}, {0x2}, {0x5, 0x1}, {0x1, 0x7}, {0x2, 0x5}, {0x3, 0x3}, {0x1, 0x7}, {0x3, 0x2}, {0x5, 0x7}]}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0xbbc, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0xd4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xa80}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fff}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x98, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0xfffc, 0x6, 0x2, 0x8eb, 0x3f, 0xcf, 0x462f]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x753e, 0x3, 0xa9fd, 0x1, 0x1, 0x2, 0x7]}}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x7, 0x8}, {0x2, 0x3}, {0x3, 0x1}, {0x5, 0x8}, {0x1, 0x4}, {0x0, 0x1}, {0x3, 0x3}, {0x1, 0x8}, {0x6, 0x7}, {0x6, 0xa}, {0x7, 0x3}, {0x1, 0xa}, {0x6, 0x5}, {0x1, 0x1}, {0x1, 0xa}, {0x4, 0x5}, {0x0, 0x7}, {0x3, 0x6}, {0x0, 0x1}, {0x7, 0x7}, {0x1, 0x5}, {0x0, 0x8}, {0x0, 0x6}, {0x1}, {0x0, 0x2}, {0x2, 0x6}, {0x1, 0x6}, {0x6, 0x4}, {0x4, 0x5}, {0x0, 0x9}, {0x1, 0x8}, {0x1, 0x1}, {0x0, 0x6}, {0x6, 0x9}, {0x1, 0x2}, {0x2, 0x6}, {0x0, 0x9}, {0x1, 0x1}, {0x7, 0x1}, {0x0, 0x9}, {0x0, 0x7}, {0x5, 0x2}, {0x0, 0x9}, {0x4, 0x9}, {0x1}, {0x0, 0x3}, {0x1, 0x3}, {0x3, 0x2}, {0x1, 0x4}, {0x5, 0x2}, {0x1}, {0x4, 0x8}, {0x3, 0xa}, {0x0, 0x8}, {0x0, 0x7}, {0x2, 0x5}, {0x6, 0x1}, {0x1, 0x8}, {0x6, 0x5}, {0x7, 0x8}, {0x7, 0x8}, {}, {0x4, 0x8}, {0x0, 0x9}, {0x0, 0x2}, {0x1, 0x6}, {0x0, 0x9}, {0x7, 0x3}, {0x0, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x1, 0x0]}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x3, 0x2}, {0x7, 0x8}, {0x0, 0x7}]}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x344, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x340, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1d, 0x2, [{0x3}, {0x4, 0x7}, {0x6, 0x9}, {0x0, 0x7}, {0x5, 0x6}, {0x1, 0x3}, {0x4, 0x5}, {0x7, 0x3}, {0x7, 0x6}, {0x0, 0x3}, {0x6, 0x1}, {0x7, 0x3}, {0x0, 0x7}, {0x6, 0x4}, {0x1, 0x3}, {0x1, 0x5}, {0x5, 0x4}, {0x0, 0x2}, {0x5, 0x5}, {0x0, 0xa}, {0x7, 0x4}, {}, {0x3, 0x3}, {0x6, 0x5}, {0x6, 0x7}]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x16, 0x6, 0x1, 0x1, 0x6c, 0xc, 0x36, 0x18, 0x16, 0x1b, 0x12, 0x10, 0x24, 0x36, 0x6, 0x36, 0x5, 0x60, 0x16, 0x3, 0x18, 0x48, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x40, 0x5, 0x3112, 0x7, 0xfffb, 0x200, 0x4, 0x5]}}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x5, 0x7}, {0x7, 0x5}, {0x6}, {0x6, 0x9}, {0x0, 0x1}, {0x4, 0x4}, {0x7, 0x3}, {0x1, 0xa}, {0x6, 0x9}, {0x0, 0x8}, {0x7, 0xa}, {0x0, 0x3}, {0x0, 0x7}, {0x2, 0x4}, {0x1, 0x4}, {0x3, 0x8}, {0x0, 0x3}, {0x6, 0x9}, {0x1, 0xa}, {0x2, 0x2}, {0x3, 0x8}, {0x1, 0x2}, {0x7, 0x1}, {0x7, 0x3}, {0x0, 0x3}, {0x6, 0x8}, {0x6, 0x7}, {0x2, 0x2}, {0x1, 0xa}, {0x7, 0x7}, {0x7, 0x3}, {0x0, 0x3}, {0x7, 0x2}, {0x5, 0x6}, {0x5, 0x9}, {0x4, 0x4}, {0x7}, {0x5, 0x4}, {0x1, 0x8}, {0x2, 0xa}, {0x1, 0x9}, {0x0, 0x3}, {0x3, 0x8}, {0x2, 0x9}, {0x6}, {0x6, 0x6}, {0x1, 0x1}, {0x7, 0x8}, {0x1, 0x3}, {0x5, 0x8}, {}, {0x6, 0x5}, {0x5, 0x3}, {0x4, 0x8}, {0x1, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8000, 0x2, 0x8001, 0x7, 0x3f, 0x1, 0x7f]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x1, 0x12, 0x6, 0x18, 0x60, 0x24, 0x9, 0x2, 0x16, 0x4, 0xa0, 0x1b, 0x2, 0x5, 0x12, 0x4, 0xc, 0x6, 0x30, 0x1b, 0x6c, 0x4]}]}, @NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x9, 0x0, 0x7, 0x1, 0x1000, 0x1, 0xfffc]}}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x9, 0xc, 0xc, 0x18, 0x5, 0x1]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x4, 0x12, 0x1b, 0x12, 0x30, 0x18, 0x60, 0x48, 0x18, 0x30, 0x48, 0x6]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x401, 0x1f, 0x1, 0x3, 0x0, 0x6, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x1f, 0x6, 0x1, 0x6, 0x9, 0x3, 0xffff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x401, 0x7c, 0x9, 0x0, 0x6, 0xf40, 0x9]}}]}, @NL80211_BAND_5GHZ={0xbc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x18, 0x28, 0x5, 0x36, 0x1b]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0xb, 0x36, 0x48, 0x5, 0x36, 0x9, 0x36, 0x3, 0x1, 0x30, 0x30, 0x2, 0x5, 0x0, 0x36, 0x1, 0xc]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x6, 0x9}, {0x7, 0x8}, {0x1, 0x2}, {0x2, 0x2}, {0x4}, {0x3, 0xa}, {}, {0x2, 0x5}, {0x7, 0x2}, {0x1, 0x2}, {0x4, 0x8}, {0x6, 0xa}, {0x1, 0x5}, {0x6, 0x8}, {0x0, 0x6}, {0x5, 0x1}, {0x5, 0xa}, {0x1, 0x4}, {0x6, 0x8}, {0x5, 0x6}, {0x1, 0x8}, {0x4, 0x3}, {0x0, 0x2}, {0x3, 0x5}, {0x7, 0x8}, {0x2, 0x3}, {0x2}, {0x5, 0x9}, {0x5, 0x5}, {0x7, 0x6}, {0x6, 0x1}, {0x7, 0x5}, {0x1, 0x2}, {0x0, 0xa}, {0x0, 0x1}, {0x6, 0x2}, {0x0, 0x1}, {0x5, 0x8}, {0x0, 0x5}, {0x7, 0x4}, {0x0, 0x9}, {0x1, 0x1}, {0x2, 0x9}, {0x6, 0x3}, {0x1}, {0x1, 0x4}, {0x7, 0x2}, {0x4}, {0x1, 0xa}, {0x6, 0xa}, {0x1}, {0x1, 0x1}, {0x0, 0x4}, {0x6, 0x8}, {0x0, 0xa}, {0x4, 0x1}, {0x0, 0x7}, {0x5, 0x5}, {0x2, 0x5}, {0x0, 0xa}, {0x2}, {0x1, 0x7}, {0x1, 0x6}, {0x3, 0x8}, {0x3, 0xa}, {0x0, 0x9}, {0x6, 0x3}, {0x0, 0x5}, {0x3, 0x6}, {0x7, 0x6}, {0x6, 0x9}, {0x5}, {0x3, 0x1}, {0x1, 0x6}]}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x5, 0x7}, {0x1}, {0x4, 0x3}, {0x1, 0x2}, {0x6, 0x6}, {0x5, 0x6}, {0x0, 0xa}, {0x6, 0x6}, {0x3, 0xa}, {0x4, 0x8}, {0x3}, {0x1, 0x1}, {0x0, 0x5}, {}, {0x7, 0xa}, {0x5, 0x4}, {0x2, 0x9}, {0x5, 0xa}, {0x0, 0xa}, {0x6, 0x1}, {0x5}, {0x6, 0x4}, {0x1, 0x7}, {0x5, 0x4}, {0x3, 0x2}, {0x5, 0x7}, {0x3, 0x9}, {0x7}, {0x0, 0x6}, {0x7, 0x4}, {0x4, 0x1}, {0x5, 0x4}, {0x0, 0x6}, {0x5}, {0x1, 0xa}, {0x5, 0x9}, {0x4, 0x4}, {0x2, 0x5}, {0x7}, {0x1, 0x9}, {0x2, 0x1}, {0x5, 0x3}, {0x2, 0x3}, {0x3, 0x2}, {0x2, 0x8}, {0x0, 0x2}, {0x6, 0x4}, {0x2, 0x6}, {0x6, 0x9}, {0x4, 0x8}, {0x3, 0x4}, {0x0, 0x2}, {0x1}]}]}, @NL80211_BAND_5GHZ={0x7c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x36, 0x6]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0x96d3, 0x101, 0x9, 0x7, 0x1, 0x5, 0x1ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x79f, 0x4, 0x40, 0x3, 0x6, 0xabc, 0x1f, 0x200]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x1, 0x9, 0x60, 0x3, 0x30, 0xb, 0x12, 0x4, 0x30, 0x48, 0x36, 0x4, 0x30, 0x0, 0x3, 0x6c, 0x6c, 0x1, 0x9, 0x16, 0x9, 0x0, 0x6c, 0x2, 0x1, 0x12, 0x18, 0x2]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x4, 0x6, 0x1b, 0x12, 0x1b, 0x7f, 0x1b, 0x1b, 0xb, 0xc, 0xb, 0x5, 0x4, 0x16, 0x1, 0x5, 0x6, 0x5, 0x0, 0x1, 0x1, 0xb, 0x12, 0x48, 0x24]}]}, @NL80211_BAND_5GHZ={0xd4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1d, 0x2, [{0x7, 0x7}, {0x4, 0xa}, {0x7, 0x2}, {0x4, 0x3}, {0x2, 0x4}, {0x1, 0x8}, {0x4, 0x2}, {0x3, 0x4}, {0x1, 0xa}, {0x4, 0x2}, {0x5, 0x8}, {0x6, 0x4}, {0x2}, {0x0, 0x9}, {0x3, 0x4}, {0x3, 0x1}, {0x5, 0x7}, {0x6, 0x4}, {0x0, 0x9}, {0x0, 0x5}, {0x4, 0x3}, {0x5, 0x8}, {0x4, 0xa}, {0x7, 0x7}, {0x2, 0x4}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb16d, 0x400, 0x5, 0x88, 0x7ff, 0x4, 0x1ff, 0x8000]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x60, 0x30, 0x24, 0x1, 0xc]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x12, 0x2, 0x60, 0x1, 0x4, 0x36, 0x24, 0x48, 0x6, 0x3, 0xc, 0x78, 0x9, 0x6, 0x60, 0x1, 0x1, 0x6c, 0x4, 0x4, 0xb, 0x12, 0x4, 0x1b]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x5, 0x5}, {0x5, 0x1}, {0x3, 0x4}, {0x1, 0x9}, {0x3}, {0x0, 0x7}, {0x5, 0x4}, {0x4, 0x8}, {0x1, 0x8}, {0x4, 0x5}, {0x7, 0x9}, {0x4, 0x4}, {0x2, 0x5}, {0x2, 0x9}, {0x6}, {0x7, 0x4}, {0x1, 0x7}, {0x6, 0x6}, {0x5, 0x4}, {0x5, 0x7}, {0x2, 0xa}, {0x3, 0x6}, {0x0, 0x7}, {0x0, 0x2}, {0x1, 0x2}, {0x4, 0x1}, {0x7, 0x7}, {0x1, 0x4}, {0x7, 0x5}, {0x5, 0x3}, {0x0, 0x3}, {0x0, 0x3}, {0x2, 0x1}, {0x5, 0x7}, {0x4, 0x9}, {0x3, 0x4}, {0x2, 0xa}, {0x1, 0x1}, {0x5, 0x7}, {0x0, 0xa}, {0x1, 0x6}, {0x1, 0x9}, {0x1, 0x2}, {0x6, 0x1}, {0x0, 0x6}, {0x1, 0x9}, {0x2, 0x8}, {0x6, 0x4}, {0x2, 0xa}, {0x3, 0xa}, {0x1, 0x4}, {0x2, 0x1}, {0x3, 0xa}, {0x4, 0x6}, {0x4, 0x7}, {0x4, 0x7}, {0x2, 0x1}, {0x1, 0x1}]}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x1, 0x7}, {0x4, 0x6}, {0x3, 0x6}, {0x3, 0x6}, {0x4, 0x7}, {0x7, 0x5}, {0x4}, {0x1, 0x7}, {0x7, 0x9}, {0x0, 0x1}, {0x4, 0x1}, {0x7, 0x3}, {0x6, 0x5}, {0x6, 0x6}, {0x1, 0x9}, {0x0, 0x7}, {0x1, 0x9}, {0x0, 0x2}, {0x5, 0x9}, {0x1, 0x5}, {0x6, 0x7}, {0x7, 0xa}, {0x4, 0xa}, {0x0, 0x3}, {0x0, 0x8}, {0x2, 0xa}, {0x0, 0x5}, {0x7, 0x8}, {0x4, 0xa}, {0x5, 0x1}, {0x4, 0x4}, {0x6, 0x1}, {0x7, 0x2}, {0x1, 0x7}, {0x7, 0x4}, {0x1, 0x5}, {0x3, 0x6}, {0x4, 0x9}]}]}]}]}, {0x4}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x22}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xaa}]}, {0x2b8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe8}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x278, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x9c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x1, 0x7, 0x4, 0x9, 0x1, 0x1b, 0x12, 0xb, 0x1b, 0x1, 0x6]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x49, 0x2, [{0x7, 0x5}, {0x4, 0x4}, {0x0, 0x4}, {0x1, 0x5}, {0x5, 0x1}, {0x3, 0x2}, {0x4, 0x1}, {0x4, 0xa}, {0x2, 0xa}, {0x2, 0x8}, {0x6, 0x6}, {0x0, 0x6}, {0x4, 0x4}, {0x6, 0x6}, {0x0, 0x8}, {0x1, 0x9}, {0x0, 0x1}, {0x0, 0x9}, {0x2, 0x5}, {0x3, 0x4}, {0x3}, {0x1, 0x4}, {0x7, 0x8}, {}, {0x7, 0x9}, {0x6, 0x6}, {0x5, 0x6}, {0x3, 0x4}, {0x7, 0x4}, {0x3, 0x8}, {0x7, 0x6}, {0x4, 0x2}, {0x0, 0x9}, {0x4, 0x9}, {0x6, 0x6}, {0x0, 0x9}, {0x1, 0x1}, {0x5, 0x3}, {0x1, 0x2}, {0x6, 0x8}, {0x5, 0x1}, {0x1, 0x1}, {0x1}, {0x5, 0x4}, {0x4, 0x9}, {0x4}, {}, {0x3, 0x4}, {0x0, 0x9}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x5}, {0x2, 0x6}, {0x5, 0x8}, {0x6, 0x9}, {0x2, 0x3}, {0x0, 0x3}, {0x6, 0x9}, {0x4, 0x1}, {0x4, 0x3}, {0x0, 0x9}, {0x1, 0x3}, {0x0, 0x5}, {0x4, 0x1}, {0x0, 0x8}, {0x2, 0x5}, {0x4, 0x2}, {0x7, 0x5}, {0x6, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xcce2, 0x0, 0x3, 0x400, 0x2, 0x5, 0xfff8, 0xffff]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x48, 0x1, 0xb, 0x1, 0x2, 0x6c, 0x18, 0x1]}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x2, 0xb, 0x4, 0x58, 0x6, 0x60, 0x12, 0xb, 0x12, 0x18, 0x5, 0x3b, 0x2, 0x24]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x48, 0x20, 0x6c, 0x1, 0x16, 0x48, 0x16, 0x32, 0x60, 0x16, 0x68, 0x1, 0x2, 0x9, 0x5, 0x1, 0x16, 0x16]}]}, @NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xba3e, 0x72eb, 0xd9, 0x66, 0x70c1, 0x1, 0x80, 0x2]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x12]}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x0, 0x6}, {0x1}, {0x7, 0x9}, {0x3}, {0x7, 0x3}, {0x7, 0x5}, {0x7, 0x4}, {0x2}, {0x0, 0xa}, {0x7, 0x5}, {0x0, 0x2}, {0x3, 0x7}, {0x1, 0x9}, {0x7, 0x1}, {0x7, 0x1}, {0x4, 0x7}, {0x2, 0xa}, {0x7, 0x9}, {}, {0x3, 0x2}, {0x0, 0x1}, {0x2, 0x4}, {0x0, 0xa}, {0x2, 0x4}, {0x5, 0x8}, {0x1, 0x5}, {0x0, 0x4}, {0x6, 0x6}, {0x0, 0x9}, {0x7}, {0x2, 0x9}, {0x0, 0x3}, {0x2, 0x5}, {0x0, 0x6}, {0x2}, {0x7, 0x4}, {0x2, 0x2}, {0x3, 0x2}, {0x7, 0x5}, {0x6, 0xa}, {0x4, 0x2}, {0x6, 0x5}, {0x6, 0x5}, {0x1, 0xa}, {0x1, 0x3}, {0x7}, {0x2, 0x4}, {0x5, 0x8}, {0x6, 0x4}, {0x4, 0x3}, {0x2, 0x9}, {0x0, 0x2}, {0x6, 0x8}, {0x1}, {0x3, 0x8}, {0x0, 0x3}, {0x6, 0x6}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x0, 0x3, 0x36, 0x6c, 0x1, 0x36, 0x30, 0x9, 0x2, 0x18, 0x6c, 0x12, 0x26, 0xb, 0x4, 0x3]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x36]}]}, @NL80211_BAND_60GHZ={0x9c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2e, 0x2, [{0x5, 0x7}, {0x2, 0x6}, {0x2, 0x2}, {0x1, 0x7}, {0x2, 0x9}, {0x6, 0x5}, {0x6, 0x1}, {0x5, 0x1}, {0x3, 0x8}, {0x6, 0x4}, {0x6, 0x6}, {0x2, 0xa}, {0x6, 0x5}, {0x0, 0x1}, {0x0, 0x5}, {0x7, 0x3}, {0x1, 0x6}, {0x1, 0x8}, {0x5, 0x7}, {0x4, 0x4}, {0x1}, {0x0, 0x4}, {0x2, 0x8}, {0x5, 0xa}, {0x0, 0x1}, {0x5, 0x8}, {0x1, 0x9}, {0x4, 0x8}, {0x3, 0x2}, {0x4, 0x6}, {0x5, 0x5}, {0x1, 0x8}, {0x6, 0x5}, {0x1, 0x8}, {0x3, 0x2}, {0x7, 0x5}, {0x6, 0x4}, {0x6, 0xa}, {}, {0x5, 0x8}, {0x4, 0x2}, {0x1, 0x7}]}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x4, 0xa}, {0x1, 0xa}, {0x6, 0x5}, {0x4, 0x6}, {0x4, 0x3}, {0x5, 0x1}, {0x7}, {0x6, 0x5}, {0x3, 0x6}, {0x0, 0x6}, {0x1, 0x4}, {0x1, 0x7}, {0x5, 0x4}, {0x2, 0x3}, {0x2, 0x5}, {0x5, 0x4}]}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x5, 0x8}, {0x6, 0x5}, {0x7, 0x5}, {0x1, 0x3}, {0x7, 0x2}, {0x0, 0x8}, {}, {0x3, 0x9}, {0x6, 0x5}, {0x6, 0x9}, {0x7, 0x5}, {0x7, 0x7}, {0x0, 0x8}, {0x6, 0x9}, {0x1, 0x5}, {0x1, 0x3}, {0x6, 0x3}, {0x3, 0x9}, {0x1, 0x4}, {0x6, 0x9}, {0x1, 0xa}, {0x2, 0x8}, {0x0, 0x2}, {0x6, 0x7}, {0x1, 0x9}, {0x5, 0x7}, {0x4, 0x7}, {0x4, 0x6}, {0x5}, {0x7, 0x4}, {0x6, 0x9}, {0x3, 0xa}, {0x1, 0x1}, {0x7, 0x1}, {0x0, 0x4}, {0x0, 0x5}, {0x1, 0x4}, {0x1}, {0x5, 0x5}, {0x2, 0x3}, {0x2, 0x1}, {0x4, 0x7}, {0x1, 0x1}]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x2, 0x5, 0x2, 0x2, 0xc8d9e59f21282564, 0xc, 0x1, 0x1, 0x4, 0x30, 0x6c, 0x4, 0x69, 0x4, 0x3, 0x36, 0x1, 0x60, 0x3, 0x524f9803ea6baa80, 0x1, 0x4, 0x48, 0x12, 0x24, 0x4, 0x3, 0xb, 0x30]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x1, 0x6}, {0x4, 0x4}, {0x1, 0x3}, {0x5, 0x6}, {0x5, 0xa}, {}, {0x3, 0x2}, {0x0, 0x1}, {0x4, 0x7}, {0x5, 0x5}, {0x1, 0x1}, {0x1, 0x7}, {0x3, 0x4}, {0x0, 0x6}, {0x0, 0x3}, {0x1, 0x5}, {0x4, 0x4}, {0x6, 0x8}, {0x0, 0x6}, {0x0, 0x2}, {0x0, 0x5}, {0x6, 0x6}, {0x5, 0x9}, {0x4, 0x9}, {0x6, 0x6}, {0x7, 0x8}, {0x7, 0x5}, {0x0, 0x2}, {0x3, 0x9}, {0x6, 0xa}, {0x2, 0x3}, {0x1, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x401, 0x1ff, 0xec, 0x7, 0x401, 0x1, 0x1]}}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x25, 0x2, [{0x5, 0x2}, {0x2, 0x7}, {0x4, 0x8}, {0x5, 0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x7, 0x6}, {0x0, 0x5}, {0x3, 0x4}, {0x2, 0xa}, {0x5, 0x5}, {}, {0x1, 0x6}, {0x0, 0x4}, {0x2, 0x7}, {0x4, 0x5}, {0x2, 0x1}, {0x6, 0x3}, {0x5, 0x9}, {0x2, 0x8}, {0x3, 0xa}, {0x6, 0x9}, {0x4, 0x9}, {0x7, 0x1}, {0x6, 0x4}, {0x2}, {0x3}, {}, {0x1, 0x3}, {0x7, 0x7}, {0x1}, {0x1, 0x5}, {0x0, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x52}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xca}]}, {0xb0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xa0, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x27, 0x2, [{0x5, 0x8}, {0x7, 0x5}, {0x1}, {0x3, 0x7}, {0x1, 0x2}, {0x1, 0x9}, {0x7, 0x2}, {0x1, 0x5}, {0x7, 0x4}, {0x5, 0x3}, {0x2, 0x1}, {0x2, 0x8}, {0x2, 0xa}, {0x3, 0x3}, {0x0, 0x9}, {0x0, 0x5}, {0x1, 0x4}, {0x0, 0x8}, {0x2}, {0x7, 0x1}, {0x7, 0x2}, {0x2, 0x3}, {0x1, 0x8}, {0x2, 0x2}, {0x5, 0xa}, {0x2, 0x4}, {0x3, 0x6}, {0x4, 0xa}, {0x0, 0x1}, {0x7, 0x3}, {0x7, 0x9}, {0x3, 0xa}, {0x2, 0x7}, {0x3, 0x5}, {0x4, 0x5}]}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x5, 0xb, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xffff, 0xbf2, 0x3, 0x9, 0x6, 0x7, 0x3ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf9, 0xc5e, 0x6, 0x9, 0x20, 0x97, 0x200, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x11bb, 0x800, 0x5, 0x4, 0x8, 0x7, 0x8]}}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xe1d, 0xfff9, 0x1, 0x7, 0x4, 0x6, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x3fc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x3c4, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x60, 0x1, 0x16, 0xc, 0x18, 0x60, 0x4, 0x1, 0x0, 0x1, 0x24, 0x67, 0x18, 0x18, 0xc, 0xa8707a0ac113e79a, 0x1b, 0x12, 0x6c, 0x60, 0x18, 0x1b, 0x24]}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x4, 0x2}, {0x0, 0x3}, {0x0, 0x5}, {0x6, 0x5}, {0x6}, {0x6, 0x1}, {0x2, 0x9}, {0x4, 0x1}, {0x2, 0xa}, {0x3, 0x9}, {0x2, 0x6}, {0x1, 0x4}, {0x5, 0x7}, {0x6, 0x1}, {0x5, 0x7}, {0x4, 0x1}, {0x0, 0x5}, {0x0, 0x1}, {0x6, 0x3}, {0x5, 0x9}, {0x1, 0x5}, {0x6, 0x9}, {0x4, 0x8}, {0x0, 0x7}, {0x0, 0x9}, {0x1, 0x7}, {0x7, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x1, 0x3f, 0x4, 0x6, 0x7ff, 0x1, 0x206e]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x5, 0x9fa, 0x6, 0x1e, 0x1, 0x0, 0x2]}}]}, @NL80211_BAND_6GHZ={0xdc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x40, 0x2, [{0x0, 0x3}, {0x1, 0x6}, {0x2, 0x9}, {0x0, 0x6}, {0x6, 0x4}, {0x7, 0x5}, {0x7, 0xa}, {0x0, 0xa}, {0x4, 0x9}, {0x0, 0x6}, {0x2}, {0x1, 0x4}, {0x5, 0xa}, {0x4, 0x3}, {0x6, 0x6}, {0x1, 0x2}, {0x1, 0x9}, {0x7, 0x3}, {0x0, 0x6}, {0x7, 0x4}, {0x1, 0x2}, {0x0, 0x3}, {0x0, 0x8}, {0x4, 0x7}, {0x2, 0x9}, {0x7, 0x7}, {0x2, 0x9}, {0x5}, {0x0, 0x2}, {0x6, 0x1}, {0x7, 0x7}, {0x7, 0x8}, {0x0, 0x4}, {0x5, 0x1}, {}, {0x4, 0x3}, {0x5, 0x1}, {0x2, 0x6}, {}, {0x1, 0x3}, {0x1, 0xa}, {0x0, 0xa}, {0x0, 0x2}, {0x2, 0x4}, {0x1, 0x7}, {0x1, 0x7}, {0x5, 0x3}, {0x1, 0x2}, {0x7, 0x7}, {0x1, 0x3}, {0x1, 0x8}, {0x1, 0xa}, {0x0, 0x5}, {0x0, 0x7}, {0x1, 0x3}, {0x6, 0x4}, {0x5, 0x7}, {0x6, 0x7}, {0x0, 0x3}, {0x3, 0x9}]}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x2, 0x10}, {0x0, 0x2}, {0x2, 0x8}, {0x0, 0x3}, {0x6, 0x3}, {0x7, 0x1}, {0x5, 0x4}, {0x7}, {0x3, 0x6}, {0x3, 0x4}, {0x7, 0x8}, {0x7}, {0x1, 0x8}, {0x1, 0x3}, {0x4, 0xa}, {0x3, 0x8}, {0x5, 0x9}, {0x3, 0x8}, {0x7, 0x1}, {0x1, 0x9}, {0x7, 0x8}, {0x6, 0x4}, {0x6, 0xa}, {0x1, 0x9}, {0x4, 0x4}, {0x6, 0xa}, {0x3, 0x3}, {0x4, 0x1}, {0x7, 0x1}, {0x4, 0x6}, {0x5, 0x7}, {0x3, 0x4}, {0x2, 0x2}, {0x1, 0x3}, {0x7}, {0x5, 0x8}, {0x0, 0xa}, {0x6, 0xa}, {0x1, 0x4}, {0x2, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0xc, 0xda14f39dc911c293, 0x48, 0x6c, 0x1b]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x4, 0x6c, 0x16, 0x2, 0x18, 0x6, 0x6c, 0x6, 0x24, 0x48, 0x30, 0x70, 0x36, 0x6c, 0x6c, 0x18, 0x1b, 0x6, 0x6c, 0xc, 0x48, 0x2b, 0x4]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x1b, 0x60, 0x6c, 0x6, 0x1, 0x3, 0xc, 0xb, 0xc, 0x3, 0x2, 0x1b, 0x36, 0x60, 0x24, 0x30, 0x18, 0x3, 0xc, 0x3de83b8e90dbe028, 0x4, 0x6c, 0x33, 0x24, 0x6c, 0x2, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x2, 0x7fff, 0x5, 0x3, 0x3, 0xf801, 0x7b]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0xc, 0x36, 0x6c, 0xb, 0x30, 0x4, 0x1, 0x12, 0x4, 0x3, 0x24, 0xc, 0x12]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x16, 0x30, 0x60, 0x60, 0x9, 0x5, 0xb, 0x9, 0x30, 0x9, 0x12, 0x12, 0xc, 0x12, 0x9]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x5, 0x1b, 0x5, 0xb, 0x6, 0x30, 0x24, 0x2, 0xb, 0xb, 0x6c, 0x60, 0x36, 0x8]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x6, 0x9, 0xcb9d, 0x2, 0xce9, 0x20c, 0x9]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x18, 0x8, 0x12, 0x12, 0x60, 0x30, 0x30]}]}, @NL80211_BAND_6GHZ={0xa4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x0, 0x30, 0x16, 0x18, 0x30, 0x1b, 0x48, 0x5, 0x1b, 0x4, 0x48, 0x6, 0x9, 0x60, 0x18, 0xc, 0xb9, 0x1b, 0x18, 0x30, 0x4, 0x16, 0x36, 0x2, 0x12, 0x1b, 0x4, 0x9]}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x0, 0x8}, {0x6, 0x4}, {0x7, 0x9}, {0x2, 0x7}, {}, {0x5, 0x7}, {0x7, 0x8}, {0x1, 0x9}, {0x7}, {0x6, 0x9}, {0x7, 0x2}, {0x1, 0x9}, {0x4, 0x8}, {0x0, 0xa}, {0x5, 0x4}, {0x4}, {0x0, 0x3}, {0x6, 0x4}, {0x7, 0x5}, {0x7, 0x4}]}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0xc, 0x4, 0x48, 0x24, 0x24, 0x16, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xff, 0xfffe, 0x7, 0x3, 0x3, 0x3, 0x5fd]}}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x7, 0x7}, {0x3, 0x3}, {0x7, 0x5}, {0x5, 0x3}, {0x1, 0x1}, {0x0, 0x8}, {0x7, 0x1}, {0x0, 0xa}, {0x2, 0x7}, {0x3, 0x3}, {0x0, 0x1}, {0x1, 0x8}, {0x6, 0x1}, {0x5, 0x2}, {0x7, 0x9}, {}, {0x3, 0x6}, {0x4, 0x2}, {0x0, 0x6}, {0x7, 0x6}, {0x3, 0x9}, {0x3, 0x7}, {0x5, 0x6}, {0x4, 0x4}, {0x2, 0x4}, {0x1, 0x9}, {0x7, 0x8}, {}, {0x2}, {0x7, 0x1}, {0x1, 0x8}, {0x7, 0xa}, {0x1, 0x7}, {0x3, 0x7}, {0x2, 0x6}, {0x7}, {0x2, 0xa}, {0x3}]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x16, 0x6c, 0xc, 0x12, 0x2, 0x4, 0x3, 0x60, 0x60, 0x6, 0x5, 0x9, 0x18, 0x2, 0x6, 0x60]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x60, 0x9, 0x60, 0x4, 0x30, 0x16, 0x12, 0x5, 0x48, 0xb, 0x0, 0x48, 0x1b, 0x15, 0x38, 0xb, 0xc, 0x1b, 0x6, 0x48, 0x1, 0xb, 0x24, 0x4, 0xbd76edf9fb4a0ab6, 0x29cbb4080d11e7e0, 0x36, 0x36, 0x1, 0x16, 0x6]}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4b, 0x2, [{0x5, 0x7}, {0x6, 0x5}, {}, {0x0, 0x8}, {0x3, 0x6}, {0x4}, {0x0, 0x5}, {0x1, 0x1}, {0x1, 0x3}, {0x5, 0x4}, {0x0, 0x5}, {0x0, 0x2}, {0x5, 0x6}, {0x6, 0x7}, {0x4, 0x9}, {0x0, 0xa}, {0x5, 0x6}, {0x0, 0x7}, {0x1, 0x7}, {0x4}, {0x3}, {0x0, 0x4}, {0x1}, {0x4, 0x6}, {0x2, 0x8}, {0x2, 0x9}, {0x6, 0x5}, {0x7, 0x3}, {0x4, 0x2}, {0x4, 0x6}, {0x1}, {0x3, 0x1}, {0x3, 0x3}, {0x3, 0xa}, {0x0, 0xa}, {0x1, 0x9}, {0x6, 0x5}, {0x2, 0x6}, {0x1, 0x8}, {0x3, 0xa}, {0x1, 0x5}, {0x7, 0x3}, {0x4, 0x3}, {0x5, 0x5}, {0x1, 0x4}, {0x0, 0x4}, {0x7, 0x1}, {0x5, 0x8}, {0x4, 0x3}, {0x2, 0x5}, {0x7, 0x6}, {0x0, 0x5}, {0x5, 0xa}, {0x7, 0x3}, {0x6, 0x5}, {0x3}, {0x3, 0x9}, {0x6, 0x9}, {0x7, 0x9}, {0x4}, {0x3, 0x1}, {0x0, 0x8}, {0x7, 0x9}, {0x0, 0x4}, {0x0, 0x3}, {0x7, 0xa}, {0x7}, {0x0, 0x2}, {0x4, 0x9}, {0x2, 0x1}, {0x5, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0xdc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x30, 0xc, 0x3, 0xc, 0x22ba31d593e31914, 0x1b, 0x6c, 0x3, 0xb, 0x24, 0x6, 0xb, 0x3, 0x4, 0x4]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x9, 0x8, 0x8c29, 0x1ff, 0xb4, 0xffff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x30, 0x16, 0x6, 0x18, 0x1b, 0xc, 0x6, 0x48, 0x60, 0xb, 0x30, 0x9, 0x6c, 0x5, 0x60, 0x2b]}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x1, 0x6}, {0x0, 0x7}, {0x1, 0x4}, {0x5, 0x3}, {0x3, 0x2}, {0x4, 0x6}, {0x0, 0x1}, {0x6, 0x6}, {0x0, 0x4}, {0x5, 0x8}, {0x0, 0x8}, {0x3, 0x4}, {0x4, 0x2}, {0x5}, {0x0, 0x7}, {0x0, 0x1}, {0x6, 0x9}, {0x4, 0x2}, {0x7, 0x9}, {0x7, 0x6}]}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x6, 0x3}, {0x0, 0x8}, {0x3, 0x4}, {0x5, 0x7}, {0x4, 0x9}, {0x3, 0x8}, {0x3}, {0x6, 0xa}, {0x2, 0x6}, {0x0, 0x9}, {0x5, 0x5}, {0x0, 0x9}, {0x0, 0x2}, {0x3, 0x6}, {0x4, 0x11}, {0x3, 0x5}, {0x2, 0x3}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x4, 0x9}, {0x2, 0x1}, {0x5, 0x8}, {0x4, 0x4}, {0x3, 0x7}, {0x1, 0x3}, {0x1}, {0x1, 0x5}, {0x3, 0x9}, {0x1, 0x7}, {0x0, 0x7}, {0x5, 0xa}, {0x0, 0x5}, {0x6, 0x1}, {0x0, 0xa}, {0x1, 0x2}, {0x3, 0x6}, {0x4, 0x4}, {0x6, 0x9}, {0x4, 0x4}, {0x7, 0x9}, {0x7, 0x1}, {0x0, 0x9}, {0x6, 0x6}, {0x2}, {0x7, 0x1}, {0x0, 0xa}, {0x1, 0xa}, {0x6, 0x9}, {0x0, 0xa}, {0x7, 0x7}, {0x4, 0x4}, {0x1, 0x5}, {0x1, 0x4}, {0x4, 0x1}, {0x6, 0x5}, {0x1, 0x6}, {0x5, 0x6}, {0x5, 0x7}, {0x2, 0x7}, {0x5, 0x7}, {0x0, 0x8}, {0x5, 0x4}, {0x6, 0x4}, {0x6}, {0x1, 0x8}, {0x4, 0x9}, {0x2, 0x3}, {0x1, 0x5}, {0x1}, {0x3, 0x3}, {0x2, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x1, 0x7, 0x4, 0x0, 0x400, 0x5, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x3, 0x40, 0x4, 0x400, 0x4800, 0x800, 0x1000]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x3}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7f4}]}]}, @NL80211_ATTR_TID_CONFIG={0x70, 0x11d, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xae}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcc}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x48, 0x11d, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x422}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x23}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x9e}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x19}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}, @NL80211_ATTR_TID_CONFIG={0x468, 0x11d, 0x0, 0x1, [{0x464, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x314, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x43, 0x2, [{0x4, 0x8}, {0x3, 0x7}, {0x6, 0x8}, {0x0, 0xa}, {0x5, 0x9}, {0x6, 0x9}, {0x2, 0x5}, {0x4, 0x9}, {0x2}, {0x2, 0x3}, {0x7, 0x3}, {0x6, 0x2}, {0x0, 0xa}, {0x3, 0x2}, {0x3, 0x2}, {0x4, 0x8}, {0x1, 0x3}, {0x3, 0x5}, {0x4, 0x6}, {0x2, 0x9}, {0x4, 0x7}, {0x4, 0x9}, {0x1, 0x2}, {0x5}, {0x3, 0x4}, {0x7}, {0x1, 0xa}, {0x1}, {0x1, 0x6}, {0x6, 0x1}, {0x5, 0x9}, {0x7, 0x5}, {0x6, 0xa}, {0x2, 0x9}, {0x1, 0x3}, {0x7, 0x2}, {0x3, 0x8}, {0x5, 0x5}, {0x0, 0x5}, {0x4, 0x3}, {0x2, 0x4}, {0x1, 0x1}, {0x3, 0x6}, {0x6, 0x9}, {0x2, 0x5}, {0x6, 0x7}, {0x2, 0x8}, {0x2, 0x7}, {0x4, 0xa}, {0x2, 0x9}, {0x2, 0x4}, {0x6, 0x6}, {0x4}, {0x4}, {0x5, 0xa}, {0x4, 0x8}, {0x0, 0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x7}, {0x1, 0x8}, {0x2, 0x2}, {0x1, 0x9}]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x4, 0x36]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x5c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2e, 0x2, [{0x0, 0x8}, {0x2, 0x2}, {0x3, 0x3}, {0x3, 0x8}, {0x7, 0x7}, {0x0, 0x3}, {0x3, 0x3}, {0x5, 0x4}, {0x4, 0x2}, {0x7, 0x5}, {0x1, 0x1}, {0x4}, {0x0, 0x5}, {0x5, 0x5}, {}, {0x4, 0x7}, {0x1, 0x4}, {0x0, 0x7}, {0x0, 0x5}, {0x4, 0x1}, {0x2, 0x8}, {0x1, 0x4}, {0x0, 0x9}, {0x4, 0x4}, {0x0, 0x1}, {0x3, 0x7}, {0x0, 0x2}, {0x5, 0x6}, {0x7}, {0x4, 0x2}, {0x1, 0x6}, {0x6, 0xa}, {0x3, 0x2}, {0x2, 0x8}, {0x5, 0x6}, {0x1, 0x2}, {0x4, 0x7}, {0x4, 0x5}, {0x6, 0x6}, {0x5, 0x2}, {0x4, 0x7}, {0x0, 0x5}]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x2, 0x2a, 0x2, 0x30, 0x3f, 0x9, 0x1, 0x1b, 0x1, 0x24, 0x16, 0x18, 0x24]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2b, 0x628, 0x3, 0x5, 0x4, 0x2, 0x1, 0xbe]}}]}, @NL80211_BAND_60GHZ={0xb4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x4, 0x1, 0x9, 0x1, 0x6c, 0x16, 0x6, 0x60, 0x4, 0x4, 0x1, 0x48, 0x1b, 0x4, 0x48, 0x6c, 0x3, 0x18, 0x0, 0x1, 0x6, 0x2, 0x12, 0x1b, 0x32, 0xc, 0x30]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x176, 0x6, 0x3, 0x0, 0x1, 0x1, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x6, 0x1}, {0x6}, {0x5, 0xa}, {0x4, 0x9}, {0x6, 0x4}, {0x1, 0x8}, {0x7, 0x2}, {0x0, 0x5}, {0x3}, {0x7, 0x1}, {0x3, 0x5}, {0x7, 0x6}, {0x1}, {0x2, 0x6}, {0x3}, {0x5, 0xa}, {0x0, 0x8}, {0x2, 0x4}, {0x5, 0x4}, {0x6, 0x2}, {0x1, 0xa}, {0x6, 0x9}, {0x0, 0x2}, {0x7, 0xa}, {0x0, 0x2}, {0x3, 0x7}, {0x6, 0x7}, {0x5}, {}]}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x2, 0x2}, {0x7, 0x7}, {0x5, 0x4}, {0x6, 0x8}, {0x3, 0x4}, {0x1, 0xa}, {0x0, 0x6}, {0x1, 0x8}, {0x5, 0x6}, {0x0, 0x8}, {0x7}, {0x0, 0x7}, {0x6, 0xa}, {0x7, 0x6}, {0x1, 0x3}, {0x5, 0x9}, {0x6, 0x5}, {0x7, 0x1}, {0x6, 0x6}, {0x6, 0x2}, {0x3, 0x2}, {0x3, 0x5}, {0x4, 0x3}, {0x1}, {0x5, 0xa}, {0x4, 0x2}, {0x7, 0x2}, {0x3, 0x5}, {0x5, 0x5}, {0x0, 0x9}, {0x1, 0xa}, {0x0, 0xa}, {0x5, 0x6}, {0x7, 0x2}, {0x4}, {0x4, 0xa}, {0x7, 0x5}, {0x0, 0x2}, {0x4, 0x9}, {0x4, 0x3}, {0x6, 0x6}, {0x2, 0x8}, {0x1, 0x5}, {0x4}, {0x1, 0x1}, {0x7, 0x4}, {0x7}, {0x5, 0x3}, {0x6, 0x8}, {0x2, 0x5}, {0x4}, {0x0, 0x6}, {0x5, 0xa}, {0x4, 0x5}, {0x3, 0x5}, {0x3, 0x2}, {0x7}, {0x1, 0x9}, {0x5, 0x11}, {0x1, 0x9}, {0x4, 0x9}, {0x2, 0x7}, {0x3}, {0x5}, {0x6, 0xa}, {0x4, 0x6}, {0x5, 0x2}, {0x3, 0x7}, {0x6, 0xa}, {0x1, 0x1}, {0x0, 0x5}, {0x7, 0x4}, {0x1, 0x2}]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x2020, 0x4, 0x320c, 0x3c1, 0x1, 0x5, 0x5]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0xf, 0x6c, 0x1b, 0xaef9c276285d4ec2, 0x2, 0x6c, 0x30, 0x9, 0x2, 0x3, 0xb, 0x3, 0x3, 0x9, 0x48, 0x48, 0x18, 0x6, 0xb, 0x6c, 0x0, 0x60]}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x9, 0x12, 0x55, 0x39, 0x6c, 0x4, 0x24, 0x4, 0x18, 0x1b, 0xc3e844824d6da283, 0x60, 0x3, 0x6, 0x6c, 0x30, 0x6c, 0x37, 0x16, 0x48, 0x18, 0xc, 0x2, 0x4, 0x16, 0x9, 0x1, 0x5, 0x24, 0x48, 0x7a]}]}, @NL80211_BAND_6GHZ={0x80, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0xa}, {0x4, 0x6}, {0x6, 0x7}, {0x4, 0x1}, {0x1, 0x4}, {0x1, 0x9}, {0x7, 0x1}, {}, {0x7, 0x7}, {0x0, 0x9}, {0x4, 0xa}, {0x1, 0xa}, {0x4, 0xa}, {0x0, 0xa}, {0x1, 0x7}, {0x1, 0x8}, {0x1, 0x8}, {0x0, 0x3}, {0x1, 0x6}, {0x0, 0x9}, {0x3, 0x7}, {0x6, 0x3}, {0x0, 0x5}, {0x6, 0x2}, {0x3, 0x2}, {0x3, 0x3}, {0x3, 0x9}, {0x4, 0xa}, {0x2, 0x6}, {0x0, 0x3}, {0x1, 0x1}, {0x2, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3995, 0x2, 0xec7e, 0x890c, 0x1c0, 0x0, 0x8, 0x5]}}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x1, 0x4}, {0x1, 0x9}, {0x1, 0x8}, {0x4, 0x9}, {0x1, 0x3}, {0x0, 0x8}, {0x1, 0xa}, {0x2, 0x3}, {0x5, 0x5}, {0x6, 0x4}, {0x7, 0x3}, {0x1, 0x7}, {0x0, 0x2}, {0x3, 0x8}, {0x5, 0x5}, {0x4, 0x3}, {0x5}, {0x2, 0x4}, {0x0, 0x6}, {0x0, 0x3}, {0x7, 0x5}, {0x3}, {0x5, 0x2}, {0x4, 0x8}, {0x1, 0x3}, {0x1, 0x8}, {0x1, 0x1}, {0x0, 0x8}, {0x6, 0x7}, {0x3, 0x9}, {0x7, 0x3}, {0x2, 0x8}, {0x0, 0x5}, {0x6, 0x7}, {0x0, 0x1}, {0x7, 0x1}, {0x1, 0x7}, {0x2, 0x2}, {0x4, 0x4}, {}, {0x0, 0x5}, {0x6, 0x7}, {0x5, 0x3}, {0x1, 0x6}, {0x2, 0xa}, {0x1, 0x4}, {0x5, 0x8}, {0x7, 0x4}, {0x7, 0x4}, {0x1, 0xa}, {0x4, 0x3}, {0x0, 0x2}, {0x5, 0x5}, {0x3, 0x8}, {}, {0x4, 0x8}, {0x1, 0x1}, {0x3, 0x6}, {0x3, 0x7}, {0x1, 0x8}, {0x7, 0x9}, {0x3, 0xa}, {0x7, 0x8}, {0x0, 0x7}]}]}, @NL80211_BAND_6GHZ={0xac, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0x1b, 0x16, 0x1b, 0x60, 0x4, 0x1b, 0x18, 0x21]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x9, 0x16, 0x5, 0x36, 0x6c, 0x30, 0x5, 0x16, 0x6, 0x4, 0x16, 0x6, 0x16, 0x24, 0x1b, 0x12, 0x5, 0xb, 0x48, 0x60, 0x3, 0x24, 0x12, 0x36, 0x7cb9d3eb2896cc17, 0x6, 0x1, 0x79, 0x0, 0x1b, 0xc, 0x24]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x3, 0x4}, {0x1, 0x2}, {0x7, 0x9}, {0x0, 0x9}, {0x6, 0x7}, {0x5, 0x6}, {0x3, 0x3}, {0x1, 0x3}, {0x1, 0x6}, {0x5, 0x8}, {0x1, 0x8}, {0x3, 0x8}, {0x4, 0x7}, {0x0, 0x8}, {0x3, 0x8}, {0x6, 0x5}, {0x6, 0x6}, {0x0, 0x1}, {0x0, 0x4}, {0x4, 0x3}, {0x4, 0x5}, {0x0, 0x7}, {0x5, 0x8}, {0x2, 0x2}, {0x1}, {0x6, 0x5}, {0x1, 0x8}, {0x6, 0x3}, {0x7, 0x1}, {0x4, 0x4}, {0x0, 0xa}, {0x1, 0x5}, {0x4, 0x5}, {0x3, 0x4}, {0x5, 0x3}, {0x1, 0x5}, {0x5, 0x7}, {0x7, 0x4}, {0x4, 0x4}, {0x4, 0x5}, {0x1, 0x8}, {0x4, 0x6}, {0x6, 0x6}, {0x0, 0x8}, {0x6, 0xa}, {0x4, 0x5}, {0x1, 0x7}, {0x6, 0x6}, {0x5, 0x6}, {0x0, 0x7}, {0x3, 0x1}, {0x0, 0x3}, {0x3, 0x2}, {0x1, 0x9}, {0x3, 0x8}, {0x0, 0x5}, {0x7, 0x2}, {0x1, 0x5}, {0x2, 0x8}, {0x6, 0x9}, {0x0, 0x7}, {0x0, 0x3}, {0x7, 0x7}, {0x5, 0x7}, {0x4, 0xa}, {0x1, 0x2}, {0x2}, {0x3, 0x9}, {0x7}, {0x1, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1f, 0xff, 0xd0e, 0x2, 0x6ff6, 0x400, 0x7ff, 0x80]}}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x6c, 0xc, 0xc, 0x1, 0x6c, 0xc, 0x1, 0x1b, 0x1b, 0x12, 0x30, 0xc, 0x1b]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1ef3}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x7f}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x108, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x100, 0x0, 0xff, 0x8001, 0x800, 0x5, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xd4d8, 0x3, 0x4, 0x40, 0x7, 0x22, 0x6]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x1, 0x3, 0x6, 0x48, 0x16, 0x48, 0x18, 0x60, 0x6c, 0x16, 0x24, 0x16, 0xb, 0x9, 0x2, 0x2, 0x60, 0x30, 0x30, 0xc, 0x60, 0x3, 0xe, 0x5, 0xc, 0xc, 0x1b, 0x9]}]}, @NL80211_BAND_2GHZ={0x10, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x2, 0x6c, 0x30, 0xc, 0x0, 0x12]}]}, @NL80211_BAND_60GHZ={0x90, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x8, 0x8, 0x200, 0x0, 0x5, 0x3, 0xfff]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x12, 0x6, 0x18, 0x60, 0x1, 0x36, 0xc, 0x6c, 0x16, 0x6, 0x30, 0x1, 0x30, 0x9, 0x48]}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x0, 0x6}, {0x7, 0x7}, {0x0, 0x7}, {0x5, 0x5}, {0x3, 0x3}, {0x0, 0xa}, {0x0, 0x5}, {0x3, 0x4}, {0x1}, {0x3, 0x8}, {0x3, 0x1}, {0x1, 0x4}, {0x5, 0x6}, {0x2, 0x9}, {0x0, 0x2}, {0x5, 0x3}, {0x5, 0x8}, {0x1, 0x1}, {0x5, 0x3}, {0x2, 0x7}, {0x4, 0x5}, {0x4, 0x3}, {0x0, 0xa}, {0x3, 0x1}, {0x4, 0x5}, {0x4, 0x7}, {0x1, 0x8}, {0x5, 0x9}, {0x3, 0x5}, {0x4, 0x4}, {0x0, 0x2}, {0x2, 0x5}, {0x5, 0x6}, {0x2, 0x8}, {0x2, 0x9}, {0x2, 0x4}, {0x4, 0x5}, {0x6, 0x2}, {0x1, 0xa}, {0x2, 0x9}, {0x2, 0x6}, {0x1, 0xa}, {0x6, 0x8}, {0x0, 0x1}, {0x5}, {0x2, 0x7}, {0x2, 0x1}, {0x4, 0x6}, {0x0, 0x9}, {0x0, 0x6}, {0x6, 0xa}, {0x5, 0xa}, {0x5, 0x2}, {0x1}, {0x5, 0x1}, {0x6, 0x1b}, {0x0, 0x2}, {0x5}, {0x7, 0xa}, {0x0, 0x1}, {0x6, 0x5}, {0x3, 0x5}, {0x4, 0x9}, {0x3, 0x3}, {0x0, 0xa}, {0x5, 0x8}, {0x6, 0x3}, {0x1, 0x8}, {0x7, 0x7}, {0x0, 0x4}, {0x1, 0x5}, {0x2, 0x8}, {0x0, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x400, 0x2, 0x2, 0x81, 0x0, 0x3f, 0xcf05, 0x7]}}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x14, 0x2, [{0x7, 0x9}, {0x5}, {0x6, 0x6}, {0x4, 0x7}, {0x3, 0x3}, {0x2, 0x9}, {0x5, 0x5}, {0x5, 0x2}, {0x6, 0x6}, {0x1, 0x3}, {0x5, 0x1}, {0x1, 0x6}, {0x2, 0x4}, {0x4, 0x2}, {0x1}, {0x0, 0x1}]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}]}]}, @NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}]}]}, 0x1a3c}, 0x1, 0x0, 0x0, 0xc080}, 0x8000) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x20200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x10, r1, 0x10000000) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x539002, 0x0) syz_io_uring_submit(0x0, r2, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x9}}, './file1/file0\x00'}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x29, 0x1f, 0xff, 0xd89, 0x10, @empty, @remote, 0x8000, 0x700, 0x9, 0x7fff}}) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r5}]}, 0x1c}}, 0x20004041) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x105142, 0x185) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000400)) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f00000001c0)=ANY=[@ANYBLOB="ac1414aa0000004000000000040000007f000001ac14142fffffffff7f000001"], 0x20) ioctl$PTP_PEROUT_REQUEST2(r3, 0x40383d0c, &(0x7f0000000640)={{0x8, 0x8}, {0x7fff}, 0x40}) openat$incfs(0xffffffffffffffff, &(0x7f0000000140)='.log\x00', 0x220001, 0x0) close(0xffffffffffffffff) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x8000000}], 0x0) 23:15:17 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100681a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) [ 2955.259470] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=538 sclass=netlink_xfrm_socket pid=13586 comm=syz-executor.0 23:15:17 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000001c0)=""/95, 0x5f, 0x30100, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = dup(0xffffffffffffffff) ftruncate(r5, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) sendmsg$nl_generic(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001800210c000000000000000002000000080000000000000008000700", @ANYRES32=0xee01, @ANYBLOB="549f5f7f"], 0x24}}, 0x0) r8 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$nl_generic(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x24, 0x18, 0xc21, 0x0, 0x0, {0x2}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x7, 0x0, 0x0, @uid=0xee01}]}, 0x24}}, 0x0) write(r8, &(0x7f00000003c0)="7d7258db44e0e964098840d1fb037e611127972360afe3b3f1706a4d920c8fb8f44946b067129ed7be33c9b1388da209379e6d9cdebecafb77aab4b430010a51afbd7498771eb053ac08d33c6d23132117e3978cac9ab798d36bc3c591d0a46670b0b410352787a5372f3daec239878af43be500a1ff64302085d8737c4b35d1cfc7b84e3c427998154449086fe3525125274fe437fe96141becc3bcad0ce0a3c0222d7099f8551471d7206cb6867686bf782764ae40679f319c2f1f5094db0f35b58de65708f6d702f7f492cd9434", 0xcf) vmsplice(r7, &(0x7f0000000040)=[{&(0x7f0000000240)="6a7c61104fef34a13223ee75165836709c875f0817cc2fb17af9c442d952943a8fa4a4fd735de9b6b4f7ffb743dd25bac0bf0e1289913779c2f7842679dc21897466bd36092f7d2cb75afd99ff0b48a6ea57990103dacf41a478ff9e085caf7f60c7f29c0d3a0d4c9ced7a0306173aeae0a8243843668f281e56f4b4dbb7a3758ddd0f39d10f0789deffba07887a31a37407fe81eeaa5432422369a9780f384c7201cea87ba064a0fe629537586f5c957a3e6b45601f7c0b179b21d41bbba8f0597bf9661c8c4a334f56654f19ee0c0126534cecd3e3c5721543a8e20bcc0bc7f932e6b7892533305deb046523", 0xed}], 0x1, 0x8) 23:15:17 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5801006c1a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:15:17 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0xfffffffffffffe51}, {&(0x7f0000002a80)=""/102400}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x2e}, {&(0x7f00000002c0)=""/237}, {&(0x7f0000000100)=""/3, 0x37}], 0x7, 0x0) io_setup(0x2d47, &(0x7f0000000000)) (fail_nth: 40) 23:15:17 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0301000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:15:17 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580105001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 23:15:17 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100741a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) [ 2955.395848] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2955.421639] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=794 sclass=netlink_xfrm_socket pid=13606 comm=syz-executor.0 [ 2955.435703] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=794 sclass=netlink_xfrm_socket pid=13613 comm=syz-executor.0 [ 2955.441555] FAULT_INJECTION: forcing a failure. [ 2955.441555] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2955.443580] CPU: 1 PID: 13604 Comm: syz-executor.6 Not tainted 5.10.216 #1 [ 2955.444582] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2955.445766] Call Trace: [ 2955.446161] dump_stack+0x107/0x167 [ 2955.446690] should_fail.cold+0x5/0xa [ 2955.447280] __alloc_pages_nodemask+0x182/0x600 [ 2955.447958] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2955.448827] ? find_get_entry+0x2c8/0x740 [ 2955.449423] ? lru_cache_add+0x45c/0x800 [ 2955.450017] alloc_pages_current+0x187/0x280 [ 2955.450654] __page_cache_alloc+0x2d2/0x360 [ 2955.451283] ? pagecache_get_page+0x364/0xc80 [ 2955.451930] pagecache_get_page+0x2c7/0xc80 [ 2955.452563] ioctx_alloc+0x6cd/0x1e60 [ 2955.453140] ? aio_poll_complete_work+0xa00/0xa00 [ 2955.453851] __x64_sys_io_setup+0xc4/0x1f0 [ 2955.454465] do_syscall_64+0x33/0x40 [ 2955.455012] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2955.455748] RIP: 0033:0x7f300c1a9b19 [ 2955.456285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2955.458904] RSP: 002b:00007f300971f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 2955.460011] RAX: ffffffffffffffda RBX: 00007f300c2bcf60 RCX: 00007f300c1a9b19 [ 2955.461028] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000002d47 [ 2955.462043] RBP: 00007f300971f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2955.463065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2955.464087] R13: 00007ffdcc09d2af R14: 00007f300971f300 R15: 0000000000022000 23:15:32 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0401000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:15:32 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5801007a1a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:15:32 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580106001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 23:15:32 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x9, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487f49f8000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0xf5d, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r4, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) 23:15:32 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0xfffffffffffffe51}, {&(0x7f0000002a80)=""/102400}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x2e}, {&(0x7f00000002c0)=""/237}, {&(0x7f0000000100)=""/3, 0x37}], 0x7, 0x0) io_setup(0x2d47, &(0x7f0000000000)) (fail_nth: 41) 23:15:32 executing program 2: perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x20, 0x1, 0x6, 0x5, 0x0, 0x7, 0x80004, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000100), 0x8}, 0x1002, 0x8, 0x8, 0x6, 0xa6, 0x4, 0x4d, 0x0, 0x0, 0x0, 0x1000001f}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0x19) r0 = openat$sr(0xffffffffffffff9c, &(0x7f00000035c0), 0xe8b02, 0x0) r1 = syz_open_dev$vcsu(&(0x7f00000000c0), 0x5, 0x400001) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x1, 0x7, 0x5d, 0x0, 0x0, 0x0, 0x8, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10001, 0x4, @perf_bp={&(0x7f0000000000), 0x1}, 0x4000, 0x2, 0x7fffffff, 0x6, 0x1f, 0x55f, 0xb27, 0x0, 0xffffff81, 0x0, 0x80000000}, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0x1) ioctl$SG_IO(r0, 0x2285, &(0x7f00000011c0)={0x53, 0xfffffffffffffffd, 0x0, 0x0, @buffer={0x0, 0x1031, &(0x7f0000001240)=""/4108}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23:15:32 executing program 7: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x2, 0x3, 0x0, 0x0, 0x5, '`\x00\x00\x00\x00\x00\x00@\x00'}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) stat(&(0x7f0000001cc0)='.\x00', &(0x7f0000001c00)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0xffffffffffffffff, r2, 0x0) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r2) flock(r1, 0x0) io_uring_setup(0x1, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x1, 0x1cf}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$packet(0xffffffffffffffff, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="66bc24cf37a5e683959ab5e5c6e9b84fd387899008d0b8ab4fadee6365efefc6414f884cc83902088820322e41f115546ee173bda37ed7e5c2d1909191f6c9bafed917882a56dfacaaee4f4966fb53fc0cecc92813986842351c5ac274d1115683516cc78d9151b91af0a4ee9e8cfab04b5447d3a9f6854337e241e2443532605039a5f26d03d04293194e", @ANYRES16=r4, @ANYBLOB="0004000072000000"], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0xd0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1, 0x0, 0x0, 0x0, {0x1}, 0xaca8b1330354523d, {0x0, r3}}, 0x9) r5 = socket$inet(0x2, 0xa, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r5, r0, 0x0) 23:15:32 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r0, 0x0, 0x0}, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r2 = io_uring_setup(0x5204, &(0x7f0000000100)) r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_uring_enter(0xffffffffffffffff, 0x5009, 0x83e1, 0x2, &(0x7f0000000200)={[0x3ff]}, 0x8) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r4 = dup(0xffffffffffffffff) ftruncate(r4, 0x0) sendfile(r4, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) r5 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x406340, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000300)='\x00', 0x0, r5) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, {0x0, r6}}, 0x101) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_FILES_UPDATE={0x14, 0x3, 0x0, 0x0, 0x8, &(0x7f0000000240)=[r2, r3], 0x2, 0x0, 0x1, {0x0, r6}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x3, 0x0, 0x0) linkat(r4, &(0x7f0000000040)='./file0\x00', r4, &(0x7f00000001c0)='./file0\x00', 0x1400) [ 2970.255637] FAULT_INJECTION: forcing a failure. [ 2970.255637] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2970.257442] CPU: 1 PID: 13624 Comm: syz-executor.6 Not tainted 5.10.216 #1 [ 2970.258378] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2970.259483] Call Trace: [ 2970.259859] dump_stack+0x107/0x167 [ 2970.260361] should_fail.cold+0x5/0xa [ 2970.260891] __alloc_pages_nodemask+0x182/0x600 [ 2970.261528] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2970.262407] ? find_get_entry+0x2c8/0x740 [ 2970.263085] ? lru_cache_add+0x45c/0x800 [ 2970.263649] alloc_pages_current+0x187/0x280 [ 2970.264257] __page_cache_alloc+0x2d2/0x360 [ 2970.264856] pagecache_get_page+0x2c7/0xc80 [ 2970.265460] ioctx_alloc+0x6cd/0x1e60 [ 2970.265997] ? aio_poll_complete_work+0xa00/0xa00 [ 2970.266667] __x64_sys_io_setup+0xc4/0x1f0 [ 2970.267261] do_syscall_64+0x33/0x40 [ 2970.267774] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2970.268468] RIP: 0033:0x7f300c1a9b19 [ 2970.268974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2970.271459] RSP: 002b:00007f300971f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 2970.271511] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1050 sclass=netlink_xfrm_socket pid=13634 comm=syz-executor.0 [ 2970.272485] RAX: ffffffffffffffda RBX: 00007f300c2bcf60 RCX: 00007f300c1a9b19 [ 2970.272499] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000002d47 [ 2970.272512] RBP: 00007f300971f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2970.272524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2970.272537] R13: 00007ffdcc09d2af R14: 00007f300971f300 R15: 0000000000022000 [ 2970.297539] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 23:15:32 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0xfffffffffffffe51}, {&(0x7f0000002a80)=""/102400}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x2e}, {&(0x7f00000002c0)=""/237}, {&(0x7f0000000100)=""/3, 0x37}], 0x7, 0x0) io_setup(0x2d47, &(0x7f0000000000)) (fail_nth: 42) 23:15:32 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580107001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 23:15:32 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58010000280001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:15:32 executing program 2: pause() r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@random="b14fa68e296c", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x2, "96153f", 0x8, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, {[], @echo_request}}}}}, 0x0) 23:15:32 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0501000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:15:32 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r3, 0x0, 0x0}, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=[&(0x7f00000001c0)='@.&\x00', &(0x7f0000000200)='*\t\\\x00'], &(0x7f0000000300)=[&(0x7f0000000280)='+*&]/)+-*/,+\x00', &(0x7f00000002c0)='\x00'], 0x400) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r5 = dup(0xffffffffffffffff) ftruncate(r5, 0x0) sendfile(r5, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) [ 2970.484475] FAULT_INJECTION: forcing a failure. [ 2970.484475] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2970.485661] netlink: 324 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2970.486520] CPU: 0 PID: 13643 Comm: syz-executor.6 Not tainted 5.10.216 #1 [ 2970.488778] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2970.490005] Call Trace: [ 2970.490415] dump_stack+0x107/0x167 [ 2970.490981] should_fail.cold+0x5/0xa [ 2970.491575] __alloc_pages_nodemask+0x182/0x600 [ 2970.492281] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2970.493185] ? find_get_entry+0x2c8/0x740 [ 2970.493805] ? lru_cache_add+0x45c/0x800 [ 2970.494431] alloc_pages_current+0x187/0x280 [ 2970.495106] __page_cache_alloc+0x2d2/0x360 [ 2970.495759] pagecache_get_page+0x2c7/0xc80 [ 2970.496397] ioctx_alloc+0x6cd/0x1e60 [ 2970.496999] ? aio_poll_complete_work+0xa00/0xa00 [ 2970.497739] __x64_sys_io_setup+0xc4/0x1f0 [ 2970.498376] do_syscall_64+0x33/0x40 [ 2970.498944] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2970.499715] RIP: 0033:0x7f300c1a9b19 [ 2970.500277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2970.503022] RSP: 002b:00007f300971f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 2970.503542] netlink: 324 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2970.504159] RAX: ffffffffffffffda RBX: 00007f300c2bcf60 RCX: 00007f300c1a9b19 [ 2970.504171] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000002d47 [ 2970.504183] RBP: 00007f300971f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2970.504195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2970.504214] R13: 00007ffdcc09d2af R14: 00007f300971f300 R15: 0000000000022000 [ 2970.519543] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1306 sclass=netlink_xfrm_socket pid=13654 comm=syz-executor.0 23:15:32 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580108001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) [ 2970.603326] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. 23:15:47 executing program 2: r0 = open(&(0x7f0000000040)='./file0\x00', 0x1810c1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x40046629, &(0x7f0000001280)) r1 = accept$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, &(0x7f0000000100)=0xffffffffffffffdc) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10) 23:15:47 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58010000400001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:15:47 executing program 5: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000600), 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setpriority(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0xf, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="3000000010000100060000000000000000000000050000000000000011000080487f49f8000000"], 0x30}}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r1 = accept4(r0, &(0x7f0000000340)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000100)=0x80, 0x800) connect$netlink(r1, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbfd}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @local}, 0x10) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x2f}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x1000}, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0xf5d, 0x5}, 0xfffffffe) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRESOCT=r4, @ANYRESOCT]) sendmsg$IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=ANY=[@ANYRESOCT, @ANYRES16=r2, @ANYBLOB], 0x100}, 0x1, 0x0, 0x0, 0x4804}, 0x0) unshare(0x48020200) [ 2985.517544] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2985.520628] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=64 sclass=netlink_xfrm_socket pid=13673 comm=syz-executor.1 [ 2985.528743] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1562 sclass=netlink_xfrm_socket pid=13680 comm=syz-executor.0 [ 2985.533526] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1562 sclass=netlink_xfrm_socket pid=13683 comm=syz-executor.0 [ 2985.548580] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=64 sclass=netlink_xfrm_socket pid=13688 comm=syz-executor.1 23:15:47 executing program 3: r0 = syz_io_uring_setup(0x4c4f, &(0x7f0000000080), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) socket$packet(0x11, 0x3, 0x300) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x404140, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000300)='\x00', 0x0, r3) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, {0x0, r4}}, 0x101) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3, r5}}, 0x0) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_setup(0x5204, &(0x7f0000000100)) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_submit(r6, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) r7 = dup(0xffffffffffffffff) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_LINK_TIMEOUT={0xf, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x101) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x5, 0x0, 0x0, 0x8, 0xe, 0x1, {0x0, 0x0, r8}}, 0x2e1) ftruncate(r7, 0x0) sendfile(r7, 0xffffffffffffffff, &(0x7f0000000340)=0x1f, 0x7) io_uring_enter(r0, 0x58ab, 0x0, 0x3, 0x0, 0x0) 23:15:47 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0601000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:15:47 executing program 7: openat(0xffffffffffffff9c, 0x0, 0x2006e2, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0xd}, 0x8, 0x0, 0x3ffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f0000000100)) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) shmat(r0, &(0x7f0000ffe000/0x2000)=nil, 0x4000) msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x6) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=ANY=[], 0x10b, 0x1) r1 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r1, 0x0, 0x880) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000000)=""/128) syz_open_dev$tty1(0xc, 0x4, 0x1) shmdt(0x0) r2 = shmget(0x1, 0x4000, 0xf97d709ca5b5f77f, &(0x7f0000ffc000/0x4000)=nil) r3 = shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x0) shmget(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000380)=""/220) shmdt(r3) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f0000000040)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, 0x68, {0x2, 0xffff, @local}, 'lo\x00'}) shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ffd000/0x3000)=nil) 23:15:47 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580109001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 23:15:47 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0xfffffffffffffe51}, {&(0x7f0000002a80)=""/102400}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x2e}, {&(0x7f00000002c0)=""/237}, {&(0x7f0000000100)=""/3, 0x37}], 0x7, 0x0) io_setup(0x2d47, &(0x7f0000000000)) (fail_nth: 43) [ 2985.559673] FAULT_INJECTION: forcing a failure. [ 2985.559673] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2985.561212] CPU: 1 PID: 13690 Comm: syz-executor.6 Not tainted 5.10.216 #1 [ 2985.561887] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2985.562671] Call Trace: [ 2985.562939] dump_stack+0x107/0x167 [ 2985.563314] should_fail.cold+0x5/0xa [ 2985.563706] __alloc_pages_nodemask+0x182/0x600 [ 2985.564171] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2985.564772] ? find_get_entry+0x2c8/0x740 [ 2985.565176] ? lru_cache_add+0x45c/0x800 [ 2985.565589] alloc_pages_current+0x187/0x280 [ 2985.566021] __page_cache_alloc+0x2d2/0x360 [ 2985.566446] pagecache_get_page+0x2c7/0xc80 [ 2985.566873] ioctx_alloc+0x6cd/0x1e60 [ 2985.567257] ? aio_poll_complete_work+0xa00/0xa00 [ 2985.567752] __x64_sys_io_setup+0xc4/0x1f0 [ 2985.568175] do_syscall_64+0x33/0x40 [ 2985.568541] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2985.569048] RIP: 0033:0x7f300c1a9b19 [ 2985.569408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2985.571194] RSP: 002b:00007f300971f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 2985.571926] RAX: ffffffffffffffda RBX: 00007f300c2bcf60 RCX: 00007f300c1a9b19 [ 2985.572617] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000002d47 [ 2985.573290] RBP: 00007f300971f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2985.573996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2985.574669] R13: 00007ffdcc09d2af R14: 00007f300971f300 R15: 0000000000022000 23:15:47 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0701000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:15:47 executing program 2: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x6, 0xc29, 0x0, 0x0, 0x5, "f31a0000434ef9bab774bdcab95c000d00", 0x7ff, 0x8}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454ca, &(0x7f0000000000)={'veth0_vlan\x00'}) r1 = socket$inet(0x2, 0xa, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40000000000001) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)) r2 = getpgrp(0x0) r3 = pidfd_open(r2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, 0x0) r4 = dup(r3) setns(r4, 0x2020000) r5 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x311800, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f00000011c0)={0x53, 0xfffffffffffffffd, 0x0, 0x0, @buffer={0x0, 0x1031, &(0x7f0000001240)=""/4108}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000100)={0x30000000}) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$DVD_READ_STRUCT(r5, 0x5390, &(0x7f0000000440)=@manufact={0x4, 0x2, 0x800, "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"}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x339) dup3(r1, r0, 0x0) 23:15:47 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0xfffffffffffffe51}, {&(0x7f0000002a80)=""/102400}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x2e}, {&(0x7f00000002c0)=""/237}, {&(0x7f0000000100)=""/3, 0x37}], 0x7, 0x0) io_setup(0x2d47, &(0x7f0000000000)) (fail_nth: 44) 23:15:47 executing program 1: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58010000600001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000"], 0x158}}, 0x0) fcntl$setown(r0, 0x8, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb84) 23:15:47 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0xe000000, 0x24000) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x5, 0xff, 0x3, 0x14, 0x0, 0x800, 0x800, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x1, 0x100000000}, 0x12100, 0x4, 0x7, 0x5, 0xfffffffffffffffc, 0x6, 0x31c, 0x0, 0x8, 0x0, 0x10000}, 0xffffffffffffffff, 0x6, r3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000040)={{{@in=@local, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, {{@in=@multicast2}, 0x0, @in6=@mcast1, 0x0, 0x4}}, 0xe8) [ 2985.686418] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1818 sclass=netlink_xfrm_socket pid=13695 comm=syz-executor.0 23:15:47 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58010a001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) [ 2985.703655] FAULT_INJECTION: forcing a failure. [ 2985.703655] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2985.705182] CPU: 1 PID: 13697 Comm: syz-executor.6 Not tainted 5.10.216 #1 [ 2985.705809] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2985.706563] Call Trace: [ 2985.706820] dump_stack+0x107/0x167 [ 2985.707178] should_fail.cold+0x5/0xa [ 2985.707536] __alloc_pages_nodemask+0x182/0x600 [ 2985.707967] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2985.708520] ? find_get_entry+0x2c8/0x740 [ 2985.708905] ? lru_cache_add+0x45c/0x800 [ 2985.709292] alloc_pages_current+0x187/0x280 [ 2985.709706] __page_cache_alloc+0x2d2/0x360 [ 2985.709752] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1818 sclass=netlink_xfrm_socket pid=13700 comm=syz-executor.0 [ 2985.710109] pagecache_get_page+0x2c7/0xc80 [ 2985.710134] ioctx_alloc+0x6cd/0x1e60 [ 2985.712667] ? aio_poll_complete_work+0xa00/0xa00 [ 2985.713132] __x64_sys_io_setup+0xc4/0x1f0 [ 2985.713527] do_syscall_64+0x33/0x40 [ 2985.713876] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2985.714349] RIP: 0033:0x7f300c1a9b19 [ 2985.714688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2985.716366] RSP: 002b:00007f300971f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 2985.717061] RAX: ffffffffffffffda RBX: 00007f300c2bcf60 RCX: 00007f300c1a9b19 [ 2985.717725] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000002d47 [ 2985.718377] RBP: 00007f300971f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2985.719016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2985.719671] R13: 00007ffdcc09d2af R14: 00007f300971f300 R15: 0000000000022000 [ 2985.734396] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'. [ 2985.754422] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=96 sclass=netlink_xfrm_socket pid=13705 comm=syz-executor.1 23:15:47 executing program 4: r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58010b001a0001000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) readv(r0, 0x0, 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)='system_u:object_r:syslogd_var_lib_t:s0\x00', 0x27, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000001400)=@IORING_OP_FSYNC={0x3, 0x1, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x44001}, 0x0) 23:15:47 executing program 0: perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580100001a0801000000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="ac1414aa00000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c0014007368613235360000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000001c00170000000000000000000000000000000000000000000000008000"/272], 0x158}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000013c0)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/94, 0x5e}], 0x2, 0x7, 0x6) 23:15:47 executing program 6: r0 = pidfd_open(0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0x9, &(0x7f00000017c0), 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10018, 0x0, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0x0) mount$9p_xen(&(0x7f0000000680), &(0x7f00000006c0)='./file0/file0/file0\x00', &(0x7f0000000700), 0x100000, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=xen,posixacl,fscache,cache=loose,mmap,posixacl,afid=0x0000000000000800,cache=none,version=9p2000.L,access=', @ANYRESDEC, @ANYBLOB="2c7375626a5f726f6c653d002c7375626a5f747970653d002c7063723d30303030303030303030303030303030303035392c736d61636b6673726f6f743d2f665e2c636f6e746578743d726f6f742c733a2c008df1a8028dbb246f624cc1cc026b8c3d260296631a29d62593f328d65d9087d833ba1a38086d1b094eee89349c85ccf8e654606c6bbf78284b21e53a36d70c0abd7a2cc111cd9d7fa5334fcb427862653f078019a26bc58dbb90eb4c909a2f02355be56a8af49e96a5bc7faebaee5a85eb0999efd8d0a8d66afdc1794dbbb4a993793400aa9675ad9c3311a4f631c22255d6"]) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000280)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000240)='./file0/file0\x00', 0xe5, 0x840, 0x23456, {0x0, r2}}, 0x8) ioctl$CDROMREADTOCENTRY(r1, 0x5306, &(0x7f0000000580)={0x4, 0x5, 0x8, 0x2, @lba=0x8001}) stat(&(0x7f0000000200)='./file0/file0/file0\x00', &(0x7f0000000500)) process_vm_readv(0x0, &(0x7f0000001a40)=[{&(0x7f00000001c0)=""/31, 0x1f}, {&(0x7f0000000140)=""/123, 0x7b}, {&(0x7f0000001980)=""/146, 0x92}], 0x3, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/101, 0x65}, {&(0x7f0000002240)=""/183, 0xb7}, {0x0}, {&(0x7f0000001c40)=""/145, 0xfffffffffffffe51}, {&(0x7f0000002a80)=""/102400}, {&(0x7f0000001e40)=""/9, 0x9}, {&(0x7f0000001b00)=""/36, 0x2e}, {&(0x7f00000002c0)=""/237}, {&(0x7f0000000100)=""/3, 0x37}], 0x7, 0x0) io_setup(0x2d47, &(0x7f0000000000)) (fail_nth: 45) 23:15:47 executing program 7: r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x3, 0x208200) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000040)) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000080)) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000000c0)={0x0, 0x1, r0, 0x0, 0x80000}) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000100)=0xfffff000, 0x4) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000540)={0x1, 0x0, 0x1a, 0x13, 0x5a, &(0x7f0000000140)}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000580), 0x101102, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f00000005c0)={0x0, 0x0, "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", "9cb1133ce0ad66c426a12b770624a66084d99c41988be578eac9a999c933a1ddb8b8884e07a8353aa3f178ece65fee04a4532fd33d081610df80080afca5873eebb64e5cee300aaca5e2524733e36f3a0a8f98d3c3958b707b3c07bc284fdc623f628c54c8c8c4b7624dc40ac6d7b2a9e4468b981238d542b2e6f42a9c0de9fcc53cc7ad4a397d004b6514f9df84cdd4d2f2caab0fd29a4a4f9c6fffc6cc0dc1fb6d7d04dd3a2bb5cddb085ec7da4d1427842c17d7082c0a07e677bfce9d95548076ff7f84e6599b2aba86cafa2f9bac0bdbefa9105f5233ae4b0db7b7dfd05aa886e968d503dd6fc76ee35e44682bbb49752f1dfeaf1980584a3e65af23ef35f5e92151cf764629896921b024fba66df19beb20b58ffcef703cc110b3a43f8fa445c30a119f62124352ac1feb9e120fb774430931507216d17ae95d1058badd50d66020896cbc0f7cd6851d958a20fa59314b74de10498bddc53ef6fb07a60e8ac611a86aa2c0e96c89132ddf5877d6403814da5557baca8246a7449f8f040867b2719ff3842c2d151b393b42ba2034bd256e94a4a363f6747bc3f30fa6de5e0cfeba0a450fe0c6df07f77fb56ce8b1162d46470f78d69e2a403822c9202a0957bc0937ee464e8294f3ea94e2d115a4617435025fe7497d28189873a29190d1c6cd0a99dc72c15d9e9508afb219d93fb7ed04dc3cc378ee363f5d72e8cc09f2508bd745fac0b3b41f0f2060cf4b6de06e26bdc39f5126bc193dec060ff35c1f854de1692ff4dd43cb24ff0380323bad1c44a163cd51df366ea2b7b860644769b8f5c04ddf7ef7106b652cab7a2875b884339ca9c4db29d3dc960153e4b4d7bcac6d6d2b2145d4702c083c451ba2682be82707aa34501babb31522dd6080352f8fc9871c838a925ebcfa328ea48d94a85b9786afa809950cae1e2635e1c9f90beb0b825dc4af4f08d8c6c3f7d67ee1e8eda5d27da0d1805b03e6c31fcf91ce2813a2810f10d42f39ecee4afefa7cc90e50e3541b6fc3890069881d86a2cccedbe12822803bdce895e33c1177f76f6563c49178196b76bd10f90e94ce7cc0dbd4ad34f2e217677946c93f9d244d36e031777ca3ae4e26cbba9b96ceeefd64a0ee576ea541aaf8ec5077a007e636aa9f67fa75f6f2c882288c8fd8dbb6e2518de43306ac7766abc1a6a55100fb208c1f91dfe712bffcf8fe505ba9cbdbcf6a5e6aa1a5846c200b04b33dfd47254e8b22c958978d22ba1e3445acee18efe95b310d70ab31184997625efd60340e7b7290eda3d2d3b86df5a064d8a55842e65e6be57fbcb70f1c651911e2333cbbbf01c4523c367f606d0e3a2ccd17bdbeff7d8d6caefe4d3c2060bbece41614a37746670f61287dd667ca9fb17f9433e98efe8431c0c18347a09cf19e1ba2c46041c3018b014fbdc7239fd25c11a730211ed5cd72617e9bbe294c3c9c18f08d493b6471f102f47c015bee06a48701626745784038ed80b491f59da95fae852bb1c0130902638c700529f47615681014aa78c67c6635050ed36489dfc62197888ecfbc9144d138e3e93bdf99f8e602c4e9c72a7e701cb72d0c7fafad1d5f7b099b273c4acc905e6924bd46c81ef02a045618ababa8163901bd179861006aabf1992225084e51120eff6a29cdd000b5189572c3dc49e2641fb33665050cca0451d36b5b16ef181c667ceb4538f5a8e386206f97be71bfaa61a1a6417e67350a5cd96068a87593b6a9828c3b0b6e0207f37423ad75f7d9e8450061fa285bacb122d77722a6e0c846702b5135a89fbd41d8a52a3acfec9783ac827673a8ab23d49e069f00bdbb1733fc3b90a9a74083db105cda098d849483038dd68a27f292d1005ce30e86901b429c23557e9d12e8cc0cce7d8feeea2a850cace1128959527a870b19dd2a40f7ad1f7a49229ad9d4b566044eaa903e79c31bfb50b42663388326121fa85bf5edbf657c334a6a48b42e6a07ffc82ba13a36a0141caa973fbff8113a01b813a61d0d2cca3f3f24f1d94662d4eab0093c54fe8975aa2cd0722201b038219154bb31f4231cab34b561b696e0213dcac5b8959d888687eff975f2ef09d5ab926116094dcc1cbfda872a554dfa463492751920c5cff319ef9909cf37156fe7b49a19c9aca0b2f6025f010104f40836e308269c80568d906b468bd2f9fc98a7ef8d0c2217e41a90b09f76c3e1939e842c6c6cb964701c9c4b958c56977f88a34219eeac115a6b57753ca686c5ba8e5a684047519e8a3cc0461db9b4ac2c4d917e1aef3ae84c304bb46f9b00829ba6e1e74f8bbf926c48c686beb2ca62ffa168c09c9333f6c576e95658ad659aeb6c8a5fe04976a1515b19dca918cee0df2a1a08ca8e2dab3bca0892bfff4fd3a289017e1e48ab2ce190531f05458861d432907bf4da7438e7c4554425b674e7ea7862a00270725f01a3cc595214ddc031085e87965616ffc146cd4f0eeaa0f6452181563a78500a0ae3b421dbf1d646e61c6c3de0c72b2fc43a1ce6c099bee7cd8832c3fd7d7de95fd717fc0e290653d760634dd3204203fc41d2c960ee6f59196c3065614cb684b98a5c0f17d58020baf4072ca2002363e7fc57a8b998944a0ca3351839f2d6f112bb6580d0e958a99d32b10148098ec2c9dc7168e6dafb8d525788606bb272e76ac2a3f36092709f893ba79fa266bfbbcefcf16ec6428edabfd9aaf645301737839b011048eb7f65f7cf7a11effc8c12c4a6dab7ee92e4daae5db908f2f5133a571ddc92ec117ad7debc672bbe15f6cba72ab3eef9dafaee6523dd21ba6e9e903337797ca85d3a9bfa0921be96ef30d8db35ed37a2064347c730d08928d18db713def0648fcde3b13147d994fc57867cd44a23d812b437381bd1cc757935c5b5a56f67ec59e39b6f20ee1a877f2f72a1060b0ccc5dc5bfe674152a290568becb898431cc3e52dd782fc5ff917b6a9983a07865e33a6c227a67ef867c46c3c5f35600ecf0b189d0aabaf357d031039e77a408bec482d1ed4db1d315b928e589e54f5a47b7f4b9d4f825f947156c8dca5701fb7343692373033e0d68130c5ccb2fd76a4787fa1dd90d62621cc3e4f14271a2db103eb7cfb13af35137ba59419b174e84edf870a33e11283fdbd4f82ddd5f6ba2d24b2ded94157ec0a3b7b67da862136eb171a0c33df98fcee379b4ed6464061c8ed22a0df82507856902080c908134f511974f70e62372e1399b17567cc8811c70b064dea0863a32c5f7dca884670d286a291e9a150b6aab4cc150ee6dad79fbb38ca3ceca85e8828f1cf8f28e7344d2645ee13a85f0efd39cc17f1c677f1157d33fb6df49239ab01c3909cc74a467559a40d410b30997d32c664372f2892d72e7ac8a70709d32edb7554dafedfe4ebc04ccee8824c5ad1520e8da6be886262223a7a56312ee65555ea862231283e15d0a8a18ea442ef8453a0a132fbfb22c2f1301208e68e6b0987a56b6bbe3552d075ce1270f784e6ca55380c4e70465f3bfedd3d36c309169b0a046876b1447220f9633de9e8c1e51255f461e7639775f05dc78b42f9efcd33ac428aacb24e800082dd7bda972eff4829659fe951e55280eac0029344a94802cea2c902a91d3e65dae5dc1deb67f42a15d840dd3732b92c016630319897a2f47cc0630ef7ea1e5f3775be9dd6ac58f0941250b28ca6aa93209066425814c21bf5cc5930cd37b5d02bb620c99907a6a734519918f4849ef8a2dacf40c49ceda6448a59c092798f8945f408f25e0908b4c743785bf50f30a5a886291ad6f99dad83f26519836720a58ef62fa83dc42b364e7da13fca6b2fc464045f73b65ab1d7ec281cdd82215b3181fc58af03923da0868ac5a5532885debccdeb2155d2a21815e7b654dcc54bf3b76e18ca764568ab1c60dd451c215439552005651a2ca2cb9396ba2e9a511e2a68cd7968d3c005ef0fea91aec3dc6c31146e4a76ee366402c3df09a99ac6cda15061da4684672d45c01e2596d8afd76b8a9dc4a56f3353fe6581401b635879a4332b7264113194913c180f3945385be73c5a169e102714af90b49319caaff5fbbc959774b48f32e5b5a741c0fd55497ceb21f41ad1fcaac306b22c115f6567259b34c470918b47a272699930ab7a193ac21020f5aabc8131a696c29133394c66fb86a9c179e5e6c7799bf42b91748c9de97a54143a676f3cf9df0a788a10d0796861555ab45fc7e49e505f3c06250879ac5aa35fb8d6b10915db55c4853814462b8ba67d7db0a40426939e64ed4f376e2e31c459f95c9ace8592930e6d5a3734e1f6bea9b809a1067c34d9b619cd240f5a8ac66ff73ed99d947b564fe426ace1ff26ef420bc4f0b94ad01d79ffea02cc7e8da89d5f9b02374a3884e6db5ac0c0ceb877ad774445a9f2c768a3b2d948c76bce6e6c43de7540d3c6b4c187d538dec4b824bdbd0f7f4e1520ade4ff1d20d0cbbf38ec1dfc8201888eb9faee3bcb2462b74fdf82c626c0ab479f53441891688bcb765d08447fb462d568812ab9c940a080adf791f3bd1553f7595f47ddcc6cf761d8f1e63c01ec93d2ccb1534754a8441a43fd1be11ea38e82f80efd1909835427a229f791f61c7ef820f1b595be5e7db55d0168b19b884c9e275ac3b5edccdc44a67d670b5e27f68bad11dc0df4b6545dd9f22e1492d93c36d25d799d2eab49317a74f469d18d2e89125bd774feb60ba329c9f224df50186a10a9786a0569afea583514aded16a0f134fa4f3bedba3a97581ed2b8361ea8177da1083f9415f0d42d91ca2a0fe940ace60304c0f3b194e537423c59cd753b6565889df4064d4d0f2f12e42112431d1eda38bbccbe814295f5cd434b42421fbe25929ab5a755b2276caf12d6c48c51eb62f2bbbdbcc4940e2f878eacd5abdc721ebdc976a1059ac71ece2eb6934dd9f711140f3dd979029ed68d811921c783d593ca16acc43fca483525f9c6a41555aaa44774643ea4c818a843a53f4468760838cc6bcec0806e9eab07bde9f3321f1f3f6a84102cd953760610634dd2d7c3faa73e8658abde30b86214598d418cb846af5c7e4a06870c9e9c2ec4cc4e7fed8dc52880effeab00af02d290b32df53b7e2e95d19ca020e55657c5f5c8b203ba3f66123986aa0bfbfef1517b7d86cbb13b25eb0b4f64761cbf7dd59b6b207c2e1a630fd028d04e3c5b452e7115e761e081b559bf4ae605743c512ad7e4ea6d133a98ca22be893d1eeb23555855728c7a9494f0fd6b86660e39d4d3f36880b753ba8f15cc04852892f27a7365f3edb96291339683025565bdcf74dbcd9df4a86e77ec0021201e95384b7ae48a032aaa464dd081f5d1c126f70a17b7ec10875f5ce50df86005dcca604e75b09814f3a74dee895386351f71010c863d0b6b0f4739687e874"}) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f00000015c0)={r2, 0x6}) ioctl$RTC_WIE_OFF(r0, 0x7010) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f00000026c0)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002680)={&(0x7f0000002600)={0x5c, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xda64, 0x6a}}}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x100}, @NL80211_ATTR_SSID={0x1d, 0x34, @random="f7829eaada78724724f7cf84f0530764a74dededbf16625475"}, @NL80211_ATTR_PMKID={0x14, 0x55, "dc3b4a495ffcc7175d8c4fb9b6e5824d"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004}, 0x10) socketpair(0x11, 0x2, 0x5, &(0x7f0000002700)={0xffffffffffffffff}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000002800)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000027c0)={&(0x7f0000002780)={0x20, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0x7, 0x5}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) openat(r0, &(0x7f0000002840)='./file0\x00', 0x400000, 0x1f) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f0000002880)={0x0, 0xd10, [0xffff, 0x10001, 0x9, 0x3e, 0x0, 0x101]}) recvmmsg$unix(r0, &(0x7f0000007380)=[{{&(0x7f00000028c0), 0x6e, &(0x7f0000002c00)=[{&(0x7f0000002940)=""/55, 0x37}, {&(0x7f0000002980)=""/175, 0xaf}, {&(0x7f0000002a40)=""/95, 0x5f}, {&(0x7f0000002ac0)=""/90, 0x5a}, {&(0x7f0000002b40)=""/170, 0xaa}], 0x5, &(0x7f0000002c80)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0}}, {{&(0x7f0000002d80), 0x6e, &(0x7f0000003100)=[{&(0x7f0000002e00)=""/91, 0x5b}, {&(0x7f0000002e80)=""/57, 0x39}, {&(0x7f0000002ec0)=""/85, 0x55}, {&(0x7f0000002f40)=""/52, 0x34}, {&(0x7f0000002f80)=""/79, 0x4f}, {&(0x7f0000003000)=""/107, 0x6b}, {&(0x7f0000003080)=""/112, 0x70}], 0x7, &(0x7f0000003180)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{0x0, 0x0, &(0x7f0000003580)=[{&(0x7f0000003200)=""/47, 0x2f}, {&(0x7f0000003240)=""/202, 0xca}, {&(0x7f0000003340)=""/154, 0x9a}, {&(0x7f0000003400)=""/29, 0x1d}, {&(0x7f0000003440)=""/9, 0x9}, {&(0x7f0000003480)=""/237, 0xed}], 0x6, &(0x7f0000003600)}}, {{&(0x7f0000003640), 0x6e, &(0x7f0000003ec0)=[{&(0x7f00000036c0)=""/52, 0x34}, {&(0x7f0000003700)=""/203, 0xcb}, {&(0x7f0000003800)=""/232, 0xe8}, {&(0x7f0000003900)=""/58, 0x3a}, {&(0x7f0000003940)=""/252, 0xfc}, {&(0x7f0000003a40)=""/204, 0xcc}, {&(0x7f0000003b40)=""/224, 0xe0}, {&(0x7f0000003c40)=""/209, 0xd1}, {&(0x7f0000003d40)=""/201, 0xc9}, {&(0x7f0000003e40)=""/128, 0x80}], 0xa, &(0x7f0000003f80)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}}, {{&(0x7f0000003fc0), 0x6e, &(0x7f00000072c0)=[{&(0x7f0000004040)=""/191, 0xbf}, {&(0x7f0000004100)=""/115, 0x73}, {&(0x7f0000004180)=""/4096, 0x1000}, {&(0x7f0000005180)=""/81, 0x51}, {&(0x7f0000005200)=""/4096, 0x1000}, {&(0x7f0000006200)=""/186, 0xba}, {&(0x7f00000062c0)=""/4096, 0x1000}], 0x7, &(0x7f0000007340)=[@cred={{0x1c}}], 0x20}}], 0x5, 0x0, &(0x7f00000074c0)) fsconfig$FSCONFIG_SET_PATH_EMPTY(r4, 0x4, &(0x7f0000007500)='\x00', &(0x7f0000007540)='./file0\x00', r1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007580)={{{@in=@broadcast, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000007680)=0xe8) fchown(r6, r7, r5) [ 2985.873471] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2074 sclass=netlink_xfrm_socket pid=13717 comm=syz-executor.0 [ 2985.896235] FAULT_INJECTION: forcing a failure. [ 2985.896235] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2985.897293] CPU: 1 PID: 13720 Comm: syz-executor.6 Not tainted 5.10.216 #1 [ 2985.897867] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 2985.898565] Call Trace: [ 2985.898794] dump_stack+0x107/0x167 [ 2985.899109] should_fail.cold+0x5/0xa [ 2985.899446] __alloc_pages_nodemask+0x182/0x600 [ 2985.899831] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 2985.900351] ? find_get_entry+0x2c8/0x740 [ 2985.900691] ? lru_cache_add+0x45c/0x800 [ 2985.901034] alloc_pages_current+0x187/0x280 [ 2985.901401] __page_cache_alloc+0x2d2/0x360 [ 2985.901754] ? pagecache_get_page+0x27d/0xc80 [ 2985.902136] pagecache_get_page+0x2c7/0xc80 [ 2985.902492] ioctx_alloc+0x6cd/0x1e60 [ 2985.902815] ? aio_poll_complete_work+0xa00/0xa00 [ 2985.903240] __x64_sys_io_setup+0xc4/0x1f0 [ 2985.903591] do_syscall_64+0x33/0x40 [ 2985.903902] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 2985.904322] RIP: 0033:0x7f300c1a9b19 [ 2985.904625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2985.906102] RSP: 002b:00007f300971f188 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 2985.906715] RAX: ffffffffffffffda RBX: 00007f300c2bcf60 RCX: 00007f300c1a9b19 [ 2985.907302] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000002d47 [ 2985.907872] RBP: 00007f300971f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 2985.908450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2985.909030] R13: 00007ffdcc09d2af R14: 00007f300971f300 R15: 0000000000022000 [ 3000.854136] syz-fuzzer invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 3000.856535] CPU: 0 PID: 8364 Comm: syz-fuzzer Not tainted 5.10.216 #1 [ 3000.857699] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3000.859180] Call Trace: [ 3000.859677] dump_stack+0x107/0x167 [ 3000.860341] dump_header+0x106/0x655 [ 3000.861019] oom_kill_process.cold+0x10/0x15 [ 3000.861818] out_of_memory+0x1149/0x1440 [ 3000.862570] ? oom_killer_disable+0x280/0x280 [ 3000.863390] ? mutex_trylock+0x237/0x2b0 [ 3000.864125] ? __alloc_pages_slowpath.constprop.0+0xa72/0x2170 [ 3000.865192] __alloc_pages_slowpath.constprop.0+0x1b63/0x2170 [ 3000.866276] ? lock_acquire+0xf7/0x470 [ 3000.866987] ? warn_alloc+0x190/0x190 [ 3000.867716] __alloc_pages_nodemask+0x51d/0x600 [ 3000.868570] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 3000.869654] ? find_get_entry+0x2c8/0x740 [ 3000.870419] alloc_pages_current+0x187/0x280 [ 3000.871216] __page_cache_alloc+0x2d2/0x360 [ 3000.872017] pagecache_get_page+0x2c7/0xc80 [ 3000.872808] filemap_fault+0x177d/0x2210 [ 3000.873565] ? read_cache_page_gfp+0x30/0x30 [ 3000.874368] ? replace_page_cache_page+0x1200/0x1200 [ 3000.875289] ? count_memcg_event_mm.part.0+0x10f/0x2f0 [ 3000.876251] ext4_filemap_fault+0x87/0xc0 [ 3000.877004] __do_fault+0x113/0x410 [ 3000.877671] handle_mm_fault+0x1e53/0x3500 [ 3000.878448] ? ep_read_events_proc+0x3d0/0x3d0 [ 3000.879281] ? __pmd_alloc+0x5e0/0x5e0 [ 3000.880005] ? vmacache_find+0x55/0x2a0 [ 3000.880739] do_user_addr_fault+0x56e/0xc60 [ 3000.881539] exc_page_fault+0xa2/0x1a0 [ 3000.882244] ? asm_exc_page_fault+0x8/0x30 [ 3000.883010] asm_exc_page_fault+0x1e/0x30 [ 3000.883765] RIP: 0033:0x4666e0 [ 3000.884355] Code: Unable to access opcode bytes at RIP 0x4666b6. [ 3000.885438] RSP: 002b:000000c0010af7f0 EFLAGS: 00010246 [ 3000.886396] RAX: 0000000000000000 RBX: 000000000000038c RCX: 00000000004666e0 [ 3000.887685] RDX: 0000000000000080 RSI: 000000c0010af840 RDI: 0000000000000003 [ 3000.888967] RBP: 000000c0010afe40 R08: 0000000000000000 R09: 0000000000000000 [ 3000.890250] R10: 000000000000038c R11: 0000000000000246 R12: 0000000000000003 [ 3000.891545] R13: 000000c002c57e00 R14: 000002bb06844f04 R15: ffffffffffffffff [ 3000.893006] Mem-Info: [ 3000.893486] active_anon:20428 inactive_anon:59569 isolated_anon:0 [ 3000.893486] active_file:24 inactive_file:19 isolated_file:0 [ 3000.893486] unevictable:0 dirty:0 writeback:0 [ 3000.893486] slab_reclaimable:9648 slab_unreclaimable:208819 [ 3000.893486] mapped:69634 shmem:137 pagetables:2107 bounce:0 [ 3000.893486] free:2808 free_pcp:50 free_cma:0 [ 3000.898639] Node 0 active_anon:81712kB inactive_anon:238276kB active_file:96kB inactive_file:76kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278536kB dirty:0kB writeback:0kB shmem:548kB writeback_tmp:0kB kernel_stack:4992kB all_unreclaimable? yes [ 3000.902101] Node 0 DMA free:6504kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3000.905994] lowmem_reserve[]: 0 1616 1616 1616 [ 3000.906730] Node 0 DMA32 free:4728kB min:9212kB low:10864kB high:12516kB reserved_highatomic:0KB active_anon:81712kB inactive_anon:238276kB active_file:88kB inactive_file:36kB unevictable:0kB writepending:0kB present:2080640kB managed:1660476kB mlocked:0kB pagetables:8428kB bounce:0kB free_pcp:200kB local_pcp:0kB free_cma:0kB [ 3000.911014] lowmem_reserve[]: 0 0 0 0 [ 3000.911638] Node 0 DMA: 0*4kB 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 0*128kB 1*256kB (U) 0*512kB 0*1024kB 1*2048kB (M) 1*4096kB (M) = 6504kB [ 3000.913879] Node 0 DMA32: 524*4kB (UME) 176*8kB (ME) 52*16kB (UME) 12*32kB (M) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4720kB [ 3000.916061] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3000.917354] 184 total pagecache pages [ 3000.917926] 0 pages in swap cache [ 3000.918481] Swap cache stats: add 0, delete 0, find 0/0 [ 3000.919310] Free swap = 0kB [ 3000.919771] Total swap = 0kB [ 3000.920258] 524158 pages RAM [ 3000.920716] 0 pages HighMem/MovableOnly [ 3000.921338] 105062 pages reserved [ 3000.921966] Unreclaimable slab info: [ 3000.923142] Name Used Total [ 3000.924066] pid_3 7KB 7KB [ 3000.924877] pid_2 69KB 90KB [ 3000.925708] IEEE-802.15.4-MAC 63KB 63KB [ 3000.926537] IEEE-802.15.4-RAW 63KB 63KB [ 3000.927370] p9_req_t 8KB 8KB [ 3000.928204] fib6_nodes 28KB 28KB [ 3000.929029] ip6_dst_cache 45KB 45KB [ 3000.929833] PINGv6 63KB 63KB [ 3000.930662] RAWv6 409KB 409KB [ 3000.931498] UDPLITEv6 62KB 62KB [ 3000.932369] UDPv6 62KB 62KB [ 3000.933224] tw_sock_TCPv6 7KB 7KB [ 3000.934045] TCPv6 62KB 62KB [ 3000.934855] scsi_sense_cache 8KB 8KB [ 3000.935694] sd_ext_cdb 3KB 3KB [ 3000.936516] virtio_scsi_cmd 16KB 16KB [ 3000.937352] sgpool-128 59KB 59KB [ 3000.938177] sgpool-64 63KB 63KB [ 3000.939008] sgpool-32 159KB 220KB [ 3000.939814] sgpool-16 135KB 135KB [ 3000.940643] sgpool-8 78KB 78KB [ 3000.941471] io_kiocb 300KB 318KB [ 3000.942299] mqueue_inode_cache 62KB 62KB [ 3000.943144] nfs_commit_data 15KB 15KB [ 3000.943981] nfs_write_data 47KB 47KB [ 3000.944781] jbd2_inode 7KB 7KB [ 3000.945607] ext4_system_zone 7KB 7KB [ 3000.946432] ext4_io_end_vec 7KB 7KB [ 3000.947270] ext4_bio_post_read_ctx 15KB 15KB [ 3000.948160] kioctx 31KB 31KB [ 3000.948985] aio_kiocb 7KB 7KB [ 3000.949789] bio-2 4KB 4KB [ 3000.950616] fasync_cache 7KB 7KB [ 3000.951453] pid_namespace 7KB 7KB [ 3000.952282] posix_timers_cache 15KB 15KB [ 3000.953121] rpc_buffers 31KB 31KB [ 3000.953917] rpc_tasks 3KB 3KB [ 3000.954747] UNIX 248KB 320KB [ 3000.955588] ip4-frags 15KB 15KB [ 3000.956413] UDP-Lite 63KB 63KB [ 3000.957239] tcp_bind_bucket 8KB 8KB [ 3000.958070] inet_peer_cache 4KB 4KB [ 3000.958870] xfrm_state 64KB 64KB [ 3000.959707] ip_fib_trie 8KB 8KB [ 3000.960542] ip_fib_alias 19KB 19KB [ 3000.961367] ip_dst_cache 72KB 100KB [ 3000.962192] PING 62KB 62KB [ 3000.963021] RAW 156KB 156KB [ 3000.963823] UDP 259KB 315KB [ 3000.964649] tw_sock_TCP 15KB 15KB [ 3000.965468] request_sock_TCP 7KB 7KB [ 3000.966292] TCP 60KB 60KB [ 3000.967121] hugetlbfs_inode_cache 30KB 30KB [ 3000.968008] bio-1 11KB 11KB [ 3000.968809] eventpoll_pwq 27KB 27KB [ 3000.969630] eventpoll_epi 43KB 43KB [ 3000.970453] inotify_inode_mark 39KB 39KB [ 3000.971304] request_queue 60KB 60KB [ 3000.972127] blkdev_ioc 15KB 15KB [ 3000.972924] bio-0 124KB 124KB [ 3000.973754] biovec-max 926KB 1249KB [ 3000.974579] biovec-64 94KB 157KB [ 3000.975410] biovec-16 26KB 26KB [ 3000.976235] user_namespace 31KB 31KB [ 3000.977065] uid_cache 8KB 8KB [ 3000.977865] dmaengine-unmap-2 4KB 4KB [ 3000.978694] audit_buffer 7KB 7KB [ 3000.979526] skbuff_fclone_cache 112KB 112KB [ 3000.980390] skbuff_head_cache 620KB 750KB [ 3000.981216] file_lock_cache 51KB 51KB [ 3000.982035] file_lock_ctx 7KB 7KB [ 3000.982834] fsnotify_mark_connector 20KB 20KB [ 3000.983737] net_namespace 178KB 201KB [ 3000.984562] task_delay_info 110KB 119KB [ 3000.985387] taskstats 100KB 100KB [ 3000.986225] proc_dir_entry 515KB 536KB [ 3000.987053] pde_opener 27KB 27KB [ 3000.987857] seq_file 67KB 67KB [ 3000.988682] sigqueue 94KB 94KB [ 3000.989514] shmem_inode_cache 1298KB 1383KB [ 3000.990334] kernfs_iattrs_cache 231KB 231KB [ 3000.991184] kernfs_node_cache 6034KB 6050KB [ 3000.992016] mnt_cache 256KB 275KB [ 3000.992845] filp 1111KB 1785KB [ 3000.993687] names_cache 5724KB 7288KB [ 3000.994520] hashtab_node 278KB 278KB [ 3000.995351] ebitmap_node 1149KB 1149KB [ 3000.996176] avtab_node 4976KB 4976KB [ 3000.997003] avc_node 35KB 35KB [ 3000.997826] lsm_inode_cache 3289KB 3387KB [ 3000.998662] lsm_file_cache 79KB 192KB [ 3000.999497] key_jar 47KB 47KB [ 3001.000320] uts_namespace 15KB 15KB [ 3001.001144] nsproxy 7KB 7KB [ 3001.002000] vm_area_struct 1116KB 1396KB [ 3001.002798] fs_cache 63KB 68KB [ 3001.003640] files_cache 239KB 239KB [ 3001.004464] signal_cache 422KB 494KB [ 3001.005307] sighand_cache 379KB 450KB [ 3001.006138] task_struct 1410KB 1890KB [ 3001.006985] cred_jar 99KB 184KB [ 3001.007796] anon_vma_chain 332KB 381KB [ 3001.008636] anon_vma 313KB 334KB [ 3001.009467] pid 45KB 82KB [ 3001.010309] Acpi-Operand 140KB 174KB [ 3001.011132] Acpi-ParseExt 27KB 27KB [ 3001.011976] Acpi-Parse 225KB 241KB [ 3001.012782] Acpi-State 122KB 137KB [ 3001.013610] Acpi-Namespace 20KB 20KB [ 3001.014442] numa_policy 3KB 3KB [ 3001.015283] trace_event_file 176KB 176KB [ 3001.016112] ftrace_event_field 280KB 280KB [ 3001.016932] pool_workqueue 40KB 40KB [ 3001.017769] task_group 16KB 16KB [ 3001.018594] mm_struct 302KB 504KB [ 3001.019432] vmap_area 291KB 291KB [ 3001.020259] page->ptl 324KB 378KB [ 3001.021088] kmemleak_scan_area 167KB 199KB [ 3001.021901] kmemleak_object 631591KB 631591KB [ 3001.022740] kmalloc-8k 4944KB 5088KB [ 3001.023599] kmalloc-4k 7312KB 8896KB [ 3001.024433] kmalloc-2k 5276KB 6080KB [ 3001.025270] kmalloc-1k 2590KB 3520KB [ 3001.026094] kmalloc-512 21300KB 21300KB [ 3001.026901] kmalloc-256 1332KB 1416KB [ 3001.027752] kmalloc-192 673KB 712KB [ 3001.028586] kmalloc-128 540KB 592KB [ 3001.029438] kmalloc-96 347KB 652KB [ 3001.030287] kmalloc-64 919KB 1376KB [ 3001.031115] kmalloc-32 71208KB 71208KB [ 3001.031916] kmalloc-16 342KB 372KB [ 3001.032736] kmalloc-8 342KB 342KB [ 3001.033558] kmem_cache_node 47KB 47KB [ 3001.034383] kmem_cache 78KB 78KB [ 3001.035205] oom-kill:constraint=CONSTRAINT_NONE,nodemask=(null),cpuset=/,mems_allowed=0,global_oom,task_memcg=/system.slice/ssh.service,task=syz-fuzzer,pid=8364,uid=0 [ 3001.040006] Out of memory (oom_kill_allocating_task): Killed process 253 (syz-fuzzer) total-vm:1240660kB, anon-rss:282444kB, file-rss:0kB, shmem-rss:0kB, UID:0 pgtables:984kB oom_score_adj:0 [ 3001.205444] syz-executor.3: page allocation failure: order:0, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz3,mems_allowed=0 [ 3001.206600] CPU: 1 PID: 13678 Comm: syz-executor.3 Not tainted 5.10.216 #1 [ 3001.207148] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 3001.207812] Call Trace: [ 3001.208041] dump_stack+0x107/0x167 [ 3001.208345] warn_alloc.cold+0x95/0x18a [ 3001.208672] ? zone_watermark_ok_safe+0x260/0x260 [ 3001.209062] ? queue_oom_reaper+0x86/0x1e0 [ 3001.209416] ? wait_for_completion_io+0x270/0x270 [ 3001.209812] __alloc_pages_slowpath.constprop.0+0x1c33/0x2170 [ 3001.210297] ? lock_acquire+0xf7/0x470 [ 3001.210613] ? warn_alloc+0x190/0x190 [ 3001.210935] __alloc_pages_nodemask+0x51d/0x600 [ 3001.211321] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 3001.211824] alloc_pages_current+0x187/0x280 [ 3001.212183] allocate_slab+0x29b/0x380 [ 3001.212510] ___slab_alloc+0x470/0x700 [ 3001.212827] ? io_issue_sqe+0x2492/0x7700 [ 3001.213165] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3001.213587] ? trace_hardirqs_on+0x5b/0x180 [ 3001.213939] ? io_issue_sqe+0x2492/0x7700 [ 3001.214277] ? kmem_cache_alloc_trace+0x305/0x320 [ 3001.214665] kmem_cache_alloc_trace+0x305/0x320 [ 3001.215042] io_issue_sqe+0x2492/0x7700 [ 3001.215379] ? io_connect+0x610/0x610 [ 3001.215686] ? mark_lock+0xf5/0x2df0 [ 3001.215990] ? lockdep_hardirqs_on_prepare+0x3e0/0x3e0 [ 3001.216408] ? lock_chain_count+0x20/0x20 [ 3001.216742] ? io_dismantle_req+0xdf/0x180 [ 3001.217101] __io_queue_sqe+0x90/0x9d0 [ 3001.217419] ? io_issue_sqe+0x7700/0x7700 [ 3001.217757] ? mark_held_locks+0x9e/0xe0 [ 3001.218083] ? rwlock_bug.part.0+0x90/0x90 [ 3001.218431] io_req_task_submit+0xbf/0x1b0 [ 3001.218769] tctx_task_work+0x21a/0x8a0 [ 3001.219100] ? io_fallback_req_func+0x430/0x430 [ 3001.219479] ? rwlock_bug.part.0+0x90/0x90 [ 3001.219820] ? lockdep_hardirqs_on_prepare+0x277/0x3e0 [ 3001.220251] task_work_run+0xe2/0x1a0 [ 3001.220566] exit_to_user_mode_prepare+0x17c/0x190 [ 3001.220958] syscall_exit_to_user_mode+0x38/0x1d0 [ 3001.221351] entry_SYSCALL_64_after_hwframe+0x67/0xcc [ 3001.221761] RIP: 0033:0x7f06de2c0b19 [ 3001.222064] Code: Unable to access opcode bytes at RIP 0x7f06de2c0aef. [ 3001.222590] RSP: 002b:00007f06db836188 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 3001.223199] RAX: 000000000000030e RBX: 00007f06de3d3f60 RCX: 00007f06de2c0b19 [ 3001.223776] RDX: 0000000000000000 RSI: 00000000000058ab RDI: 0000000000000003 [ 3001.224341] RBP: 00007f06de31af6d R08: 0000000000000000 R09: 0000000000000000 [ 3001.224907] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 3001.225477] R13: 00007ffecd0bad6f R14: 00007f06db836300 R15: 0000000000022000 [ 3001.226103] Mem-Info: [ 3001.226317] active_anon:20428 inactive_anon:59569 isolated_anon:0 [ 3001.226317] active_file:41 inactive_file:5 isolated_file:0 [ 3001.226317] unevictable:0 dirty:0 writeback:0 [ 3001.226317] slab_reclaimable:9648 slab_unreclaimable:208731 [ 3001.226317] mapped:69634 shmem:137 pagetables:2107 bounce:0 [ 3001.226317] free:2823 free_pcp:135 free_cma:0 [ 3001.228838] Node 0 active_anon:81712kB inactive_anon:238276kB active_file:164kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:278536kB dirty:0kB writeback:0kB shmem:548kB writeback_tmp:0kB kernel_stack:4992kB all_unreclaimable? yes [ 3001.230672] Node 0 DMA free:6472kB min:48kB low:60kB high:72kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 3001.232743] lowmem_reserve[]: 0 1616 1616 1616 [ 3001.233152] Node 0 DMA32 free:4820kB min:11260kB low:12912kB high:14564kB reserved_highatomic:0KB active_anon:81712kB inactive_anon:238276kB active_file:164kB inactive_file:0kB unevictable:0kB writepending:0kB present:2080640kB managed:1660476kB mlocked:0kB pagetables:8428kB bounce:0kB free_pcp:540kB local_pcp:304kB free_cma:0kB [ 3001.235445] lowmem_reserve[]: 0 0 0 0 [ 3001.235772] Node 0 DMA: 2*4kB (UM) 2*8kB (UM) 1*16kB (M) 1*32kB (M) 2*64kB (UM) 1*128kB (M) 2*256kB (UM) 1*512kB (M) 1*1024kB (M) 0*2048kB 1*4096kB (M) = 6472kB [ 3001.237038] Node 0 DMA32: 491*4kB (ME) 171*8kB (ME) 49*16kB (UME) 22*32kB (UM) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4820kB [ 3001.238168] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 3001.238834] 185 total pagecache pages [ 3001.239164] 0 pages in swap cache [ 3001.239449] Swap cache stats: add 0, delete 0, find 0/0 [ 3001.239864] Free swap = 0kB [ 3001.240335] Total swap = 0kB [ 3001.240580] 524158 pages RAM [ 3001.240822] 0 pages HighMem/MovableOnly [ 3001.241175] 105062 pages reserved [ 3001.241479] SLUB: Unable to allocate memory on node -1, gfp=0x400cc0(GFP_KERNEL_ACCOUNT) [ 3001.242136] cache: kmalloc-32, object size: 32, buffer size: 64, default order: 0, min order: 0 [ 3001.242838] node 0: slabs: 17807, objs: 1139648, free: 0 [ 3002.199405] oom_reaper: reaped process 13678 (syz-executor.3), now anon-rss:0kB, file-rss:34816kB, shmem-rss:0kB VM DIAGNOSIS: 23:16:04 Registers: info registers vcpu 0 RAX=0000000000000050 RBX=ffff88800f448000 RCX=ffffffff81f39ef4 RDX=00000000000001f7 RSI=ffffffff81f39f02 RDI=0000000000000007 RBP=00000000000101f7 RSP=ffff88800d707080 R8 =0000000000000000 R9 =0000000000006d2c R10=0000000000010000 R11=0000000000000001 R12=00000000000003e7 R13=ffffed1001e89001 R14=dffffc0000000000 R15=ffff88800f448060 RIP=ffffffff81f39f06 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 00000000 00000000 DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f6ccc77c700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f6ccc84ccb4 CR3=000000001b294000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=31343a32322036202079614d3e30333c XMM01=70756e61656c432064656873696e6946 XMM02=726f706d655420666f2070756e61656c XMM03=6d65747379732030313a31343a323220 XMM04=6456774875434142334f726f59427469 XMM05=485320415352203a3268737320323137 XMM06=206d6f726620746f6f7220726f662079 XMM07=00000000000000000000000000000000 XMM08=3a677562656420676f6c737973720000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=1ffff11008fe5ec2 RCX=ffffffff812734bf RDX=0000000000000001 RSI=0000000000000008 RDI=ffffffff856740c8 RBP=0000000000000000 RSP=ffff888047f2f600 R8 =0000000000000000 R9 =ffffffff856740cf R10=fffffbfff0ace819 R11=0000000000000001 R12=0000000000000002 R13=0000000000000000 R14=ffffffff84ff8be0 R15=0000000000000000 RIP=ffffffff812734cc RFL=00000247 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f06db836700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f4d537d8200 CR3=000000005ea04000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffff00ffffffffffffff00 XMM02=ffffff0f0e0d0c0b0a09080706050403 XMM03=696e656420737365636341002f737973 XMM04=000000030000000000005599ce4c1770 XMM05=00005599ce4c13b000005599ce4c5160 XMM06=00005599ce4c17300000000000000000 XMM07=00000000000000000000000000000000 XMM08=7269762f736563697665642f7379732f XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000